Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Trr0ENH4UzxV2xaX45_RvGfoYOg.roa
File: Trr0ENH4UzxV2xaX45_RvGfoYOg.roa (raw, json)
Hash identifier: uIiXQVJr/OWyfrfmm1Yo96b3hXnUQZYfaOVcSkBtx+o=
Subject key identifier: 4E:BA:F4:10:D1:F8:53:3C:55:DB:16:97:E3:9F:D1:BC:67:E8:60:E8
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 046D1D76
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Trr0ENH4UzxV2xaX45_RvGfoYOg.roa
Signing time: Sat 01 Jan 2022 08:57:33 +0000
ROA not before: Sat 01 Jan 2022 08:57:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 176.97.64.0/23 maxlen: 23
176.97.70.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
185.87.148.0/23 maxlen: 23
5.61.62.0/23 maxlen: 23
5.61.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74259830 (0x46d1d76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 08:57:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ebaf410d1f8533c55db1697e39fd1bc67e860e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:52:b5:41:0b:d3:ff:7a:c9:44:41:c0:5f:
19:9d:e7:33:82:44:37:e2:00:15:c4:c4:88:93:0e:
23:d5:2d:ba:46:04:45:59:ca:b7:87:8d:d7:00:35:
d4:65:f6:c2:ad:60:5c:83:9f:c3:92:6c:29:96:15:
b6:42:6c:ce:93:b0:39:9c:15:42:2d:8e:93:6c:ba:
97:39:9c:8f:2a:5c:7a:8a:8d:6a:08:56:83:98:6c:
52:73:ab:ac:aa:aa:27:ad:6d:8e:43:0a:9d:1a:66:
4c:2a:36:71:c5:c4:25:7a:ec:46:0b:b1:d6:7c:ef:
38:73:f3:f4:5b:ff:30:07:0a:99:9b:08:44:01:41:
95:1d:9e:42:89:eb:8d:8a:a7:1b:86:93:1e:c5:4b:
e2:49:fa:aa:c9:26:b5:56:f2:ae:d5:cd:00:57:40:
89:c3:32:a1:22:c1:e1:32:78:54:3e:0f:7c:8a:fe:
3f:46:e7:9d:4f:df:ff:f7:11:f3:65:58:e9:96:42:
bd:82:97:df:7c:a1:b3:1d:e5:ca:05:2c:4b:84:bb:
a8:3c:cb:c1:d3:b9:60:23:78:1a:75:3d:06:2a:46:
a6:67:ff:5f:d7:a1:fc:b4:e5:07:97:94:4e:42:c9:
09:9c:e6:eb:7c:7b:9b:b7:9c:6c:43:d7:07:13:ab:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:F4:10:D1:F8:53:3C:55:DB:16:97:E3:9F:D1:BC:67:E8:60:E8
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Trr0ENH4UzxV2xaX45_RvGfoYOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
176.97.64.0/21
185.87.148.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:1c:c2:2d:ed:0f:e1:89:d1:87:61:00:00:f5:6f:2e:a8:2f:
39:0a:a2:cf:fd:4c:01:48:62:32:bc:4a:19:7a:aa:84:20:cc:
3e:94:79:f9:d5:91:af:1d:4b:cb:74:2e:13:c8:04:b8:3a:4e:
0b:28:a5:41:27:c3:9c:d3:78:d2:ef:6e:29:7b:34:e2:56:49:
9b:16:c2:a0:1d:44:bd:3a:8a:08:2e:34:8e:a7:57:93:ad:0d:
f8:49:dc:24:2a:3d:01:2f:12:7c:69:21:ae:b8:65:f4:dc:7f:
78:32:6a:be:d1:4f:18:91:54:85:7c:65:63:a5:f2:6a:69:6b:
40:95:cd:4c:09:78:e5:d6:48:33:41:fd:de:90:32:45:e9:e0:
30:29:43:27:69:2a:d1:ef:29:9c:28:25:c6:de:97:df:67:62:
5b:08:59:3e:cf:e2:7f:bc:5b:b9:17:58:5d:f3:8b:48:6a:d3:
66:22:51:00:75:de:83:1a:3d:40:bd:da:9b:f4:f0:21:08:08:
8c:35:84:bc:ca:28:a0:71:9e:1f:a5:39:b2:39:5e:6d:87:ed:
0b:a1:75:d9:e9:d2:bd:57:f8:88:75:7b:61:06:e3:35:b3:0e:
6f:b9:d3:ab:2d:34:a3:1a:d6:59:bc:f2:50:3f:aa:d1:51:25:
16:04:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-fra.rpki-client.org