Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/RnjdPx3mAKBrLOcsvor-DzIwu3k.roa
File: RnjdPx3mAKBrLOcsvor-DzIwu3k.roa (raw, json)
Hash identifier: d+ecj+f7xTHV6HUmUGRWdIP3tOoaSCnZeYdiF9dhn3w=
Subject key identifier: 46:78:DD:3F:1D:E6:00:A0:6B:2C:E7:2C:BE:8A:FE:0F:32:30:BB:79
Certificate issuer: /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial: 0A2EB2E7
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/RnjdPx3mAKBrLOcsvor-DzIwu3k.roa
Signing time: Sat 01 Jan 2022 04:56:03 +0000
ROA not before: Sat 01 Jan 2022 04:56:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41435
IP address blocks: 213.109.80.0/20 maxlen: 20
91.193.32.0/22 maxlen: 22
194.9.36.0/23 maxlen: 23
176.104.0.0/18 maxlen: 18
176.104.2.0/24 maxlen: 24
79.110.128.0/20 maxlen: 20
79.110.128.0/22 maxlen: 22
79.110.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170832615 (0xa2eb2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
Validity
Not Before: Jan 1 04:56:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4678dd3f1de600a06b2ce72cbe8afe0f3230bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:bb:6a:d8:ea:b4:79:dc:ac:27:02:0d:b8:
cf:34:98:dd:d8:dd:e4:f2:f4:95:a4:e2:47:b3:b3:
c3:8f:a4:6f:15:ce:02:6c:9c:f3:6f:4e:40:af:92:
a4:c3:01:ae:d3:70:51:7c:a0:39:d5:e5:65:a1:ce:
1a:4f:38:d5:3d:9c:b0:f4:20:7a:e2:1c:c5:5a:9d:
fa:c2:eb:c3:4d:08:89:61:ca:6f:f3:50:c2:83:9f:
5d:37:3f:c6:36:8c:bd:0b:e5:e4:30:40:c4:18:d7:
9e:4a:c3:24:c1:f2:a1:01:40:2c:24:ec:3a:f9:6e:
c9:d6:7a:a0:30:31:89:1e:fd:40:2f:03:c5:79:7c:
37:1b:40:43:a6:76:7a:ad:f1:1d:62:7e:31:da:a5:
55:ce:bf:04:c8:02:5d:95:49:34:18:a6:30:02:08:
4c:2c:52:e8:08:d1:9b:9c:04:4f:ec:ba:57:34:fa:
6f:ba:15:33:ed:99:a4:32:b2:42:5a:16:13:00:ef:
5b:df:27:a5:e6:6b:a5:f8:d0:4b:d5:ea:3f:b1:87:
5d:cf:b0:7c:a0:c6:fc:f9:e3:82:2b:4c:1e:86:dd:
1d:37:19:b0:7c:25:8f:c5:bf:78:48:0e:d0:ea:f8:
42:f7:9b:67:bd:fb:de:1d:52:b1:10:b5:89:df:b6:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:78:DD:3F:1D:E6:00:A0:6B:2C:E7:2C:BE:8A:FE:0F:32:30:BB:79
X509v3 Authority Key Identifier:
keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/RnjdPx3mAKBrLOcsvor-DzIwu3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.128.0/20
91.193.32.0/22
176.104.0.0/18
194.9.36.0/23
213.109.80.0/20
Signature Algorithm: sha256WithRSAEncryption
39:81:31:4d:ab:be:2d:ab:46:d4:91:08:fa:96:88:4a:10:80:
af:21:d4:c6:93:23:71:eb:47:4d:b2:de:69:ae:31:5d:45:a6:
fc:e9:f5:05:93:92:83:f2:f2:d3:65:6d:27:47:4c:f1:53:d9:
10:87:0a:7a:b9:e1:cf:71:dd:70:5f:64:74:f0:fe:9b:25:74:
bc:46:0a:f4:cd:92:ca:06:0d:45:e3:f8:96:8b:01:cb:5a:f9:
1e:ff:3a:1c:46:75:cc:0c:a3:f5:47:73:73:85:65:83:91:7e:
b7:3e:de:ca:c8:d7:c1:25:d2:07:9c:19:19:2a:8b:c2:f8:1b:
95:ac:86:86:c7:d7:23:64:fe:41:9b:2c:a4:66:81:96:aa:b1:
f6:d3:e5:ee:08:22:e4:8e:92:b5:24:3e:60:c3:4c:08:56:03:
05:13:2b:74:98:e5:f3:99:21:3e:cc:b2:eb:17:a9:b6:06:43:
ed:7c:2d:51:82:fe:e0:38:c6:72:04:ff:59:8b:a1:0d:b1:97:
d0:5f:f9:fd:ef:d2:91:85:3e:ee:37:7a:8d:2b:87:9b:0d:33:
1d:f7:94:4e:20:9b:c6:8d:47:60:7b:60:48:d1:b9:69:25:78:
24:92:01:d4:7e:fa:8b:3b:eb:6b:96:1d:21:6d:11:6a:42:40:
66:55:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:02 2023 by rpki-client on console-fra.rpki-client.org