Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouiRvfFtTs-Vr5R84ZeOxJOhn2g.roa
File: ouiRvfFtTs-Vr5R84ZeOxJOhn2g.roa (raw, json)
Hash identifier: UF/ZkzXkMQjVw1LFPLb5kAktsQ8+SldHikI8Anl6yL4=
Subject key identifier: A2:E8:91:BD:F1:6D:4E:CF:95:AF:94:7C:E1:97:8E:C4:93:A1:9F:68
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C85ED5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouiRvfFtTs-Vr5R84ZeOxJOhn2g.roa
Signing time: Sat 01 Jan 2022 09:02:43 +0000
ROA not before: Sat 01 Jan 2022 09:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212192
IP address blocks: 146.66.211.0/24 maxlen: 24
188.119.164.0/24 maxlen: 24
188.119.167.0/24 maxlen: 24
5.157.164.0/22 maxlen: 24
37.35.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63463125 (0x3c85ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2e891bdf16d4ecf95af947ce1978ec493a19f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:e8:16:a7:be:7d:06:c9:fe:e1:05:80:e0:
f2:c3:0a:eb:ed:d3:a6:79:d2:63:eb:cc:fd:b2:83:
f8:33:40:7c:4c:fe:07:12:65:6a:0e:a3:65:0e:48:
13:a1:ac:9f:e0:2b:ae:2a:55:44:4d:04:cf:b8:13:
6d:4a:24:a9:c4:68:33:42:bd:da:d8:b0:6c:6d:1e:
a0:d5:84:86:0e:13:d0:34:7f:41:09:12:45:38:de:
1b:7b:c2:0e:7d:b0:7a:c6:86:7e:6b:98:63:a8:fd:
d7:4d:a0:3a:57:8f:79:9b:47:18:d4:fc:6c:38:9c:
60:a3:aa:38:e0:94:80:e1:bf:09:65:45:c2:cf:23:
64:6d:1f:d0:26:cb:24:59:52:d2:c6:e4:28:5c:b4:
38:37:0f:85:eb:a8:ab:6f:2d:db:ef:33:49:3b:5a:
f2:d1:bd:f7:6a:e5:0d:c9:8f:f0:f3:94:e0:2a:a0:
1a:bb:57:ac:84:bd:71:ee:c3:06:e5:c4:dc:43:4e:
86:a1:aa:a0:bc:c1:1a:f7:30:36:bc:69:c7:41:c0:
c9:79:3d:66:b6:c3:7f:3a:37:af:fb:84:81:29:51:
cb:b9:af:1f:17:b0:4d:a7:48:98:b8:31:7d:ce:eb:
26:ef:1d:99:9d:e2:96:2e:c7:f3:23:cc:f4:6f:17:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:91:BD:F1:6D:4E:CF:95:AF:94:7C:E1:97:8E:C4:93:A1:9F:68
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ouiRvfFtTs-Vr5R84ZeOxJOhn2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.164.0/22
37.35.38.0/24
146.66.211.0/24
188.119.164.0/24
188.119.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:54:86:36:47:72:e2:17:61:e4:ca:89:45:ec:ce:84:f8:1f:
83:0c:4c:95:6f:1a:95:c9:5f:38:d4:57:e5:2e:ab:2e:8e:3d:
e9:8d:83:c1:a9:f0:ba:46:0e:dc:65:53:90:86:bc:e3:c0:b9:
c4:1e:58:f3:00:36:94:45:4f:4b:ac:b2:7a:6a:16:c8:36:67:
e0:35:ee:0a:c4:35:7b:18:cf:70:be:8e:a1:f3:47:47:73:c0:
9e:36:84:f0:7e:66:78:37:d3:5b:6a:5d:94:5c:b6:82:d0:de:
dc:fe:72:8a:eb:95:80:36:b3:73:1a:c6:91:33:6a:86:21:e9:
b2:3e:13:70:b2:72:ea:c0:82:fb:9a:92:c5:06:27:d0:5d:21:
9d:56:bd:15:3d:01:4d:b8:e8:5a:e3:7d:d9:54:be:1b:0e:2f:
03:8c:d5:c7:d6:7d:e6:9f:1c:e7:b8:ca:42:54:f3:eb:1e:4e:
69:1d:70:f9:a1:20:ce:93:41:a1:56:64:c6:3a:58:0e:8f:e0:
45:97:b6:a6:22:63:98:9b:5c:82:94:79:2e:66:9d:7c:78:29:
0c:49:67:58:cd:d0:23:71:72:ac:e8:ad:73:83:31:8c:13:70:
e6:89:e2:06:63:02:a7:8e:fe:9c:b4:88:90:a8:6e:17:5e:1d:
05:e8:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org