Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OSJm2AsnYe5udne94GoftFfNHIA.roa
File: OSJm2AsnYe5udne94GoftFfNHIA.roa (raw, json)
Hash identifier: 57Jgw2I0foZ34PKMJCgk7C4qv5bycZyNcJjwWZ04DiE=
Subject key identifier: 39:22:66:D8:0B:27:61:EE:6E:76:77:BD:E0:6A:1F:B4:57:CD:1C:80
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 0622FCE6
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OSJm2AsnYe5udne94GoftFfNHIA.roa
Signing time: Wed 02 Mar 2022 15:08:01 +0000
ROA not before: Wed 02 Mar 2022 15:08:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 94.26.89.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
91.92.33.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102956262 (0x622fce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Mar 2 15:08:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=392266d80b2761ee6e7677bde06a1fb457cd1c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:02:6d:c5:d5:9c:1d:ac:40:17:e4:c2:c4:
eb:33:0b:81:d1:45:bf:d3:b8:db:f6:5e:7e:50:b8:
5a:6d:b8:09:73:14:57:29:8a:d0:36:01:d8:8d:9d:
66:41:65:b2:ac:73:e4:65:44:44:20:22:57:47:93:
e2:8a:84:69:95:ce:90:d9:3c:93:32:59:d2:96:61:
ea:df:89:45:2d:c2:cb:9e:d6:ba:31:e0:f6:a6:30:
1e:15:79:0e:91:d7:c3:10:fa:54:a5:49:fd:c7:6e:
e6:2d:25:79:90:81:b3:6a:05:8f:20:c6:0e:e8:77:
de:05:5e:9c:6f:88:15:66:0e:3e:d3:90:05:3e:3f:
f3:29:9f:f8:98:df:96:8d:6d:9c:57:d1:1b:43:9a:
37:8d:02:07:1a:89:1f:27:9b:61:42:75:b9:ce:11:
26:47:0a:8a:f4:2b:f5:eb:84:dd:8e:7d:6a:21:c5:
8a:5d:4a:aa:13:36:90:67:c4:e0:6a:4b:3e:ab:a1:
01:47:a5:24:fa:ca:0d:e8:0e:af:6e:70:98:35:6a:
50:bb:4e:a3:96:93:0e:c2:32:b1:99:92:c0:d7:78:
bc:98:92:07:ed:bb:2f:7b:37:69:be:47:7b:87:f1:
e5:5a:fb:5c:06:e4:45:0d:0c:ae:e4:b5:52:ab:8a:
aa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:66:D8:0B:27:61:EE:6E:76:77:BD:E0:6A:1F:B4:57:CD:1C:80
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/OSJm2AsnYe5udne94GoftFfNHIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/22
78.159.131.0/24
78.159.156.0/24
91.92.33.0-91.92.34.255
91.92.49.0/24
94.26.89.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b4:2e:ca:b6:23:f0:1b:5d:72:6e:0e:7d:f7:05:e6:03:7e:
38:da:04:c5:d4:bb:6f:fb:3f:4f:bd:63:cd:c7:74:3c:08:26:
88:18:e3:68:3f:0a:49:d4:be:d1:99:30:d0:5a:84:47:30:e5:
44:f1:33:36:f4:61:bb:97:b0:a7:94:f0:bf:82:1c:f4:94:fc:
2b:00:28:cb:4e:f8:3e:e9:b4:e0:8d:6e:3e:b8:5d:1f:1e:0f:
98:62:f6:e0:1c:6b:8b:37:d4:d8:cb:86:d1:f0:ef:c9:76:6b:
4c:93:0e:5c:b4:e6:11:91:7d:d4:7a:d4:4e:33:d5:5c:b9:fb:
70:9d:63:23:36:14:3e:19:aa:4c:94:e3:95:d0:6a:f0:32:3f:
96:17:38:f3:c9:bd:0c:35:cb:65:10:83:b8:b4:66:7f:5c:b6:
7a:d7:2b:6f:c4:43:16:8d:b6:a5:d5:04:66:2a:fb:30:1b:84:
f6:83:b2:cf:07:07:e8:1c:3a:b0:67:b2:83:84:ae:8e:d6:23:
4b:4e:e8:b9:44:fa:73:5a:cd:34:6d:8c:65:34:57:8e:a2:43:
f0:b9:90:95:03:74:5c:e7:38:a6:88:93:bb:e4:f6:a3:54:e8:
d9:58:d5:a3:b0:f6:e1:7d:ea:d7:6d:69:9e:14:b4:1b:88:e4:
a3:a5:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org