Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/l_2B_4Wyg4HD2ZvNmwhRxbwwJ_E.roa
File: l_2B_4Wyg4HD2ZvNmwhRxbwwJ_E.roa (raw, json)
Hash identifier: 86p6kJblQpUUV4WIPxcv4LjUckpYNBITWmf7QlXYKC0=
Subject key identifier: 97:FD:81:FF:85:B2:83:81:C3:D9:9B:CD:9B:08:51:C5:BC:30:27:F1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0B0CD70F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/l_2B_4Wyg4HD2ZvNmwhRxbwwJ_E.roa
Signing time: Tue 08 Feb 2022 10:11:39 +0000
ROA not before: Tue 08 Feb 2022 10:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42295
IP address blocks: 91.229.132.0/24 maxlen: 24
91.229.133.0/24 maxlen: 24
91.229.135.0/24 maxlen: 24
91.229.134.0/24 maxlen: 24
185.240.132.0/24 maxlen: 24
185.240.133.0/24 maxlen: 24
185.240.135.0/24 maxlen: 24
185.240.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185390863 (0xb0cd70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 8 10:11:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97fd81ff85b28381c3d99bcd9b0851c5bc3027f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:2b:38:d2:74:b7:b6:c4:c3:ca:21:92:60:
0a:7f:c3:5b:20:34:bf:99:0b:0e:28:d8:08:de:b0:
0a:3e:fd:26:24:b2:36:e0:71:84:b5:ab:2c:fe:37:
1e:66:79:df:20:35:f3:80:2e:f4:4a:a4:22:12:ea:
be:aa:48:9a:8e:1a:c5:0d:8f:a2:72:ab:80:7f:60:
54:d0:ce:ba:73:f5:4d:f3:cf:30:fa:e2:7f:bd:37:
85:aa:ed:54:03:69:a5:1c:57:c4:0f:9b:8d:26:c4:
81:c6:33:b9:0e:f0:c9:5c:c2:39:eb:ba:a0:d4:fa:
09:17:23:b8:c1:c9:6c:13:65:c1:f4:7e:50:25:05:
98:b6:06:b7:ad:76:28:85:89:75:53:05:90:94:6c:
05:a3:8d:97:6c:f5:cc:cf:b5:92:74:db:d9:75:45:
b0:34:00:b4:95:77:8d:af:f1:ca:f2:2b:3d:79:88:
72:b7:ae:7d:80:9f:2d:ee:7c:da:6c:b6:e6:92:51:
b7:f9:32:3a:e6:d3:94:a6:e5:3e:dd:6f:47:e3:09:
06:91:b1:18:1a:20:94:d7:95:e2:d8:c7:32:de:32:
6f:4b:f4:00:b3:f7:15:d1:89:67:5d:b2:66:63:99:
e5:c7:5e:74:a4:b4:db:0c:40:93:5b:ea:4f:7b:2f:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FD:81:FF:85:B2:83:81:C3:D9:9B:CD:9B:08:51:C5:BC:30:27:F1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/l_2B_4Wyg4HD2ZvNmwhRxbwwJ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/22
185.240.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:bd:37:63:ae:2c:28:05:1f:8b:3c:53:54:e1:5d:b7:69:a8:
4e:d4:9b:88:13:c9:55:58:4b:23:a5:0f:dc:c9:b2:03:ea:aa:
25:00:af:8a:f8:cc:5f:9d:3a:45:8c:65:b5:f7:11:5f:80:d5:
a2:b3:78:bf:b8:93:f7:61:89:db:d6:88:dd:8d:c6:01:d7:cf:
fe:d2:c7:26:53:55:d1:f3:e4:43:77:ba:37:8b:6a:7c:b2:58:
53:b7:56:46:ec:8c:1c:9c:4b:d3:e7:da:df:6e:8c:71:a8:a5:
6e:7e:47:ff:11:ab:c3:08:33:03:96:11:c0:f5:2f:ea:c0:bd:
c9:1f:74:6a:43:9f:85:40:e1:e9:94:50:17:5f:45:1b:18:e8:
c6:f8:00:11:a6:92:b1:33:00:bf:10:f5:97:8f:b1:01:fa:33:
6e:1c:14:eb:a8:66:fc:fa:89:5f:42:2b:22:61:3a:4c:f0:cd:
5d:19:f4:d1:c6:5a:ea:bd:d7:cc:42:21:9d:ac:31:a1:65:c9:
2e:8d:3c:8a:a6:28:0b:05:e5:f6:00:0f:a6:a5:00:ca:4f:f0:
fc:60:88:b0:1e:e6:3a:06:6a:15:80:6b:d4:f5:9e:22:ef:e9:
ba:09:b1:e3:4a:c4:b4:67:6e:c3:bf:d3:63:2c:22:d5:29:45:
7c:c9:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org