Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/IUK6IqU8Sz1JvyxOY3M8gxcjlyc.roa
File: IUK6IqU8Sz1JvyxOY3M8gxcjlyc.roa (raw, json)
Hash identifier: 0bA3Vp6u1UACKAVu5d42QVPofjWlBWyCYsG/xLDGMD4=
Subject key identifier: 21:42:BA:22:A5:3C:4B:3D:49:BF:2C:4E:63:73:3C:83:17:23:97:27
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0909AA45
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/IUK6IqU8Sz1JvyxOY3M8gxcjlyc.roa
Signing time: Sat 01 Jan 2022 08:56:16 +0000
ROA not before: Sat 01 Jan 2022 08:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35185
IP address blocks: 91.208.199.0/24 maxlen: 24
85.209.165.0/24 maxlen: 24
85.209.166.0/24 maxlen: 24
85.209.164.0/24 maxlen: 24
85.209.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151628357 (0x909aa45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jan 1 08:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2142ba22a53c4b3d49bf2c4e63733c8317239727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:47:b5:c5:65:50:5d:76:74:fd:15:56:cb:6d:
9d:3d:c8:fa:5b:d0:38:0e:7d:72:42:a1:3d:1d:11:
2c:d7:f9:fc:6a:77:70:19:87:a6:21:16:f9:be:59:
40:f5:a6:8b:81:fc:5a:9b:0f:f2:3f:6e:74:b0:be:
3f:6b:3d:18:19:74:cc:f3:93:2e:cf:be:c5:8c:ee:
24:92:70:15:7e:ec:61:6d:e2:45:20:ce:0f:4a:03:
36:6b:21:27:1f:38:f9:22:f7:5c:ed:b1:06:f9:04:
e8:98:6c:09:da:e7:98:a4:6b:6d:ba:65:6e:0a:5e:
e4:ff:d2:e5:90:67:3b:f3:b7:13:1a:ef:6c:ee:ba:
ef:1d:94:6f:fa:b6:9e:76:1d:0a:78:3d:04:41:f7:
33:20:0e:6a:2b:2e:8c:b4:82:15:ac:f4:d3:d4:52:
7d:5a:a1:44:6e:98:3c:45:96:3e:40:f4:07:02:b7:
d3:23:e9:35:7b:36:a3:e9:61:79:7b:34:09:a0:dc:
1a:7b:7c:7d:3e:54:63:ac:ea:5b:d4:aa:65:c1:7e:
25:ac:ae:ca:f1:f7:69:e7:3a:ab:7f:3c:4f:ae:9d:
ed:b5:bc:0b:50:d9:6b:c9:c0:4e:ee:dd:59:b3:7f:
c8:c8:ba:dc:db:4d:00:64:fb:ff:d7:a2:1c:dd:dd:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:BA:22:A5:3C:4B:3D:49:BF:2C:4E:63:73:3C:83:17:23:97:27
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/IUK6IqU8Sz1JvyxOY3M8gxcjlyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.164.0/22
91.208.199.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:56:81:d9:6c:f3:8b:00:f6:bf:a6:bd:38:2c:a9:aa:dd:
98:02:d3:be:d2:c7:72:94:6f:07:32:e1:18:6d:52:ef:72:fe:
72:32:96:53:4a:dc:1b:f8:47:96:27:a8:f4:9c:06:29:6d:6f:
34:5a:11:37:e5:9e:c2:a5:65:1a:db:07:9c:a4:03:75:0d:4b:
ae:11:01:65:ca:06:5f:18:1a:b9:3c:16:ff:9c:5b:e8:01:02:
28:84:09:74:0d:cd:6c:e2:c5:85:fb:12:a1:3f:6a:81:d7:d9:
f4:11:2d:09:35:13:38:06:25:48:d1:d9:b2:bc:31:40:31:3c:
45:80:50:a5:7a:5e:50:37:6d:42:cd:71:ac:b1:53:02:a3:e9:
9f:b9:09:b3:a6:23:97:15:a2:91:16:1e:d4:2d:80:e2:3e:44:
69:20:20:b7:3e:63:10:3a:93:09:d0:b1:ba:c7:68:16:e6:db:
b7:5a:ef:aa:3a:6f:1b:0e:60:ac:c1:d5:e8:2d:df:5d:52:dd:
a8:54:e8:ec:22:78:c8:c8:dc:63:9c:3f:24:c3:1e:26:cd:95:
1f:c6:e6:6b:f1:45:f4:7d:77:81:e7:39:b5:0e:07:3a:bf:58:
15:05:35:47:74:06:90:62:be:f5:9b:7a:32:be:54:7e:b0:f1:
1e:2b:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org