Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LTzKzE0i0yQ2qkAt-BW4IwFcF0w.roa
File: LTzKzE0i0yQ2qkAt-BW4IwFcF0w.roa (raw, json)
Hash identifier: fZo7QqM8W11muzLFtOWPNlbA7LtMPbOSe0Kf7maTAT8=
Subject key identifier: 2D:3C:CA:CC:4D:22:D3:24:36:AA:40:2D:F8:15:B8:23:01:5C:17:4C
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 087B140A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LTzKzE0i0yQ2qkAt-BW4IwFcF0w.roa
Signing time: Mon 18 Apr 2022 07:25:35 +0000
ROA not before: Mon 18 Apr 2022 07:25:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.37.196.0/22 maxlen: 24
88.214.52.0/22 maxlen: 24
178.239.28.0/22 maxlen: 24
2.58.232.0/22 maxlen: 24
45.87.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142283786 (0x87b140a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 18 07:25:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d3ccacc4d22d32436aa402df815b823015c174c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:26:0f:11:10:0d:bd:2f:3f:29:80:28:8f:
7d:21:46:04:17:36:c7:33:f4:fb:e5:3e:88:3e:b5:
12:d3:57:60:93:dc:e4:63:43:e6:b4:2f:0f:3f:28:
b7:4f:1f:f1:26:7b:f5:93:40:a1:db:e8:e0:79:8a:
3f:7d:c2:47:b4:4b:81:ec:81:ec:ac:9e:ba:28:aa:
0d:08:04:5e:fa:4a:93:48:a4:15:7c:52:f8:5f:4c:
25:8d:2d:9c:3d:5e:7b:c3:17:e0:0e:40:ef:5b:f8:
f4:a2:43:ac:2c:94:4d:d4:fe:1d:49:5d:dc:d2:c4:
0a:d5:41:d0:15:98:3f:de:d5:f0:8a:dc:0e:b6:5d:
34:a4:99:0b:58:06:40:96:cb:42:08:b2:2e:82:6f:
94:10:4d:73:3a:19:83:d2:66:7c:e8:7b:a6:72:b9:
97:ad:6e:28:76:3d:78:58:5e:66:23:e1:fa:08:1c:
6a:a1:ae:9d:ac:e3:fb:c6:13:65:2a:f3:ce:97:1d:
a6:4f:51:8c:db:41:ec:1e:10:3f:f9:84:5f:db:19:
b5:74:f3:8d:ee:1d:38:da:69:b5:b9:a7:7b:5f:96:
35:4e:ce:c3:7c:4c:9c:c6:a4:82:9a:d3:2e:7f:c0:
de:c8:86:cd:42:7b:bd:02:52:43:64:ec:7a:7a:72:
51:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:CA:CC:4D:22:D3:24:36:AA:40:2D:F8:15:B8:23:01:5C:17:4C
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/LTzKzE0i0yQ2qkAt-BW4IwFcF0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.232.0/22
45.87.44.0/22
88.214.52.0/22
178.239.28.0/22
193.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:af:e1:c4:c8:ab:0e:94:3d:2b:21:ab:9b:37:19:49:a1:40:
f1:4d:85:0d:4a:bd:b3:9a:53:55:e0:fc:22:48:d8:4a:ce:d7:
33:5c:3e:35:e2:8f:b9:d7:bf:7f:5d:bd:e8:fd:96:a1:b2:97:
71:21:52:3a:10:b3:28:57:a0:d1:05:5e:73:5a:05:cd:10:d5:
36:b6:bb:22:73:46:cf:8b:b6:ba:d0:70:04:84:f1:38:4b:b4:
a0:23:06:3b:41:fe:aa:7f:f2:6f:09:75:7b:01:5b:e8:13:20:
09:7a:61:ee:eb:64:d7:d5:4d:2c:71:73:a1:27:c4:4e:b8:46:
cc:e1:c2:cc:84:24:d0:e6:55:17:01:7c:f4:7d:bf:37:70:75:
8a:e4:27:0f:02:1d:ee:d5:50:14:77:fe:5e:67:dc:25:e5:20:
23:16:87:5a:12:1d:23:9e:69:d2:6a:25:bd:4c:3c:08:af:da:
94:a2:76:ba:c7:f2:07:55:e8:02:10:ad:c7:46:96:b8:63:8a:
8c:ae:9a:bf:d0:e0:ee:8c:3f:f3:0e:33:f9:9e:27:ab:a9:98:
5b:5c:b2:19:8c:1c:78:1c:40:83:4a:6c:a2:69:4a:22:77:b7:
36:8c:a7:e1:6a:ed:14:78:61:f1:93:f9:60:ef:f3:bc:ab:33:
1b:b7:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org