Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/xkRt4SZZMzH3V4cZ93YcFbIKKyk.roa
File: xkRt4SZZMzH3V4cZ93YcFbIKKyk.roa (raw, json)
Hash identifier: SK/sojknwrjunrqVaya4Uo4/EGnCo8iXM2Kl6oG2ht8=
Subject key identifier: C6:44:6D:E1:26:59:33:31:F7:57:87:19:F7:76:1C:15:B2:0A:2B:29
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0A7C5CA1
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/xkRt4SZZMzH3V4cZ93YcFbIKKyk.roa
Signing time: Sat 01 Jan 2022 08:57:09 +0000
ROA not before: Sat 01 Jan 2022 08:57:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207429
IP address blocks: 213.142.135.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
80.253.245.0/24 maxlen: 24
80.253.244.0/24 maxlen: 24
80.253.247.0/24 maxlen: 24
91.151.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175922337 (0xa7c5ca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 08:57:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6446de126593331f7578719f7761c15b20a2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:f4:9a:e8:93:99:4d:60:40:f7:bf:19:f2:
f3:a9:77:3d:e0:d0:83:1f:84:c2:8b:1a:9a:d7:ce:
df:92:4c:eb:9c:a5:82:73:3f:5d:5a:f5:ee:b2:48:
59:d4:2a:5e:33:dc:e7:67:16:05:d0:9a:11:45:9f:
db:9b:63:3c:07:28:48:9d:53:fb:3e:80:32:80:c4:
b0:ce:82:a2:54:5f:7d:c4:1b:fd:78:a0:aa:97:31:
13:bb:6e:b5:7a:05:31:13:54:b7:0e:23:d9:cf:9f:
58:4e:2d:56:37:90:d4:04:8e:39:d8:95:35:70:c9:
75:56:8a:70:07:13:23:ea:6f:71:63:cc:60:a9:12:
35:04:53:73:ce:3f:07:f8:92:a2:58:c4:b7:c5:0c:
9a:b3:a1:29:1d:43:88:ab:16:61:56:1b:ed:b1:4b:
fd:87:38:8c:74:0e:91:b4:44:07:d8:9a:03:69:79:
d4:c4:cb:45:b2:a1:c6:cf:1b:19:0a:d8:38:3d:ec:
72:53:cd:63:13:21:83:9c:e4:19:26:2a:62:ad:31:
28:c3:e6:98:f2:99:4f:5f:16:c7:5b:94:be:af:d1:
70:9d:e4:fd:71:c3:53:e3:6f:ba:73:9f:79:46:7b:
25:50:02:72:47:0f:47:77:58:b6:0f:91:3e:57:12:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:6D:E1:26:59:33:31:F7:57:87:19:F7:76:1C:15:B2:0A:2B:29
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/xkRt4SZZMzH3V4cZ93YcFbIKKyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.244.0/23
80.253.247.0/24
91.151.81.0/24
213.142.135.0/24
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8b:ee:54:3c:d1:84:4e:65:ec:fc:a2:a3:ba:27:85:6d:0f:
e8:53:03:1d:ae:a7:16:e4:8a:7a:f9:28:99:e7:6d:f3:d3:38:
32:be:42:47:58:69:d6:e1:52:85:71:a7:34:ac:89:03:6b:9e:
dd:f4:6c:eb:b6:72:e3:a3:be:06:b9:97:8c:32:85:16:8d:58:
7c:c1:ce:54:e5:57:e1:d6:14:b8:8d:92:fe:c5:52:79:b3:3d:
76:5a:2c:b7:ad:78:76:ac:5c:9d:fb:51:73:bc:a1:18:8e:88:
af:40:3b:97:f1:4d:e7:e9:3e:8c:dd:ae:be:e0:89:02:91:a3:
92:46:be:0b:22:4f:5f:fc:23:48:f7:5d:00:27:4c:ff:c0:53:
48:40:d5:4a:3e:96:4a:35:20:2e:bf:3c:d7:41:27:c1:29:34:
fc:a4:1d:d2:21:c6:46:eb:a6:95:80:28:95:74:cb:b9:89:2d:
20:9e:3a:89:a6:f6:48:78:97:5b:31:cd:cf:65:82:96:c2:38:
3f:6f:1f:ff:63:73:0f:7b:c8:55:40:41:3b:e4:78:fc:02:64:
ed:9b:0f:04:d4:75:43:24:bc:cc:06:df:0a:5d:95:d3:ff:ad:
19:c2:d8:a8:1c:43:1c:12:6c:4d:60:db:d0:e6:0f:bd:6f:29:
02:55:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:04 2024 by rpki-client on console-fra.rpki-client.org