Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/XildfMRi4SD1Ag34xoPzbUmfi8A.roa
File: XildfMRi4SD1Ag34xoPzbUmfi8A.roa (raw, json)
Hash identifier: 6U3p2U98R3iFlsFdg+Yl5SgXy6WNLZZTn9/08I/fELg=
Subject key identifier: 5E:29:5D:7C:C4:62:E1:20:F5:02:0D:F8:C6:83:F3:6D:49:9F:8B:C0
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01281D9E
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/XildfMRi4SD1Ag34xoPzbUmfi8A.roa
Signing time: Wed 01 Jun 2022 11:58:22 +0000
ROA not before: Wed 01 Jun 2022 11:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25124
IP address blocks: 109.162.192.0/20 maxlen: 20
109.162.208.0/20 maxlen: 20
109.162.224.0/20 maxlen: 20
109.162.144.0/20 maxlen: 20
109.162.160.0/20 maxlen: 20
81.91.138.112/28 maxlen: 28
81.91.138.80/28 maxlen: 28
81.91.138.48/28 maxlen: 28
109.162.176.0/20 maxlen: 20
213.207.208.0/20 maxlen: 20
213.207.224.0/20 maxlen: 20
91.184.80.0/20 maxlen: 20
81.91.138.40/29 maxlen: 29
213.207.240.0/20 maxlen: 20
109.162.128.0/20 maxlen: 20
81.91.128.0/20 maxlen: 20
81.91.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19406238 (0x1281d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jun 1 11:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e295d7cc462e120f5020df8c683f36d499f8bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:aa:4a:d0:78:01:98:10:ee:01:47:9e:c0:
b5:15:60:d1:91:10:45:99:68:5c:5d:88:32:60:21:
37:e9:8e:32:c8:b4:67:67:1b:a2:b2:e9:3c:b7:a1:
57:74:80:42:f0:ab:9c:ab:56:60:b5:8d:53:52:d2:
ef:01:7d:0d:a5:72:ea:d8:25:32:94:f1:3a:f3:b8:
db:3a:93:34:91:c0:85:20:34:8a:38:36:0f:0c:94:
33:10:10:c3:2f:c6:93:bf:23:bd:40:68:e5:a9:19:
c8:6e:1f:95:83:e7:76:ae:29:17:63:8f:ac:e2:84:
5c:f8:0a:79:20:58:27:e4:30:36:a3:e5:bb:a4:0e:
59:9d:dd:19:13:ed:91:6e:b0:56:ff:17:02:22:47:
a8:84:b2:b9:ac:4c:02:1b:8b:96:74:10:9a:2e:c8:
c7:30:b5:c8:00:2b:c1:16:f2:25:a1:59:77:a5:97:
77:45:7f:67:01:ea:5b:67:89:9c:d1:5a:27:fb:bd:
c7:30:e0:7e:01:5b:42:92:0d:7c:16:62:93:d8:fa:
de:75:b2:49:8c:0f:96:df:10:b3:4e:9c:88:f2:4b:
3f:b1:8d:e1:45:54:bc:2a:b0:07:7d:26:12:c8:5d:
08:e0:cc:9a:29:9f:0d:bf:ec:0b:6b:fc:4e:81:d0:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:5D:7C:C4:62:E1:20:F5:02:0D:F8:C6:83:F3:6D:49:9F:8B:C0
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/XildfMRi4SD1Ag34xoPzbUmfi8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.128.0/20
91.184.80.0/20
109.162.128.0-109.162.239.255
213.207.208.0-213.207.255.255
Signature Algorithm: sha256WithRSAEncryption
0b:69:ba:b3:9e:be:8d:b3:f3:a1:7a:8e:d7:93:2d:c1:93:d2:
2b:7c:cf:96:f5:aa:a0:54:4a:e8:ac:50:6f:55:7c:bf:e5:0d:
59:7c:34:c5:ea:65:d2:9f:80:e5:62:46:a5:08:73:f9:1b:1b:
eb:71:2f:73:24:24:3f:5a:28:68:4a:28:c4:b8:1e:cf:aa:4c:
de:cb:9f:32:2d:1a:40:ea:1b:0b:16:14:ef:06:69:a8:af:01:
a0:79:7b:c8:cc:f7:0a:c9:6d:71:a7:ca:c4:4e:ee:3f:6d:cd:
23:5b:1c:fb:30:d1:81:2b:c9:7a:f5:87:ac:2d:ab:9e:c9:1c:
da:68:89:d1:86:11:1e:1e:4f:fb:3d:fa:24:67:fa:8b:77:c2:
f3:06:c4:3b:42:bc:22:2d:9f:d9:87:14:7d:90:db:2f:52:3c:
bb:2d:38:5b:7b:33:ea:87:0d:27:71:4c:87:73:52:d6:02:6c:
0f:21:ca:e4:a0:55:83:de:f8:43:1e:50:90:32:12:d4:22:10:
ee:0d:e9:f1:02:b3:08:ea:a5:37:d9:64:8b:f0:d8:ec:55:e1:
6c:66:d9:19:f0:e7:28:23:f2:b4:8b:fa:ca:4f:63:34:5f:a3:
56:8c:25:96:93:5b:89:6e:4e:45:e2:77:0c:6f:14:46:aa:a7:
0b:38:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org