Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/0x0qIJJeYKsOz-BpjEKRWRyVzWk.roa
File: 0x0qIJJeYKsOz-BpjEKRWRyVzWk.roa (raw, json)
Hash identifier: xauswXrkQBh5jHlCYB6Jc+9/9sjE3VJHmlnz2QANdHU=
Subject key identifier: D3:1D:2A:20:92:5E:60:AB:0E:CF:E0:69:8C:42:91:59:1C:95:CD:69
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 0490B8FC
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/0x0qIJJeYKsOz-BpjEKRWRyVzWk.roa
Signing time: Wed 19 Jan 2022 09:23:58 +0000
ROA not before: Wed 19 Jan 2022 09:23:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1820
IP address blocks: 91.202.108.0/22 maxlen: 32
194.246.99.0/24 maxlen: 32
193.110.100.0/23 maxlen: 32
194.28.196.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76593404 (0x490b8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Jan 19 09:23:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d31d2a20925e60ab0ecfe0698c4291591c95cd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9f:d8:8a:9a:69:e3:2f:c0:7f:c3:81:17:0e:
64:19:bc:03:6c:34:31:ee:82:17:53:50:ed:c8:5f:
4d:91:39:b5:4a:92:f5:a5:43:21:a1:77:39:ee:a2:
84:0b:4e:cf:ea:2e:1f:48:38:12:ef:3e:23:d1:96:
7d:1f:16:12:56:6d:bc:8b:12:c6:fa:5b:07:91:5c:
c4:c3:65:b7:fe:7a:c8:66:4e:fc:79:b2:66:ff:2e:
2a:9e:61:a3:60:94:e3:76:b0:3d:ec:86:04:ea:71:
fc:52:40:02:65:c4:d0:6c:af:9a:a4:ae:b8:2b:ac:
45:47:61:4b:4b:9b:6b:78:7f:4a:07:df:c4:16:e6:
4a:e5:da:a9:81:4f:9f:7b:7e:7b:00:b4:1e:b0:9f:
d3:43:0c:5e:4d:e7:af:0d:1e:73:e2:f0:06:42:65:
35:d2:32:2f:95:57:c9:f8:e4:52:fb:c5:7b:ee:ec:
b9:57:29:96:93:4f:ed:14:df:b3:3a:1e:ca:89:79:
20:98:dd:a5:71:39:c0:fb:43:38:fb:5b:8e:be:d5:
9e:bc:ae:d8:b6:b4:bc:7b:c7:83:6e:66:dc:61:93:
9e:61:02:e9:94:05:ae:95:63:4d:8c:2b:a1:55:23:
be:58:38:48:41:a7:37:52:ac:83:a7:bb:26:ab:e8:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:2A:20:92:5E:60:AB:0E:CF:E0:69:8C:42:91:59:1C:95:CD:69
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/0x0qIJJeYKsOz-BpjEKRWRyVzWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.108.0/22
193.110.100.0/23
194.28.196.0/22
194.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
45:54:a6:66:92:55:10:5b:a7:01:1a:1e:9c:9d:a2:34:e9:f2:
2e:d8:7c:68:2d:83:8c:0e:7c:c9:83:60:8e:a6:f0:0a:4c:b1:
2d:f3:3a:86:c9:a5:04:d7:f1:4a:f3:06:cd:94:a6:08:f3:8d:
49:44:36:c1:c3:4d:02:7c:be:9a:b8:37:02:8b:3f:70:f9:6a:
e7:52:d5:45:be:97:cf:35:a9:7a:12:37:63:9e:7b:dd:64:80:
35:ca:49:6b:a9:08:6d:49:61:7e:81:8e:69:87:58:26:a9:d1:
25:18:dd:c7:75:70:7a:42:c5:2b:f4:e5:eb:02:87:36:7f:2f:
20:62:ba:84:26:f4:8a:e6:cd:56:4a:44:29:94:d5:93:48:10:
46:fd:56:3e:5e:b8:30:6b:93:b0:74:43:0c:8d:9f:36:7f:c7:
7b:95:b7:1b:1c:67:c9:04:d9:5e:30:39:60:70:9f:3a:04:2f:
29:e1:a4:27:61:33:92:5b:17:16:ed:14:bb:07:c8:89:02:15:
1d:0d:0b:29:80:af:ee:b2:34:44:21:58:ca:17:e3:65:c3:4f:
c7:7a:e2:85:88:5b:7e:87:d6:1d:62:01:fd:17:08:f3:18:cd:
6b:06:01:13:a8:f5:24:f4:70:25:1e:aa:0b:8f:10:02:62:89:
b6:eb:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:32 2023 by rpki-client on console-fra.rpki-client.org