Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/xejtT0rXarMHP3jKZrN0uDBSKl4.roa
File: xejtT0rXarMHP3jKZrN0uDBSKl4.roa (raw, json)
Hash identifier: +c5PcBgwTjs/rLEJFXlVCEe9ywV4+xWjWq45+EprIhw=
Subject key identifier: C5:E8:ED:4F:4A:D7:6A:B3:07:3F:78:CA:66:B3:74:B8:30:52:2A:5E
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 064976B3
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/xejtT0rXarMHP3jKZrN0uDBSKl4.roa
Signing time: Sat 01 Jan 2022 09:54:24 +0000
ROA not before: Sat 01 Jan 2022 09:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3491
IP address blocks: 217.113.64.0/19 maxlen: 19
217.113.65.0/24 maxlen: 24
217.113.92.0/24 maxlen: 24
185.77.60.0/22 maxlen: 22
2a03:5400::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105477811 (0x64976b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 09:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5e8ed4f4ad76ab3073f78ca66b374b830522a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:b0:c4:60:cb:cc:a6:dc:d3:f5:3a:6a:7e:
af:ca:e4:93:12:a8:76:8c:bb:df:82:a4:e0:4c:aa:
02:f9:7c:d1:44:aa:84:36:1b:5b:2f:8d:22:e3:8b:
b3:9c:bd:bf:27:53:09:08:85:88:b5:5f:20:33:5d:
86:24:2e:4d:98:37:c0:39:e3:73:9f:18:66:d7:0b:
a1:82:40:4c:58:0a:f8:e0:bf:5d:a7:1f:cc:84:bf:
3a:ae:d8:3f:a2:c7:8b:dd:cd:70:b6:cf:83:e9:19:
a0:a7:e3:50:12:4d:2f:e8:bf:07:25:5d:95:27:a7:
fb:31:4a:ea:32:11:cd:59:24:80:2e:b7:4d:a7:e4:
9f:b8:11:65:17:52:a1:a4:4e:ac:24:1e:99:4e:e5:
91:e7:3c:74:9d:71:b1:35:35:49:1e:df:30:f0:03:
e3:7a:ff:cf:c4:a5:51:5d:9b:c2:11:43:c8:33:1f:
62:64:cc:71:fd:48:3f:5f:2b:d9:76:c7:34:f3:7e:
55:55:a4:d3:54:c9:b5:a9:08:c4:64:9d:13:1b:98:
6c:e6:95:53:41:90:e3:3a:88:69:e9:ae:f6:65:51:
0a:81:da:0c:bd:a1:bf:54:b6:66:6e:00:83:25:b5:
65:6a:e8:13:8d:a7:87:ca:d2:d6:cd:71:a9:76:7c:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:ED:4F:4A:D7:6A:B3:07:3F:78:CA:66:B3:74:B8:30:52:2A:5E
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/xejtT0rXarMHP3jKZrN0uDBSKl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.60.0/22
217.113.64.0/19
IPv6:
2a03:5400::/32
Signature Algorithm: sha256WithRSAEncryption
4a:30:0c:9b:5b:fd:50:69:50:e0:ec:7c:43:5b:61:e9:c6:2a:
77:d0:40:12:c0:d5:73:aa:e4:18:93:cf:57:dc:78:6e:54:09:
76:ac:89:14:a6:9d:a9:04:0e:4c:9f:9c:d4:46:11:d0:33:13:
81:bc:e4:79:74:70:9c:2a:fc:ab:20:32:76:fd:18:5d:de:cb:
63:2b:4a:aa:ba:61:d9:fd:95:62:ea:3d:ea:ea:61:bf:09:af:
fb:e5:22:8c:0b:02:95:fe:6e:1d:ec:ad:d4:a5:6b:2c:99:d2:
98:73:cd:2c:f8:87:70:e2:28:fb:2a:28:9e:e4:62:5d:ee:77:
6a:f8:cf:bb:f2:8a:17:39:0e:2b:71:50:76:ed:96:20:59:1d:
c7:a4:4a:b8:cf:ef:f0:54:94:48:e9:66:1c:7f:ed:fa:33:d8:
49:e9:93:36:63:87:12:37:ac:69:fe:cf:31:dd:61:e6:c9:ef:
a9:31:71:e0:21:53:b7:b3:53:c6:dd:d7:ce:25:c6:34:b5:fc:
b6:c7:00:ab:be:5c:44:93:f3:83:9b:88:85:f5:16:3d:a3:81:
0c:d5:32:fc:94:88:4e:78:a8:5d:02:da:13:e6:81:e1:35:46:
66:1d:12:4d:21:27:2c:82:3e:e0:54:88:25:16:da:a2:6d:66:
12:27:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:09 2024 by rpki-client on console-ams.rpki-client.org