Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jFQvSv_ZMu8HDh10DFKTKMeVyiw.roa
File: jFQvSv_ZMu8HDh10DFKTKMeVyiw.roa (raw, json)
Hash identifier: W0fdqK83lZAU6HZMSVU8/fxvRU8sVtSGzB6/GcFo/Xs=
Subject key identifier: 8C:54:2F:4A:FF:D9:32:EF:07:0E:1D:74:0C:52:93:28:C7:95:CA:2C
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 0554634A
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jFQvSv_ZMu8HDh10DFKTKMeVyiw.roa
Signing time: Tue 10 May 2022 11:45:02 +0000
ROA not before: Tue 10 May 2022 11:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35213
IP address blocks: 91.239.139.0/24 maxlen: 24
91.239.138.0/24 maxlen: 24
91.239.137.0/24 maxlen: 24
91.239.136.0/22 maxlen: 22
91.239.136.0/24 maxlen: 24
91.201.168.0/24 maxlen: 24
176.111.51.0/24 maxlen: 24
193.0.247.0/24 maxlen: 24
91.205.67.0/24 maxlen: 24
91.205.66.0/24 maxlen: 24
91.205.65.0/24 maxlen: 24
91.205.64.0/22 maxlen: 22
91.205.64.0/24 maxlen: 24
2001:678:31c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89416522 (0x554634a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: May 10 11:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c542f4affd932ef070e1d740c529328c795ca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:74:ea:4e:6a:da:23:af:e5:26:95:c4:d5:
dd:27:a3:b9:61:3e:19:ad:9a:68:16:d5:c9:dd:a8:
08:58:3b:6d:b3:49:17:14:b4:9c:58:93:1c:a7:36:
c0:a1:b1:1b:15:32:93:e1:eb:72:70:bb:7e:79:a3:
ec:ab:58:d1:88:f0:30:31:30:77:aa:65:33:72:d2:
01:c3:0c:6c:ef:16:c0:bc:d1:bd:68:20:0f:f1:03:
e7:61:90:e1:0c:c5:32:db:e5:e2:f6:48:e6:89:e8:
05:52:36:d7:71:eb:2c:1f:cf:3d:ec:b5:30:87:cc:
b6:58:92:81:d8:be:77:91:2b:c1:1f:33:30:fa:18:
4a:a1:e6:f6:21:0c:8d:b3:03:09:77:63:02:90:72:
db:85:b9:af:1d:4b:c7:29:0a:16:76:4c:d5:44:42:
7b:d7:28:c1:25:4c:29:b2:bd:81:0e:c9:dc:db:4b:
e5:7d:0b:82:b5:a6:59:68:02:08:73:b8:10:9e:3c:
11:74:a5:cb:c3:a5:e8:96:85:d1:4c:ae:85:32:d6:
45:82:5f:94:13:dd:fe:30:e8:bf:3f:00:be:83:fb:
86:67:df:f5:e1:c1:23:61:90:78:94:dc:a3:bd:58:
03:28:16:12:a3:bb:37:80:9c:32:b8:9e:5d:1a:ef:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:54:2F:4A:FF:D9:32:EF:07:0E:1D:74:0C:52:93:28:C7:95:CA:2C
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jFQvSv_ZMu8HDh10DFKTKMeVyiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:52:ba:db:07:34:4d:60:cf:02:8d:7d:33:ea:41:e6:72:ab:
ce:db:0f:8e:56:c4:5e:b2:35:eb:9f:a8:35:15:bb:2e:1a:27:
e7:7b:91:94:fc:a5:7d:cf:08:06:a0:75:ba:a3:5e:2e:03:50:
eb:0e:f2:b3:f3:a2:c8:6f:e9:68:43:07:dd:18:c6:90:b1:36:
a6:93:36:99:3a:27:2d:59:85:78:3f:df:67:9b:8e:76:fe:ed:
48:41:83:44:b4:25:3a:72:66:0d:84:49:20:55:85:a8:f9:3e:
ce:dc:4a:2e:e7:80:7f:52:39:44:d5:a0:95:14:4a:bd:6e:ae:
02:74:af:6c:32:f0:d8:97:c5:2a:57:c6:6a:86:b6:9f:18:55:
cf:91:1c:7b:56:a7:45:29:36:23:03:99:25:01:e0:df:54:7b:
be:d2:9e:65:6f:49:f5:b3:52:38:0e:2d:8e:fc:e8:af:1e:68:
d0:ad:97:9e:0e:37:57:e1:68:9d:25:d8:8b:cf:fb:b5:b8:c1:
3d:38:41:30:ab:10:fc:ff:d3:a9:f2:8d:55:66:84:78:16:c6:
36:6e:4f:ea:f1:dc:e8:48:26:73:c3:fa:30:c2:02:15:09:29:
d6:db:64:9c:b0:46:14:bd:37:5a:56:cf:f4:4b:1d:27:3a:a5:
1b:0a:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org