Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/9CioJySWOGLzXuWuGtXJREd9A7M.roa
File: 9CioJySWOGLzXuWuGtXJREd9A7M.roa (raw, json)
Hash identifier: 85UvfIM2vFA0sUyXjEKr3sF5x7P7gYeEpSyP0IbHTa8=
Subject key identifier: F4:28:A8:27:24:96:38:62:F3:5E:E5:AE:1A:D5:C9:44:47:7D:03:B3
Certificate issuer: /CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Certificate serial: 05B4ACDB
Authority key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/9CioJySWOGLzXuWuGtXJREd9A7M.roa
Signing time: Sat 01 Jan 2022 03:53:53 +0000
ROA not before: Sat 01 Jan 2022 03:53:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41816
IP address blocks: 185.209.44.0/22 maxlen: 22
91.143.16.0/22 maxlen: 22
91.143.24.0/22 maxlen: 22
91.143.24.0/24 maxlen: 24
91.143.20.0/23 maxlen: 23
91.143.22.0/23 maxlen: 23
91.143.31.0/24 maxlen: 24
91.143.30.0/24 maxlen: 24
91.143.26.0/24 maxlen: 24
91.143.25.0/24 maxlen: 24
91.143.28.0/24 maxlen: 24
91.143.28.0/22 maxlen: 22
91.143.27.0/24 maxlen: 24
91.143.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95726811 (0x5b4acdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Validity
Not Before: Jan 1 03:53:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f428a82724963862f35ee5ae1ad5c944477d03b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:69:8b:96:41:be:3c:7c:e1:e4:e7:68:fa:
39:51:6d:6e:03:2c:6a:db:23:9f:b2:d8:78:34:2b:
c8:e4:bb:f8:a4:17:ef:b6:ae:00:fd:11:da:25:6f:
21:29:4b:6a:50:57:ca:61:67:3b:d2:dc:3d:9e:b5:
2a:31:85:a4:91:70:28:e0:fa:0d:6b:2d:7e:91:9a:
aa:de:e0:80:cf:b8:46:ec:71:6f:a3:53:e8:1a:10:
ba:e8:61:41:a5:02:37:76:c7:25:9e:1a:2c:92:7b:
58:a3:6d:78:cc:e1:66:92:f0:e3:e5:56:59:31:62:
16:63:d9:14:49:97:3a:71:7b:9b:b1:63:17:3c:9a:
7f:9a:1e:8a:6c:a0:f4:3c:9c:80:a4:76:87:36:0c:
b9:43:06:ef:a2:10:95:59:1d:7c:24:9f:d0:39:07:
eb:44:ed:12:b1:f4:3b:9b:ee:ea:d2:18:73:d2:56:
aa:d6:04:f9:15:68:e1:22:03:7b:c7:00:14:6b:9c:
f8:9a:24:88:d0:7c:6a:7e:2e:e3:04:1e:2b:38:4a:
16:e5:15:4f:00:03:88:f4:2c:7d:48:12:cc:66:1a:
41:50:c4:87:13:d5:8c:aa:90:70:f6:1f:35:d8:c9:
02:5e:ee:2e:5a:f9:24:16:9b:d0:1e:4d:85:91:0c:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:A8:27:24:96:38:62:F3:5E:E5:AE:1A:D5:C9:44:47:7D:03:B3
X509v3 Authority Key Identifier:
keyid:97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/9CioJySWOGLzXuWuGtXJREd9A7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.16.0/20
185.209.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:95:52:ac:ab:1c:2b:a7:ca:31:7e:13:d0:b7:4f:53:7f:91:
50:35:01:1b:4d:f6:6c:62:7e:aa:93:5f:27:9d:24:99:92:e4:
50:f7:54:7a:d8:21:cf:da:89:cd:12:76:0d:b6:69:03:c8:b7:
70:11:74:20:6d:e9:65:0f:df:6d:14:2a:41:8a:a5:a8:54:9d:
01:23:82:ed:48:57:c7:e1:8f:65:74:f2:ed:ec:00:82:be:10:
74:9a:c6:e4:57:83:b0:b5:42:96:30:e8:d5:fe:78:ee:5c:28:
ca:ec:09:f6:e1:bc:61:15:3e:b5:a8:3d:0f:4b:d8:bf:3f:e3:
77:df:66:d2:a9:91:bf:25:00:32:6f:0d:4b:d2:e2:6f:04:d6:
e2:fa:3a:85:68:c8:2d:46:c2:60:61:fb:40:44:e4:23:ca:35:
29:f8:15:2e:1c:a6:37:19:a5:0d:35:97:75:85:fb:36:ad:9d:
2e:dd:9a:60:c8:c8:1b:6f:74:49:98:a7:ee:a5:8d:6b:b1:e7:
13:b3:9a:c6:b3:27:5b:52:4f:8e:94:2f:79:67:6b:53:cc:38:
ae:96:e4:65:04:13:5e:c7:a2:db:0d:fe:c6:0f:19:a9:d3:5d:
1d:bd:4e:6f:37:bc:52:99:0e:ba:bf:55:e3:13:ca:e4:bd:82:
5c:45:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:28 2024 by rpki-client on console-fra.rpki-client.org