Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/Hl4uJPrIxULwQXRCSdI2eCLZIBc.roa
File: Hl4uJPrIxULwQXRCSdI2eCLZIBc.roa (raw, json)
Hash identifier: KfWxsV9QsOpEuO0mvFR+vlDROGNeeHcYlMQ6p2t+lME=
Subject key identifier: 1E:5E:2E:24:FA:C8:C5:42:F0:41:74:42:49:D2:36:78:22:D9:20:17
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 072542D5
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/Hl4uJPrIxULwQXRCSdI2eCLZIBc.roa
Signing time: Sat 01 Jan 2022 04:58:32 +0000
ROA not before: Sat 01 Jan 2022 04:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42976
IP address blocks: 91.220.9.0/24 maxlen: 24
91.194.4.0/23 maxlen: 23
194.165.42.0/24 maxlen: 24
91.216.31.0/24 maxlen: 24
194.5.56.0/22 maxlen: 22
193.104.44.0/24 maxlen: 24
2a0c:c340::/29 maxlen: 29
2a0c:c340::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119882453 (0x72542d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Jan 1 04:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e5e2e24fac8c542f041744249d2367822d92017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:56:00:e6:53:20:ee:60:49:56:52:c0:41:
43:61:ae:6a:70:6c:58:c5:97:85:23:dc:7f:ad:a3:
76:d3:66:b9:85:79:8e:e0:f8:66:e3:1a:42:27:6e:
44:66:6c:ee:97:10:83:ca:5b:a6:18:86:47:09:8c:
d3:b7:31:c8:a5:43:2b:1b:b2:61:71:f0:6b:66:8e:
7c:e5:a0:94:de:ee:af:c6:7a:74:e6:df:16:c9:0d:
83:5b:6d:b7:1e:4b:73:5e:5f:22:0b:5b:ff:b0:08:
5c:cb:7d:08:aa:16:8e:ae:70:67:06:58:ad:86:3e:
63:4c:77:af:f2:66:64:f9:95:fe:bb:66:bf:de:d7:
57:8b:65:91:da:32:49:b1:82:c1:93:c9:9a:c7:64:
a1:74:fd:58:6d:c0:e7:7c:f0:67:82:89:84:5b:e3:
3d:2f:5b:92:f1:7d:7e:a6:0c:d7:83:b0:58:62:0d:
79:0c:68:73:a3:0f:b2:a6:f0:62:d7:a2:b5:5d:95:
be:68:13:8f:4f:ef:88:7d:83:9b:f8:61:54:cd:fd:
ae:10:c4:4a:23:f3:c6:f9:98:15:30:cb:7c:4b:e8:
5e:ec:16:46:3c:f4:00:eb:ea:dc:fe:05:8a:e3:59:
d1:15:47:27:c2:80:71:e2:4e:91:52:04:48:c0:0d:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:2E:24:FA:C8:C5:42:F0:41:74:42:49:D2:36:78:22:D9:20:17
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/Hl4uJPrIxULwQXRCSdI2eCLZIBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.4.0/23
91.216.31.0/24
91.220.9.0/24
193.104.44.0/24
194.5.56.0/22
194.165.42.0/24
IPv6:
2a0c:c340::/29
Signature Algorithm: sha256WithRSAEncryption
10:e9:42:ec:a5:66:52:21:0e:05:86:ae:11:19:02:54:33:01:
0f:9c:59:32:df:67:0c:49:ec:46:cf:74:1a:54:92:49:7e:f4:
97:d8:66:be:a8:0b:f7:09:13:a0:b7:1b:fb:de:42:14:69:cf:
c6:80:39:59:ac:41:66:7e:a6:09:10:20:8f:67:66:37:e5:c9:
26:30:6b:75:94:16:7c:95:4e:7f:ff:f3:ce:2e:69:02:ff:5f:
85:da:a0:11:5e:ca:42:db:40:a8:ec:7f:b9:fb:76:6e:9a:28:
19:72:48:17:20:01:a6:91:72:26:df:34:63:22:61:e9:fc:02:
07:df:fe:16:be:9e:55:05:37:c5:54:b3:4c:96:58:62:3b:8f:
f1:45:8f:2c:53:f7:3b:db:78:f6:ca:85:2b:15:3d:e2:43:b3:
56:43:10:8a:a7:17:1d:88:0a:6d:e1:d2:39:18:32:fc:7b:8c:
76:03:a4:59:15:39:23:75:63:22:8f:59:70:dd:31:38:b5:26:
e4:a0:b4:aa:95:82:fa:99:9f:24:8b:45:c9:60:84:af:ec:a2:
8b:63:7d:64:96:29:19:49:67:b3:61:3f:68:2f:63:4e:67:d3:
87:a6:93:5d:c7:aa:eb:a1:5b:9d:9c:41:16:76:1f:64:2a:fd:
9b:68:a1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org