Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KqrI6zU8bRXrauVFv_syQLUcB7Q.roa
File: KqrI6zU8bRXrauVFv_syQLUcB7Q.roa (raw, json)
Hash identifier: bC7702z09IIsp/hdyL/HC1A9uOQ04JbJBPiMjWlSFfk=
Subject key identifier: 2A:AA:C8:EB:35:3C:6D:15:EB:6A:E5:45:BF:FB:32:40:B5:1C:07:B4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183A3316AAD7FB7D2DEF1ED910B0515C695
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KqrI6zU8bRXrauVFv_syQLUcB7Q.roa
Signing time: Tue 04 Oct 2022 13:31:08 +0000
ROA not before: Tue 04 Oct 2022 13:31:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202973
IP address blocks: 185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
82.115.223.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:31:6a:ad:7f:b7:d2:de:f1:ed:91:0b:05:15:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 4 13:31:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2aaac8eb353c6d15eb6ae545bffb3240b51c07b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:c5:c6:39:20:e3:41:19:50:5a:54:57:1a:
50:1d:62:78:09:9e:24:71:ba:2e:ad:26:26:a7:2d:
cf:1f:9b:b6:90:12:26:4d:41:2c:ce:a9:71:0e:4e:
d9:35:6d:90:5a:3a:28:85:0c:c4:cb:05:c8:e4:eb:
15:d8:4d:b9:26:0e:6a:6b:ff:5c:ff:6f:19:8c:b5:
60:42:b6:ab:3c:7e:fa:59:44:5b:0e:7b:52:e1:15:
8f:47:36:08:e2:f7:6f:15:f6:34:19:65:73:a5:54:
e6:84:a2:3c:f6:1a:29:e1:c4:79:73:eb:4a:65:64:
72:75:5e:9f:e8:c8:e2:ce:f2:6e:eb:9b:71:5a:e6:
ed:c2:f7:47:a4:53:64:e2:35:39:08:e1:fc:80:05:
a4:c3:55:be:fe:57:5d:d6:50:f5:b6:0d:1d:e6:b5:
a2:bb:76:eb:d4:36:ec:87:54:c2:d5:f4:fb:8c:f3:
bd:50:41:de:ce:c3:2d:92:a3:6a:42:4b:0d:04:f7:
d8:36:4a:71:b8:07:34:80:40:07:17:69:05:fb:3d:
ba:e6:03:ee:b4:62:0f:10:4b:1e:6c:1b:eb:d7:d1:
a5:dc:c6:23:d8:f2:5d:de:97:03:4d:19:53:ac:9e:
fd:38:39:6e:dd:7f:37:78:7a:93:6e:62:f4:e7:7b:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:C8:EB:35:3C:6D:15:EB:6A:E5:45:BF:FB:32:40:B5:1C:07:B4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KqrI6zU8bRXrauVFv_syQLUcB7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.222.0/23
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:3a:1c:bc:79:68:2b:1c:4d:c5:b9:d7:21:1c:b1:83:33:82:
e8:f0:2d:cb:58:04:da:c4:21:52:e6:65:d2:f8:11:e7:41:53:
87:95:ae:b9:1e:d0:73:2d:b1:55:71:9f:23:b1:21:9d:8f:af:
48:4a:6e:c0:7a:62:1f:46:51:c6:d9:66:d6:d3:73:5d:6f:2d:
f8:2f:9a:77:11:c1:d1:c2:48:1e:ff:8c:ac:33:7a:1d:84:c2:
b2:0e:12:0c:b7:8e:4c:80:62:5d:5b:9c:ea:79:62:04:30:74:
b2:2d:f6:9f:ed:80:92:5f:ee:8e:d6:1b:23:70:5f:f5:f7:6a:
de:1e:0b:07:52:79:c7:8b:4c:eb:46:09:eb:54:d2:28:0d:bf:
35:fd:20:b2:32:ec:11:15:ae:7e:94:38:8a:3f:23:a0:11:d1:
32:2c:02:66:5e:f5:fc:64:0e:a6:43:47:bc:ec:60:87:c2:9f:
25:6b:a6:58:76:db:98:2c:dd:5b:fb:6b:83:09:e3:f4:89:54:
f7:53:a4:a2:12:63:5a:4f:4a:26:27:ea:27:a5:b7:cd:56:ab:
5b:3c:d6:65:35:ca:ca:ea:a6:be:c7:3f:55:06:7e:fb:06:4a:
1b:1d:5e:84:76:97:eb:c7:d5:a0:66:d5:9b:aa:f6:2c:dd:1f:
24:a8:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org