Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/ExzAhFGA8LtdNIXT4jWb2UYnbP4.roa
File: ExzAhFGA8LtdNIXT4jWb2UYnbP4.roa (raw, json)
Hash identifier: K7pqO8zeXqoYUfjrFzXTlyAI6O4NfaxXkiCRiPnGO04=
Subject key identifier: 13:1C:C0:84:51:80:F0:BB:5D:34:85:D3:E2:35:9B:D9:46:27:6C:FE
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 096F0874
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/ExzAhFGA8LtdNIXT4jWb2UYnbP4.roa
Signing time: Sat 01 Jan 2022 10:04:05 +0000
ROA not before: Sat 01 Jan 2022 10:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32875
IP address blocks: 185.48.205.0/24 maxlen: 24
185.48.207.0/24 maxlen: 24
5.226.169.0/24 maxlen: 24
5.226.170.0/24 maxlen: 24
5.226.174.0/24 maxlen: 24
5.226.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158271604 (0x96f0874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 1 10:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=131cc0845180f0bb5d3485d3e2359bd946276cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:ac:2a:fa:e7:bc:a3:2c:88:6a:2d:69:b3:
af:10:41:8c:7a:37:dc:83:68:34:9f:fa:c4:c2:bb:
de:27:c3:b8:39:a3:12:64:53:49:23:61:48:ee:07:
02:22:68:2b:91:7f:12:be:a6:3b:b9:7b:45:db:b5:
c8:03:52:8c:2a:fa:a1:f7:9e:95:31:5e:a7:6b:01:
a2:c1:0c:a2:92:8a:d6:ba:8b:18:61:c2:6a:1a:e8:
13:e5:4a:18:44:ae:aa:fd:d1:0f:9a:31:55:ea:00:
84:ea:5a:82:8d:d8:3c:8b:be:7c:3c:4a:14:b4:f8:
d4:a2:af:f8:47:2d:f8:b0:63:9c:0d:a7:ce:ca:02:
39:18:e6:45:40:a4:9f:10:67:37:2b:b1:06:a8:f4:
b3:bd:2b:16:0f:9c:53:f7:1d:a2:7e:74:5d:87:9b:
d6:1c:2a:f8:e7:88:e9:e2:2b:ce:66:5b:53:2b:c8:
0b:a7:eb:6e:53:b0:99:a8:ca:51:83:16:31:de:c2:
61:45:12:c6:f2:0f:dc:bf:2d:8d:8a:92:71:cf:00:
a0:b4:18:48:ae:29:33:d1:9c:38:17:bb:a1:5c:67:
d6:a8:bb:18:e5:1e:4e:c4:24:01:47:a2:00:7f:d0:
6b:95:be:6e:05:81:56:64:dc:92:68:99:a7:52:89:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:C0:84:51:80:F0:BB:5D:34:85:D3:E2:35:9B:D9:46:27:6C:FE
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/ExzAhFGA8LtdNIXT4jWb2UYnbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.169.0-5.226.170.255
5.226.174.0/23
185.48.205.0/24
185.48.207.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a1:59:b2:42:5f:45:3b:9e:7c:3f:c7:81:68:37:76:27:21:
ae:69:1b:25:68:00:4a:14:e5:f6:aa:a9:2d:fb:43:0f:b9:23:
ee:83:81:06:ab:d0:1e:53:35:0e:52:71:ba:c3:67:a0:c6:b9:
2c:ae:a3:91:c6:79:c5:c6:99:e5:24:53:99:05:62:25:11:7a:
dd:44:a8:57:27:16:33:e8:7e:33:d9:f7:13:0b:56:fd:a0:0f:
9a:d8:ff:da:2a:6f:75:2e:a9:c9:33:90:b8:cc:c8:8a:ae:43:
2f:13:6f:73:66:9e:92:44:1d:e0:da:8d:3e:85:e0:3d:43:88:
c6:f1:5a:ac:ab:71:98:7f:84:b3:7f:a4:6c:8a:3d:e7:53:31:
28:aa:be:f1:aa:63:a9:f2:c0:75:b7:af:84:03:06:95:d9:a3:
ec:b8:2a:08:a5:7a:73:4f:9a:b0:a2:62:90:a2:5f:ce:67:61:
a7:3a:fc:16:df:f4:f3:8a:a8:f8:43:73:7b:e8:72:81:ed:dd:
64:29:00:4a:85:1a:62:21:a6:65:f9:83:2f:0d:8b:eb:40:44:
3f:49:2f:2b:ca:2b:ce:09:97:d8:8f:cf:15:f3:19:5b:6f:0f:
ea:fd:35:33:c3:c5:19:1d:81:fa:4a:8f:45:0f:11:5c:be:3e:
d5:09:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org