Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/hDhIihGvqmv6xBLbqr2ePU-hkSI.roa
File: hDhIihGvqmv6xBLbqr2ePU-hkSI.roa (raw, json)
Hash identifier: 5nutgSBsI45qgYTNdM6rcnM8lo97kjOGT4gOLV3vUX0=
Subject key identifier: 84:38:48:8A:11:AF:AA:6B:FA:C4:12:DB:AA:BD:9E:3D:4F:A1:91:22
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 37973797
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/hDhIihGvqmv6xBLbqr2ePU-hkSI.roa
Signing time: Sat 01 Jan 2022 09:06:05 +0000
ROA not before: Sat 01 Jan 2022 09:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42705
IP address blocks: 80.251.0.0/20 maxlen: 20
80.251.10.0/24 maxlen: 24
85.31.64.0/19 maxlen: 24
80.251.11.0/24 maxlen: 24
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.16.0/22 maxlen: 22
5.11.24.0/24 maxlen: 24
5.11.24.0/23 maxlen: 23
5.11.24.0/21 maxlen: 21
5.11.26.0/23 maxlen: 23
5.11.25.0/24 maxlen: 24
5.11.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932657047 (0x37973797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 1 09:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8438488a11afaa6bfac412dbaabd9e3d4fa19122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:63:19:30:5b:95:57:c1:81:df:58:a6:55:
b9:b9:7f:99:08:6d:cb:16:5a:c0:1c:03:89:cf:81:
07:5d:91:e9:2e:80:a8:be:2c:f1:57:5a:05:14:bb:
30:c1:9c:b6:db:f3:d7:f0:5a:b5:c7:b7:f3:dd:0c:
31:f5:7f:39:8d:f3:87:88:b4:d7:47:9d:44:9f:72:
f0:06:6b:51:67:ed:92:02:c5:7b:9b:36:d0:46:2d:
65:3f:55:c3:81:85:ec:27:3c:99:bf:11:6f:c4:9f:
c4:09:6f:44:a4:b2:a1:7a:fd:c5:2d:8f:d8:b3:53:
ec:3e:13:33:7d:7e:2f:27:71:f0:c6:57:32:83:f3:
9b:63:02:23:42:e4:27:36:3e:36:dd:6d:89:cb:fb:
25:ee:e5:fe:e8:a8:72:1c:f7:6a:e1:88:74:49:b9:
a2:63:4e:a9:17:b2:d7:18:79:18:f6:18:72:bb:60:
83:af:a2:7e:68:3a:f3:7a:ff:9f:c1:0f:81:25:4c:
85:e8:25:6d:a3:5c:76:f7:f1:a3:ef:68:0e:66:d7:
04:38:35:8a:bc:3a:94:c3:76:0d:ac:a8:9e:88:28:
d6:67:89:eb:c1:48:68:6a:cb:5e:13:d8:35:97:95:
41:85:5c:d2:4a:3d:80:55:b8:6e:99:92:30:49:40:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:48:8A:11:AF:AA:6B:FA:C4:12:DB:AA:BD:9E:3D:4F:A1:91:22
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/hDhIihGvqmv6xBLbqr2ePU-hkSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.24.0/21
80.251.0.0/20
85.31.64.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:77:2d:25:11:23:d0:8e:04:16:eb:68:f7:ea:51:15:13:39:
59:3e:1a:ff:3b:e8:b5:e6:49:6e:e6:e0:b7:ec:38:d0:57:e7:
0b:1f:f2:f7:c7:55:ed:e5:13:18:b0:54:c9:e7:6a:8d:34:48:
67:0d:92:66:91:53:d0:8c:99:ad:df:06:79:72:28:1b:a1:34:
bc:6b:75:79:0d:13:79:17:ab:13:98:d7:82:14:f3:9b:a1:5b:
62:79:1e:24:cc:df:d4:81:79:b2:d4:37:5e:5a:ac:be:8d:d1:
03:c1:d6:9f:fc:be:90:a5:42:55:d9:c5:06:c2:3d:31:d6:c1:
5b:eb:c4:ce:88:d1:c0:ec:76:fa:36:4c:6e:0a:77:4b:06:08:
dd:90:43:c2:e6:d1:0b:6e:ce:05:ce:97:63:4e:6e:9b:89:4e:
49:2a:41:cf:ce:75:2c:8e:9a:e3:6e:e9:b2:dd:4e:cb:16:fd:
82:9b:ec:8f:4b:16:e7:3a:04:99:e8:bc:ba:a8:9a:22:78:c8:
78:90:87:70:53:af:2a:b5:f4:b3:40:70:d1:4b:a0:48:12:b7:
04:2a:87:c5:22:12:fa:0f:d3:ed:d7:70:54:06:ec:5e:78:1e:
2c:25:ce:eb:2d:fa:d8:28:e9:78:cb:31:da:87:9b:ab:6e:a9:
11:78:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:06 2024 by rpki-client on console-fra.rpki-client.org