Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/4lPsi9uu2Bs35SiuGzVwzW2dTSc.roa
File: 4lPsi9uu2Bs35SiuGzVwzW2dTSc.roa (raw, json)
Hash identifier: 4r7k424t6QxAPwqvRA/IoDPwYgtGWdDngwDDmdjgh+w=
Subject key identifier: E2:53:EC:8B:DB:AE:D8:1B:37:E5:28:AE:1B:35:70:CD:6D:9D:4D:27
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 15291624
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/4lPsi9uu2Bs35SiuGzVwzW2dTSc.roa
Signing time: Sat 01 Jan 2022 07:52:57 +0000
ROA not before: Sat 01 Jan 2022 07:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 185.81.141.0/24 maxlen: 24
185.81.140.0/24 maxlen: 24
185.81.143.0/24 maxlen: 24
185.81.142.0/24 maxlen: 24
91.232.100.0/24 maxlen: 24
91.232.101.0/24 maxlen: 24
91.197.47.0/24 maxlen: 24
91.197.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355014180 (0x15291624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Jan 1 07:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e253ec8bdbaed81b37e528ae1b3570cd6d9d4d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:da:84:5c:5f:30:76:30:67:4f:1a:32:8f:
72:ff:5f:82:e1:f4:71:9d:df:f0:3b:dc:75:17:9c:
dc:67:99:7e:69:f4:09:c7:3e:e8:dd:19:40:c4:e1:
a0:4f:82:87:be:5b:11:2f:c1:ea:1f:01:de:41:aa:
21:57:19:2b:66:cb:ae:8d:e2:7d:a6:f8:45:5b:95:
99:d1:eb:45:de:b4:f9:26:2c:b6:1d:eb:f1:92:2b:
4e:cb:e7:d9:71:63:89:b2:9f:e4:ba:ef:fe:3d:7d:
46:72:81:86:46:cc:0e:0a:43:d2:b4:72:31:f6:d3:
79:38:47:71:d8:6c:59:41:db:a9:a8:9e:e0:ce:3d:
2a:08:91:b7:bf:ef:b1:ad:e4:c6:ce:00:0f:3e:02:
55:e3:7f:a7:dd:c7:bf:90:23:08:bd:74:43:3c:28:
27:fe:eb:d4:f0:56:0a:9b:03:74:f7:79:af:c1:c0:
8c:d2:c1:ee:2d:de:55:08:bd:f0:2a:86:f5:1e:6c:
88:09:bc:93:de:ea:ca:8f:0b:58:07:31:37:b8:5c:
53:6b:cc:19:24:29:e2:03:98:e9:89:4d:32:13:e7:
86:4b:f6:c6:97:d3:f8:e5:f5:a5:de:55:82:e9:f2:
46:2e:c0:f5:27:4f:aa:6d:bd:e8:3d:ba:09:be:58:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:EC:8B:DB:AE:D8:1B:37:E5:28:AE:1B:35:70:CD:6D:9D:4D:27
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/4lPsi9uu2Bs35SiuGzVwzW2dTSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.46.0/23
91.232.100.0/23
185.81.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:ef:7c:6e:b3:be:44:b8:57:c6:d6:e4:55:5d:4b:fe:48:2e:
7e:d9:94:6d:19:50:36:09:a8:1a:a1:52:54:08:be:05:c8:77:
f1:ac:83:51:91:46:d0:dd:ca:38:33:8c:6a:3b:73:04:97:1e:
d3:e8:e7:6a:b5:38:34:c7:d7:99:8e:c5:ed:61:bd:74:83:79:
ba:b2:17:c7:91:cf:f9:bf:47:5b:06:d1:14:48:f7:0a:23:04:
e1:f1:9e:1c:4d:bc:40:dd:b8:a8:b9:30:ee:fe:30:a2:b7:64:
3c:ac:ad:20:1e:2c:a0:9e:88:1e:47:5c:1f:c4:f4:e1:23:61:
59:42:63:34:fe:65:64:13:d7:96:78:42:d9:78:60:91:fa:b4:
42:34:b0:90:4c:72:9e:d5:28:63:64:f0:bf:4d:f0:65:e6:c3:
94:cf:fb:53:b9:cb:11:68:78:be:65:e3:35:24:07:6c:e5:9c:
6c:50:43:fb:33:f8:77:c0:d3:c7:5d:6f:c4:d2:be:c4:f6:c4:
e3:cf:e7:ae:eb:1f:1d:20:e5:42:20:fb:ff:5f:18:0c:75:75:
1b:e7:bc:a6:f9:ab:3b:d5:de:0a:78:bd:de:0a:48:0f:d2:04:
ee:b7:fa:04:72:17:4d:b4:b9:44:03:c5:d9:b9:e0:93:64:1f:
8a:b9:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:05 2024 by rpki-client on console-ams.rpki-client.org