Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Fx4nXa08W4YgQyjM3QJ1cVfHpoY.roa
File: Fx4nXa08W4YgQyjM3QJ1cVfHpoY.roa (raw, json)
Hash identifier: Y+QqZuTYdV9PlUS28N2DJK9tFoqIPODPmxrsxCfdbk8=
Subject key identifier: 17:1E:27:5D:AD:3C:5B:86:20:43:28:CC:DD:02:75:71:57:C7:A6:86
Certificate issuer: /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial: 054B4B95
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Fx4nXa08W4YgQyjM3QJ1cVfHpoY.roa
Signing time: Wed 15 Jun 2022 08:42:44 +0000
ROA not before: Wed 15 Jun 2022 08:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43641
IP address blocks: 195.26.86.0/23 maxlen: 24
45.11.56.0/24 maxlen: 24
91.222.172.0/22 maxlen: 22
45.134.174.0/24 maxlen: 24
45.134.175.0/24 maxlen: 24
2a09:2dc1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88820629 (0x54b4b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Validity
Not Before: Jun 15 08:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=171e275dad3c5b86204328ccdd02757157c7a686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:8a:23:18:04:30:bd:a2:33:d8:a6:ed:f1:
d7:37:d2:b5:5a:69:9f:4f:41:98:2b:2d:b8:af:18:
af:98:13:c9:ca:f1:f4:1a:4a:a6:cd:4d:5a:3b:f0:
1c:33:7c:7c:e2:8a:9d:28:8b:0d:c4:54:f2:31:2c:
88:0f:dc:55:a0:4d:31:35:20:79:75:ee:f0:60:88:
0e:19:4a:fc:8b:88:22:64:d3:1d:19:ec:be:5f:6f:
97:3a:69:59:35:ab:9d:18:af:fe:bd:82:ed:bb:61:
5e:1c:2f:6b:ae:64:25:fa:9b:5b:58:ea:b6:2c:f4:
b9:3e:94:0c:76:6b:4b:3a:54:e6:2a:84:62:88:62:
1c:0c:77:da:63:70:5b:32:17:c5:d5:62:86:4a:29:
0c:e3:57:26:ca:24:aa:08:d3:26:4c:9e:c3:1a:b3:
0c:0d:1a:cb:9f:fe:73:e7:dd:15:f6:f6:f9:0b:19:
34:4d:e0:27:2d:61:80:b7:65:46:98:47:bf:e1:42:
5b:0f:3d:93:d4:6e:53:54:c0:23:dd:eb:6a:ca:5c:
c4:9b:f4:62:4c:ac:0f:9a:df:40:25:b0:68:af:85:
54:2c:7f:da:6e:6c:ee:e7:42:5a:33:cd:74:3a:7d:
7a:84:4a:c0:63:5c:05:f3:0e:b5:33:ff:15:34:17:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1E:27:5D:AD:3C:5B:86:20:43:28:CC:DD:02:75:71:57:C7:A6:86
X509v3 Authority Key Identifier:
keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/Fx4nXa08W4YgQyjM3QJ1cVfHpoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.56.0/24
45.134.174.0/23
91.222.172.0/22
195.26.86.0/23
IPv6:
2a09:2dc1::/32
Signature Algorithm: sha256WithRSAEncryption
40:68:55:cb:66:ea:83:6a:23:d3:78:22:bd:c7:7f:a1:84:02:
a6:6b:80:57:c8:6d:b3:9c:06:67:43:45:e2:96:e8:f5:cf:70:
24:87:ca:9f:ef:03:df:5e:7c:74:1a:fc:39:61:9a:c6:d7:76:
7d:5a:de:f6:1d:c1:cd:f6:ed:9a:9b:46:a0:b2:7b:2a:89:99:
0c:98:2f:d9:8d:ee:e7:00:95:26:83:5f:bf:1a:10:d5:85:87:
61:30:03:5f:01:32:f6:d8:72:11:1c:50:05:1c:b4:96:a3:2f:
77:f5:af:b6:8b:3b:93:29:3f:1d:52:9c:81:ec:46:74:f6:9a:
e9:74:5e:cb:c2:f2:f5:ad:5f:45:e7:38:3e:81:11:5d:7f:71:
23:c4:0c:0a:88:20:8f:ab:6e:22:b2:c2:37:c9:d1:98:f1:1c:
18:d1:d3:15:60:77:40:67:a5:e3:fb:1b:88:68:a1:f3:e1:a5:
be:64:8a:65:78:33:e8:84:07:a0:be:ec:52:5d:27:98:7a:a0:
1a:df:cb:3e:b6:d0:aa:5f:08:e6:ae:98:4d:16:f1:fd:af:aa:
b4:a6:97:aa:a6:7f:92:6a:40:d9:ee:32:21:2f:ba:0a:f6:64:
2e:a2:02:6d:a3:0e:0b:80:21:67:5f:57:b0:1c:c7:25:dd:89:
63:3a:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:53 2024 by rpki-client on console-ams.rpki-client.org