Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/xu6n58QuPhxiXGbBWDR0rnF4SdI.roa
File: xu6n58QuPhxiXGbBWDR0rnF4SdI.roa (raw, json)
Hash identifier: P3/TVMjSGq+dPQJIQTLSxNQeYlBrt00/LctjeHWVYJk=
Subject key identifier: C6:EE:A7:E7:C4:2E:3E:1C:62:5C:66:C1:58:34:74:AE:71:78:49:D2
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 05875793
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/xu6n58QuPhxiXGbBWDR0rnF4SdI.roa
Signing time: Sat 01 Jan 2022 06:04:28 +0000
ROA not before: Sat 01 Jan 2022 06:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92755859 (0x5875793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6eea7e7c42e3e1c625c66c1583474ae717849d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:ce:b4:df:9a:56:1e:90:64:09:31:22:27:
aa:78:90:f2:54:e5:9e:41:9a:ea:b4:87:6c:80:9d:
70:99:af:2e:c4:2a:d9:e2:ca:0c:e2:8e:d3:f0:85:
e8:3e:da:df:c1:4c:54:a8:3a:85:8e:48:3a:98:75:
23:7a:15:ec:23:b9:5e:ac:9d:f0:d9:f5:b4:2a:49:
69:74:1c:55:01:70:6b:a0:d5:8d:a4:b6:a1:9f:9f:
10:ea:50:4f:03:eb:c6:0b:d9:11:bb:21:61:24:ec:
24:55:1f:ab:af:cd:1f:5d:bd:46:79:b6:98:32:cb:
c8:19:a9:1b:b6:a7:03:5f:2d:3f:c3:63:06:f8:d4:
18:be:30:a3:b6:b1:f9:a7:a9:39:1e:16:9b:4a:a1:
a2:b6:a4:57:12:d0:e7:00:2f:b2:3a:41:e5:21:7e:
be:72:d0:76:33:29:9d:3a:97:d7:c0:d7:bc:e2:ea:
0c:9d:3a:b6:fa:c7:f7:80:35:de:23:e6:05:d4:2b:
f9:1c:de:72:6c:e4:fb:c0:1b:62:39:e7:1a:5f:bd:
0a:54:11:89:f5:9c:27:49:a8:65:ca:46:c9:f6:4d:
c7:5b:85:a3:d0:61:61:74:18:cb:6e:3c:8c:0c:1c:
cc:73:2c:12:36:99:e6:42:05:4f:c6:36:63:b5:80:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:A7:E7:C4:2E:3E:1C:62:5C:66:C1:58:34:74:AE:71:78:49:D2
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/xu6n58QuPhxiXGbBWDR0rnF4SdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/23
45.11.88.0/23
185.149.233.0-185.149.235.255
185.202.174.0/24
193.39.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2f:fe:4a:d1:c3:dc:b7:2c:38:b9:bf:fd:44:71:c7:d8:a2:
b4:1e:64:86:27:ee:8b:cc:23:43:cc:55:9b:8a:03:a9:eb:cb:
45:c9:a8:0c:50:4f:84:5b:52:1b:5b:0b:5a:91:41:da:ce:b6:
da:e6:43:bb:df:53:45:7c:25:fc:88:62:c9:6b:37:ff:fc:82:
0b:cd:fb:db:e2:fa:af:de:16:be:66:1f:e1:d0:42:76:1f:4a:
d6:7a:18:4b:cb:14:4b:cd:c8:ce:9f:b0:e8:df:ca:aa:9a:e2:
19:d5:ac:a5:9a:34:f0:e8:d3:37:88:69:dc:6f:22:ae:4c:0e:
b4:9f:c8:4b:3e:0b:ee:3f:5a:6c:6f:30:d8:77:95:0c:f7:eb:
09:42:b6:37:8d:e5:12:70:c5:e0:f7:83:e9:66:43:0f:7d:c4:
54:94:2f:ad:05:3d:9f:13:af:ad:20:9d:be:5b:e9:6d:80:21:
96:0f:99:73:d8:24:77:76:65:7a:a9:b9:ed:d5:9e:03:33:60:
30:d2:67:27:8a:26:6b:a3:80:48:78:df:3b:14:5d:38:b3:31:
79:e6:f4:44:f0:33:18:3d:b5:0c:ed:a8:fd:d5:e3:3c:0c:3c:
57:d1:02:ed:5a:5e:40:8b:96:14:85:f7:86:0b:6c:5a:a8:1c:
e4:20:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org