Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/c1vkXd31UIdNWRfQXOVst7YQgz8.roa
File: c1vkXd31UIdNWRfQXOVst7YQgz8.roa (raw, json)
Hash identifier: YScAGVINsxTiPjRvpFSpTGLRWAhMNFa+CUu6eQgxcGQ=
Subject key identifier: 73:5B:E4:5D:DD:F5:50:87:4D:59:17:D0:5C:E5:6C:B7:B6:10:83:3F
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 0183A8261ACE75E7F80BBC812C0B6F8DE4A8
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/c1vkXd31UIdNWRfQXOVst7YQgz8.roa
Signing time: Wed 05 Oct 2022 12:36:53 +0000
ROA not before: Wed 05 Oct 2022 12:36:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49902
IP address blocks: 213.55.0.0/18 maxlen: 18
109.122.128.0/18 maxlen: 18
185.147.224.0/22 maxlen: 22
5.57.96.0/19 maxlen: 19
2a00:a080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:26:1a:ce:75:e7:f8:0b:bc:81:2c:0b:6f:8d:e4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Oct 5 12:36:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=735be45dddf550874d5917d05ce56cb7b610833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7a:56:7b:79:da:8d:1e:ba:24:1e:09:49:2b:
c0:42:36:b9:45:2a:bf:20:bb:9a:e5:6d:c3:63:ef:
bd:6a:9f:2f:0a:c6:36:af:4e:cd:bd:c2:53:3b:b7:
4f:9e:53:2d:85:94:60:03:49:83:5c:e2:b3:fd:37:
2d:15:d3:6e:0e:d6:63:3c:99:68:9c:b6:02:be:b3:
0f:37:85:07:f7:02:b6:69:c8:02:65:b7:6d:5c:10:
30:3d:ac:08:a4:e5:f3:0a:c0:02:7d:81:90:22:ab:
73:21:41:63:02:a9:f6:50:85:22:3d:46:fe:a8:2c:
e9:93:7c:51:55:35:dd:cf:fa:80:61:8b:17:c0:f7:
46:fc:6f:62:63:db:2a:63:6f:bb:45:53:70:12:11:
4f:e2:36:63:5a:b2:c0:b5:bc:bc:25:d4:1a:c2:fd:
dd:20:98:29:1e:fa:5a:df:f2:26:b2:1d:54:e6:90:
e2:99:9d:b0:56:a1:68:70:0a:38:63:b6:08:d6:db:
4b:2e:5a:d6:7f:3d:98:fe:26:98:6a:b6:1c:93:77:
23:64:29:f3:e6:c7:de:3f:18:b2:06:c1:40:3d:a4:
f8:5b:e4:d7:9c:da:ae:68:5c:77:b9:1b:b7:f8:fd:
13:7b:62:39:ef:47:22:94:7b:ed:ee:f4:7d:68:0c:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5B:E4:5D:DD:F5:50:87:4D:59:17:D0:5C:E5:6C:B7:B6:10:83:3F
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/c1vkXd31UIdNWRfQXOVst7YQgz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
185.147.224.0/22
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
62:b8:7d:d6:51:ad:96:20:b6:17:47:a5:cd:c5:23:59:80:93:
82:4c:07:d8:a0:9c:9a:78:ff:6f:e8:ea:f1:e3:9a:4e:41:05:
99:0f:ac:40:5f:4f:cb:27:d8:41:d8:9d:c9:7e:54:90:0c:56:
7d:a5:e9:43:26:65:29:c9:72:c6:5d:26:2f:33:7f:04:db:ff:
05:d1:6d:ed:d8:7a:3b:dd:95:cb:28:ad:92:3a:52:13:ae:87:
24:c1:f6:60:8f:3a:87:ef:3f:40:f7:a2:36:68:ff:4d:98:61:
d2:99:8e:39:c1:e5:30:d8:f1:ac:ae:ef:d2:9b:8e:d0:7a:72:
47:23:05:f3:49:11:a7:06:e4:ee:29:6b:a2:1a:76:f7:7a:a5:
6b:ac:6a:05:89:2c:06:1f:03:59:a0:64:92:fa:be:1a:fb:b7:
e7:83:44:9d:0b:4c:87:e4:8d:fa:f9:bb:d3:a7:85:f5:03:1a:
b8:76:7c:de:7a:c2:90:06:9b:fd:ba:7d:4e:3a:7b:3c:97:d7:
a6:77:75:62:82:c2:17:b9:9a:49:b5:85:0f:77:d4:98:99:27:
e1:2f:a2:e4:2e:31:3d:3b:38:9e:48:e2:fd:d0:0f:68:77:22:
e7:93:e1:f8:e8:42:78:b8:70:f6:59:63:17:7d:c5:e4:e7:83:
02:0d:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org