Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/021nhxgeJL3tzdT9tP9vOKDLizs.roa
File: 021nhxgeJL3tzdT9tP9vOKDLizs.roa (raw, json)
Hash identifier: +eI3O1eULEf44+EtPJcHLBVOIqFic8/4Kmn9EaGunl0=
Subject key identifier: D3:6D:67:87:18:1E:24:BD:ED:CD:D4:FD:B4:FF:6F:38:A0:CB:8B:3B
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01824A71BDDCF253126A58DDFBBF852914C7
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/021nhxgeJL3tzdT9tP9vOKDLizs.roa
Signing time: Fri 29 Jul 2022 14:52:24 +0000
ROA not before: Fri 29 Jul 2022 14:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29657
IP address blocks: 92.52.221.0/24 maxlen: 24
5.180.123.0/24 maxlen: 24
194.41.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:71:bd:dc:f2:53:12:6a:58:dd:fb:bf:85:29:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 14:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d36d6787181e24bdedcdd4fdb4ff6f38a0cb8b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:ba:c6:9c:81:b8:31:dd:db:a3:12:e2:53:
71:a8:fd:d1:8d:50:4e:bb:56:3b:04:b7:aa:08:8e:
fe:e6:74:ce:31:db:76:c7:0f:ae:95:aa:97:86:12:
7e:1a:00:67:38:8d:50:4d:62:e0:82:bb:72:35:22:
ca:b2:cf:61:26:00:34:2b:fe:28:f1:2b:8f:07:ed:
b5:30:56:48:aa:17:82:64:80:5a:a0:08:75:e4:d8:
45:0f:cd:3b:3b:18:14:5e:a0:20:9a:6c:ac:30:65:
b3:72:88:0c:8e:1e:ac:d4:96:ca:cb:66:2e:52:e9:
d0:7d:56:e6:3f:b1:08:47:44:cd:ae:81:1f:24:2a:
33:dc:9e:60:7e:26:f8:c9:33:dc:38:e4:51:a6:e3:
cd:af:ef:19:21:7c:a1:17:e9:19:71:e6:98:5f:61:
4e:8f:61:f0:d4:7d:7c:ca:de:7a:55:a0:d1:61:08:
c0:d8:50:80:bc:59:61:d6:a3:e3:18:81:65:f3:d6:
73:00:bd:56:01:28:16:9b:3f:47:f1:04:48:85:da:
a6:6f:aa:0e:b2:f8:09:10:10:20:8e:2d:7e:8c:76:
32:d1:86:d9:84:03:2e:bf:76:05:f8:51:7e:65:bc:
7a:2f:90:75:7d:7d:07:83:82:d6:a0:f3:05:28:61:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:67:87:18:1E:24:BD:ED:CD:D4:FD:B4:FF:6F:38:A0:CB:8B:3B
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/021nhxgeJL3tzdT9tP9vOKDLizs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.123.0/24
92.52.221.0/24
194.41.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ab:bb:4a:1d:f1:8c:a4:75:32:88:16:de:c9:5d:98:df:b7:
bb:35:81:3d:7a:4b:4d:f7:1a:93:ba:86:d4:d3:30:93:5e:56:
6e:f7:7d:ac:20:6d:6e:80:ed:2c:b4:46:4f:64:18:57:55:7b:
a9:05:10:dc:1e:35:a9:9c:38:4b:99:57:18:07:c8:26:45:c5:
9c:2c:c7:55:31:30:15:72:3c:b7:13:a3:fb:a8:12:b6:99:27:
fd:0e:56:b3:e3:27:aa:97:8d:0f:60:65:cc:a4:4f:0e:df:e9:
8f:86:c5:48:43:d2:33:92:19:c9:61:c6:75:0d:b4:e0:2e:42:
07:78:a7:55:f2:48:f8:c3:28:49:c1:2a:d9:42:9b:92:c2:2f:
d2:96:3c:b4:6f:c4:24:36:f9:aa:cb:c4:0b:cf:89:bf:ac:80:
25:34:77:ee:e0:de:30:6c:5f:2e:ec:a5:a2:6f:ef:1c:81:d7:
de:c8:b7:7e:67:39:87:e2:bc:ac:f6:a9:11:9a:88:9d:22:64:
51:d7:b8:81:b3:85:54:22:f6:2a:84:9b:4f:24:34:3d:cf:4e:
32:d2:60:13:83:07:25:1c:24:f1:13:5f:ad:02:f6:3e:40:e4:
55:47:8f:5f:5c:66:8b:68:e7:67:44:60:a3:a8:9e:0a:56:96:
5b:d4:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org