Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/dJq_Qk5zKa9NiwU4IEsPTapsOnk.roa
File: dJq_Qk5zKa9NiwU4IEsPTapsOnk.roa (raw, json)
Hash identifier: YnVe6xyrUt2zWmBUorIllPuqpOFnlC7gHvHgPFMKD0k=
Subject key identifier: 74:9A:BF:42:4E:73:29:AF:4D:8B:05:38:20:4B:0F:4D:AA:6C:3A:79
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 381AC126
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/dJq_Qk5zKa9NiwU4IEsPTapsOnk.roa
Signing time: Sat 01 Jan 2022 16:03:34 +0000
ROA not before: Sat 01 Jan 2022 16:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41670
IP address blocks: 185.110.204.0/22 maxlen: 22
89.248.240.0/20 maxlen: 20
2a01:168::/29 maxlen: 29
2a01:168::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941277478 (0x381ac126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Jan 1 16:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749abf424e7329af4d8b0538204b0f4daa6c3a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:4f:c9:20:ca:ef:63:2e:b4:0e:24:04:c9:
98:6d:f7:45:c3:a9:47:b8:78:73:e0:d9:e9:16:37:
85:d0:9a:ee:82:5e:08:2c:5c:8b:06:de:8a:c0:51:
07:94:af:89:ea:89:ee:f6:4c:e9:f4:f8:36:c1:54:
5b:18:be:0d:6c:7e:a0:35:9d:b5:e9:65:87:d3:05:
e7:91:78:e3:83:29:65:ff:61:25:56:c9:d4:22:0b:
b0:f8:5c:db:71:25:58:45:7d:18:3d:c2:a5:9f:e1:
b3:08:a8:26:5e:79:f9:26:13:d5:74:c6:63:c6:a2:
96:33:59:98:4c:bd:53:be:96:5b:f4:c8:fc:fc:19:
3d:9f:4a:f1:5d:fc:45:ce:0c:cc:fe:34:b1:e8:fa:
e9:58:bf:1d:8b:44:73:ee:ca:cf:7c:1c:d9:f0:c8:
a9:2e:33:5c:d4:fc:06:e4:cb:0b:75:8e:44:13:cc:
e6:7e:50:38:99:7e:5d:6a:d0:a5:e4:12:a0:9b:4a:
86:d4:d2:ef:23:84:e9:9c:1a:e9:ce:00:b8:1d:80:
0b:cf:c9:00:82:83:6c:45:b3:58:12:e0:23:bf:89:
1b:2b:ee:6a:e1:3f:4e:09:91:f5:d2:bd:41:4b:c1:
6e:fe:b1:45:32:41:77:96:82:ae:ad:40:3c:80:d3:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:BF:42:4E:73:29:AF:4D:8B:05:38:20:4B:0F:4D:AA:6C:3A:79
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/dJq_Qk5zKa9NiwU4IEsPTapsOnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.240.0/20
185.110.204.0/22
IPv6:
2a01:168::/29
Signature Algorithm: sha256WithRSAEncryption
5d:2d:c3:a1:2a:6e:5e:73:a6:44:bf:bd:1b:0b:13:ff:96:12:
c6:bb:5c:e2:d0:c9:fd:7a:6a:d0:10:ad:e4:ec:a9:3f:21:fd:
84:d0:72:a8:22:5e:be:1a:7a:9f:d5:ad:d4:03:b9:a7:36:0c:
f2:9b:3c:76:2b:00:b1:a2:0d:65:d1:3b:b6:d7:c7:fb:04:09:
0a:7f:7b:a4:d9:5e:99:94:98:cd:8a:78:e9:53:da:e4:85:2c:
18:b5:9e:39:a6:ed:c2:ab:eb:6c:40:4e:5a:bf:0e:58:52:8b:
1c:e6:47:2d:a3:4d:ec:b3:13:4d:33:a9:db:bf:aa:40:dd:ae:
55:5e:80:de:6f:69:7d:05:3f:50:ea:74:fa:03:3f:43:7f:98:
49:8c:17:25:02:17:b0:d7:58:4d:68:b3:c1:73:ba:2f:e6:3e:
8b:58:4f:a0:22:a4:01:e5:e2:b6:d0:70:35:ac:17:59:96:f6:
fd:7f:7a:f5:a3:90:b4:ec:06:72:09:3c:3e:28:a9:80:b4:74:
da:a3:35:36:fb:ca:31:53:2a:37:7c:27:2e:72:23:22:e2:d9:
d9:d9:40:2a:04:ca:02:31:16:86:1e:2e:03:f2:29:78:6d:71:
dd:9c:9f:82:13:69:1b:29:8e:51:60:f3:97:77:44:51:0e:f6:
0c:26:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:45 2024 by rpki-client on console-ams.rpki-client.org