Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IQRKU6BzJaEBmjsXMEfvnQxDZHk.roa
File: IQRKU6BzJaEBmjsXMEfvnQxDZHk.roa (raw, json)
Hash identifier: K3jrv/GKN7iDm+ifk1Ug5XZdovFqECDUzdV3jojineI=
Subject key identifier: 21:04:4A:53:A0:73:25:A1:01:9A:3B:17:30:47:EF:9D:0C:43:64:79
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 06F291D6
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IQRKU6BzJaEBmjsXMEfvnQxDZHk.roa
Signing time: Mon 13 Jun 2022 12:31:44 +0000
ROA not before: Mon 13 Jun 2022 12:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
91.232.8.0/22 maxlen: 24
91.204.183.0/24 maxlen: 24
91.218.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116560342 (0x6f291d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jun 13 12:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21044a53a07325a1019a3b173047ef9d0c436479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:d3:a6:fe:a9:62:5d:83:98:09:30:35:96:
b5:99:20:ad:ea:a9:30:6f:52:16:01:a1:15:1e:1e:
cf:8f:2a:b3:33:e9:83:03:73:96:fa:d3:cd:d1:68:
78:e5:79:d5:17:ab:df:b7:6c:19:e5:e9:0f:f0:b8:
cd:67:50:1b:a3:f3:3a:0b:5c:79:a9:60:16:a3:26:
18:fe:58:86:70:42:65:e2:8f:df:2d:8a:28:f1:c7:
5c:ad:16:47:22:8a:76:50:75:fc:c3:d9:51:08:06:
70:9f:e7:5f:b9:f5:48:f9:1f:3c:f2:c0:30:a4:6c:
11:42:73:19:0a:a1:68:0c:9c:87:9e:db:83:97:05:
1f:88:a7:b1:4d:93:3b:d9:c3:a3:05:18:d0:60:82:
66:6f:6f:04:1e:60:18:cb:0a:4e:eb:f0:6a:cd:b8:
57:f2:fe:2e:36:30:ac:2e:66:7c:a6:37:d7:2f:48:
60:25:4c:07:63:21:a8:4a:96:7a:0c:7a:0d:75:ef:
6d:15:d3:12:00:3b:dd:ca:75:b0:aa:75:cc:cb:b1:
fe:f0:e7:a6:4b:36:0a:94:02:13:10:b4:62:21:b0:
63:a7:6f:10:fd:3d:b9:e1:ad:ee:58:b1:13:18:09:
46:bd:5c:b4:6f:cb:80:f7:7d:13:ea:ce:e1:a9:b8:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:04:4A:53:A0:73:25:A1:01:9A:3B:17:30:47:EF:9D:0C:43:64:79
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/IQRKU6BzJaEBmjsXMEfvnQxDZHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
91.204.183.0/24
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
04:6c:22:fc:89:d1:75:e5:9b:98:ce:48:67:39:e2:b7:94:5f:
10:8e:99:f7:c9:59:13:a0:75:ac:15:f0:fc:24:0d:b2:c9:0d:
df:cd:39:0a:01:10:78:ba:1d:72:f4:a8:90:41:21:e1:46:47:
42:bc:1f:b1:46:f9:63:a1:48:4d:b2:de:b6:f3:67:8a:fc:39:
8c:d6:fe:cf:0a:71:ec:29:d0:dd:30:ca:9e:ad:68:b3:93:8c:
30:05:81:a0:0a:34:61:a6:cc:6b:48:f3:4e:bd:98:d9:73:da:
9c:02:ac:f6:37:e8:1c:72:0c:08:5b:ab:98:8d:34:c2:c8:0d:
da:bb:31:d4:3e:fd:0b:1f:cf:bd:c4:fb:9d:9c:7d:70:6c:9b:
51:0e:0e:2b:9a:83:bf:b9:50:79:65:54:97:7c:63:89:53:62:
c1:8f:9a:22:04:16:ea:6f:9c:70:02:61:a4:9e:c9:f0:b3:32:
50:04:73:1c:72:b8:38:55:ec:15:1d:9c:7c:53:2b:63:c2:53:
44:44:9e:7a:09:8b:65:cf:06:a8:7c:c6:46:a9:96:60:bc:1c:
51:00:40:1d:c9:3c:e2:74:f7:be:e7:18:9a:21:c0:ac:78:73:
ec:31:69:fb:39:a2:3c:6a:d4:75:11:82:81:68:ac:08:cc:d3:
d6:b8:f8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org