Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/blHhqicD7poM3f1is8mizM_OxXE.roa
File: blHhqicD7poM3f1is8mizM_OxXE.roa (raw, json)
Hash identifier: Z5tF07a78K6yibWM0UYMyV2uZd3pvD/GEyCjzxw9qLA=
Subject key identifier: 6E:51:E1:AA:27:03:EE:9A:0C:DD:FD:62:B3:C9:A2:CC:CF:CE:C5:71
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19A1105E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/blHhqicD7poM3f1is8mizM_OxXE.roa
Signing time: Tue 12 Apr 2022 08:13:52 +0000
ROA not before: Tue 12 Apr 2022 08:13:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 5.183.204.0/24 maxlen: 32
5.183.205.0/24 maxlen: 32
45.14.46.0/24 maxlen: 32
2.59.174.0/24 maxlen: 32
213.232.104.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429985886 (0x19a1105e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 12 08:13:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e51e1aa2703ee9a0cddfd62b3c9a2cccfcec571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:a8:bf:26:f9:bf:a7:0d:03:00:73:39:14:
76:73:97:86:a8:a6:75:65:bc:b9:bf:b0:7c:7d:7f:
5d:40:53:95:a5:23:10:38:4a:90:6c:3f:9e:05:2a:
ac:7b:6a:59:da:b9:bf:fc:c6:b1:32:70:95:37:1d:
42:58:4b:77:f0:15:97:8a:4d:48:99:34:aa:71:41:
81:dd:d3:97:b9:85:f0:f8:a3:fb:80:59:4b:7a:26:
11:9b:27:3b:20:a0:4c:c2:39:69:9b:fa:64:66:f5:
38:11:7a:63:fa:12:be:ea:55:4d:7c:41:45:2e:43:
05:47:74:95:64:30:a8:d1:5c:6d:b3:92:62:a9:95:
ef:90:fb:92:52:99:49:51:ea:88:02:73:ac:52:b4:
6b:b6:59:6d:8b:c6:06:7a:4c:3d:6f:66:62:3c:bd:
f4:4b:2e:e5:56:a3:33:ff:cf:e2:bb:52:b1:de:3d:
be:0d:e0:4b:47:e4:c6:f5:20:1d:a1:de:c9:8e:be:
4f:55:c9:13:7b:f4:8c:0e:a9:06:a5:9e:bf:49:4a:
d9:a8:5a:4d:a0:be:a6:1b:a0:ef:b0:b4:11:66:c2:
48:75:cf:92:ee:94:4b:81:3f:99:0e:eb:08:f6:57:
da:b4:4b:ad:88:7e:34:df:b5:ba:3a:20:8f:48:fa:
5a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:51:E1:AA:27:03:EE:9A:0C:DD:FD:62:B3:C9:A2:CC:CF:CE:C5:71
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/blHhqicD7poM3f1is8mizM_OxXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.174.0/24
5.183.204.0/23
45.14.46.0/24
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5f:ae:93:59:73:84:3b:67:3a:78:9d:60:fd:64:5d:d3:74:
ee:8b:c2:c7:68:a0:a7:d3:3d:0f:a2:f8:d5:4d:7e:53:d6:f2:
37:ac:03:94:82:2a:dc:85:7d:ad:02:a1:18:27:3d:69:04:93:
17:b7:bf:61:73:e8:f4:9d:35:93:07:e1:12:56:c7:63:56:c2:
53:2c:98:90:05:5c:5c:ce:77:41:00:28:26:45:42:34:21:22:
26:d1:e5:c8:80:ad:29:35:ee:6e:8e:f9:9e:77:61:b5:6a:1f:
79:05:39:6a:7e:01:4f:14:20:1f:c7:32:42:3c:0c:07:36:28:
cf:f9:ef:de:19:ca:bb:de:78:a2:4f:0a:c3:d7:71:1d:bf:21:
f8:1c:ed:17:83:11:13:11:99:f9:ed:45:55:66:bb:0b:1a:57:
99:ee:8e:5f:b2:b1:8e:fd:b4:0c:b7:5a:12:06:50:e1:8b:6f:
f9:41:65:7b:ac:8a:22:76:c7:8c:6d:dc:78:af:5c:c1:16:ff:
4d:e7:e6:7f:75:ab:7f:66:76:ef:c5:a5:ab:69:6b:d4:eb:4c:
83:70:2b:c3:62:a2:b0:b1:aa:d4:b2:ad:93:73:03:cc:3d:47:
78:03:9b:48:6d:10:81:6b:d3:22:22:b3:86:cd:c9:7a:91:9a:
96:ee:a3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org