Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2N-kfDEAG9LKPyHv2GuHfwIJXJ4.roa
File: 2N-kfDEAG9LKPyHv2GuHfwIJXJ4.roa (raw, json)
Hash identifier: CXYJkMFhrzthtwFBYdyl1LqJ2He/6trNm76/CB2kqC0=
Subject key identifier: D8:DF:A4:7C:31:00:1B:D2:CA:3F:21:EF:D8:6B:87:7F:02:09:5C:9E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19F107B6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2N-kfDEAG9LKPyHv2GuHfwIJXJ4.roa
Signing time: Sat 30 Apr 2022 22:14:41 +0000
ROA not before: Sat 30 Apr 2022 22:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 193.187.153.0/24 maxlen: 24
45.12.232.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
2.59.174.0/24 maxlen: 32
213.232.104.0/24 maxlen: 24
193.160.212.0/24 maxlen: 24
92.119.150.0/24 maxlen: 32
5.181.148.0/23 maxlen: 32
91.188.203.0/24 maxlen: 32
185.226.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435226550 (0x19f107b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 30 22:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8dfa47c31001bd2ca3f21efd86b877f02095c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:36:8f:2a:26:35:de:22:8e:d6:31:14:27:
f2:b4:33:29:aa:07:01:fc:b4:e8:c8:7d:b4:76:92:
f7:6c:bb:e2:2f:18:61:e3:01:97:8f:43:22:15:1a:
8f:ca:31:f9:67:a4:85:53:4a:8e:cb:89:e7:75:5f:
4d:36:91:16:db:ec:68:e9:33:26:cc:75:5b:07:21:
c9:fd:8a:97:2b:20:36:3c:78:9b:7f:cc:78:15:3c:
c0:20:73:4f:01:0b:30:3a:74:3d:65:df:fb:75:64:
db:39:16:46:4b:03:72:23:5b:06:94:ff:63:68:c4:
07:d8:cb:d8:b4:45:25:88:f0:38:51:e1:68:a4:ef:
8f:30:91:6c:f1:4a:6f:39:5a:3c:0e:fe:7b:3e:d7:
e8:01:62:e0:ac:69:fc:48:34:62:db:54:27:1c:78:
4e:6b:06:c5:15:42:94:e2:d5:b3:45:51:f7:23:4c:
a5:db:99:0c:36:a4:9d:7e:57:4a:8f:0f:11:26:0c:
ed:7a:3d:f5:cf:b2:15:33:9b:b1:d9:02:9e:ec:85:
56:8c:4d:cd:d3:54:48:45:14:f0:20:c2:9e:9e:35:
d8:5d:c9:70:e8:43:17:6c:b8:95:91:54:ec:cf:34:
86:71:51:c1:08:62:c9:8c:c7:09:13:40:34:32:fd:
41:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:A4:7C:31:00:1B:D2:CA:3F:21:EF:D8:6B:87:7F:02:09:5C:9E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2N-kfDEAG9LKPyHv2GuHfwIJXJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/24
5.181.148.0/23
45.12.232.0/24
45.14.46.0/24
91.188.203.0/24
92.119.150.0/24
185.226.75.0/24
193.160.212.0/24
193.187.153.0/24
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bc:cf:db:53:fc:75:15:96:21:f3:3f:cf:02:c6:f6:ed:16:
c0:5f:74:15:54:c3:8b:15:d2:a9:45:75:50:1d:6e:8d:42:c8:
cc:47:9f:54:8f:b6:b6:18:1c:3a:12:68:a6:39:d4:f2:e9:19:
c7:2c:19:6d:68:f5:5f:3b:a0:d0:e3:1c:b0:72:32:03:75:1f:
7b:87:9d:ff:02:2d:5a:68:e7:6a:1e:f5:2b:ae:cc:c4:6f:37:
12:31:33:f5:53:ad:89:39:eb:51:94:bc:48:ac:23:30:8a:d0:
a8:d9:fd:be:e5:d3:03:26:a1:45:d4:c9:c5:c4:49:08:7f:ec:
b2:4b:28:3e:27:83:8c:77:ad:28:dd:2c:71:00:bc:8f:2d:73:
e2:e8:9e:d7:e4:2c:23:dc:b2:ae:56:26:73:b9:98:23:e4:f6:
8b:86:f1:8e:02:77:71:07:e7:07:9e:7e:71:c5:f5:0a:9e:94:
29:46:13:db:18:35:60:7e:14:5f:e3:14:bc:6c:46:b3:cc:bc:
d3:ed:ba:3f:ab:c8:58:20:fb:fc:2a:ac:99:a9:ed:3f:f8:11:
0b:91:ff:7e:43:ad:46:13:c3:ef:ae:13:c9:63:c3:d8:9c:da:
29:c4:b8:c8:98:94:04:a3:55:c4:dc:79:be:3a:23:e3:0d:e0:
dd:4b:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org