Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/5pv4V_LnFDfdv3XpbwAuAUAw0zE.roa
File: 5pv4V_LnFDfdv3XpbwAuAUAw0zE.roa (raw, json)
Hash identifier: O+agwZuWRu18HxZiizmrT1lQgFeG/ifuLXW1oz1BO0k=
Subject key identifier: E6:9B:F8:57:F2:E7:14:37:DD:BF:75:E9:6F:00:2E:01:40:30:D3:31
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C76BBD
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/5pv4V_LnFDfdv3XpbwAuAUAw0zE.roa
Signing time: Sat 01 Jan 2022 09:02:42 +0000
ROA not before: Sat 01 Jan 2022 09:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211143
IP address blocks: 91.225.12.0/23 maxlen: 23
91.225.14.0/24 maxlen: 24
37.35.54.0/24 maxlen: 24
146.66.210.0/24 maxlen: 24
62.216.76.0/22 maxlen: 22
178.157.109.0/24 maxlen: 24
188.74.130.0/23 maxlen: 23
188.74.246.0/23 maxlen: 23
188.74.245.0/24 maxlen: 24
188.119.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63400893 (0x3c76bbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69bf857f2e71437ddbf75e96f002e014030d331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:4d:ea:fc:2d:b5:29:a5:32:c1:0a:8f:3d:
16:3b:66:6e:cd:e7:c1:82:c9:cc:b3:a0:6f:ec:0f:
a1:3a:dc:3e:b9:b2:3c:5a:25:f3:24:4e:33:ba:a4:
8c:65:e6:fc:4a:ef:d1:61:1d:95:1f:99:fd:f3:cb:
c6:57:ab:33:a1:69:3a:fc:f9:ec:0a:78:f5:2d:e5:
5e:11:36:d9:ef:01:5e:1d:74:14:fa:40:b3:1d:50:
f1:75:d0:22:46:85:2c:3c:85:67:ff:20:29:29:27:
54:06:72:8d:a8:c1:04:8e:0f:d2:a9:80:3c:64:b5:
25:13:ac:dd:b4:cc:bc:db:33:6d:8d:6c:46:93:be:
2d:d7:56:7b:1a:78:f5:52:5b:8f:75:1b:2a:6b:4a:
5b:86:50:6a:19:e9:3e:94:48:70:42:55:df:55:d9:
2a:2a:1d:60:62:fa:8b:19:75:3e:b1:c2:33:92:fb:
1a:a4:d8:ff:70:28:3e:5f:b1:57:29:b7:37:48:31:
26:50:ee:72:0a:d3:33:92:2e:08:d0:0f:ef:79:87:
5e:ec:54:5c:63:e1:97:ba:77:fb:6f:c9:f3:f6:22:
d5:14:82:9a:9d:e9:d6:43:cf:d4:1a:51:97:58:8b:
2f:73:52:8b:a9:d0:b7:f0:f6:c5:4c:31:80:1e:d4:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9B:F8:57:F2:E7:14:37:DD:BF:75:E9:6F:00:2E:01:40:30:D3:31
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/5pv4V_LnFDfdv3XpbwAuAUAw0zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.54.0/24
62.216.76.0/22
91.225.12.0-91.225.14.255
146.66.210.0/24
178.157.109.0/24
188.74.130.0/23
188.74.245.0-188.74.247.255
188.119.160.0/23
Signature Algorithm: sha256WithRSAEncryption
90:75:df:d2:20:6c:4e:28:bf:82:e3:1c:39:7d:87:e5:78:a5:
98:98:28:5a:7b:e0:eb:89:91:d1:ab:2d:52:db:cf:00:d0:1a:
b8:60:f6:7c:69:e2:bf:7e:43:dc:95:d4:14:6b:96:b8:7e:82:
a5:a7:4a:b6:d9:58:56:3d:f4:96:66:b3:3d:48:08:aa:23:26:
61:7b:4e:1e:28:24:2b:e4:88:94:fc:50:b8:0c:6b:9e:a6:36:
01:b2:13:19:8c:08:42:6c:71:23:a4:6c:04:de:40:39:3a:fc:
e2:c2:2c:e8:99:4b:23:50:ef:4b:1d:b8:98:72:0c:d4:49:dd:
39:b5:1d:29:05:dd:49:97:b1:93:86:97:e9:f2:2f:89:9f:4d:
9c:ab:f0:39:89:29:75:23:ec:0a:57:43:44:5c:4b:5d:0d:48:
16:df:bf:44:98:c0:3e:4f:ab:3d:65:14:50:f2:ba:e0:43:5f:
b2:93:2f:45:32:0f:ab:99:6a:c8:53:d2:00:c9:d8:80:d9:74:
60:56:13:b1:a8:4a:32:1a:08:09:82:b5:0a:86:ca:63:f0:eb:
6e:a4:da:cc:80:db:f1:ba:6e:35:18:3e:7c:e5:3b:ad:e5:d5:
43:cd:42:8e:b0:54:4f:4b:d8:23:13:25:49:02:a4:1d:0d:5d:
78:ae:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org