Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/k5AE6H-di0glArIhpTafZ1xS7tE.roa
File: k5AE6H-di0glArIhpTafZ1xS7tE.roa (raw, json)
Hash identifier: 23qzlRDPZ138KOHCzEJjhXrzB7SE6sbSXPYDqkWmdmo=
Subject key identifier: 93:90:04:E8:7F:9D:8B:48:25:02:B2:21:A5:36:9F:67:5C:52:EE:D1
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 05A1F356
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/k5AE6H-di0glArIhpTafZ1xS7tE.roa
Signing time: Wed 26 Jan 2022 13:26:49 +0000
ROA not before: Wed 26 Jan 2022 13:26:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 94.26.89.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
45.141.233.0/24 maxlen: 24
45.141.232.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94499670 (0x5a1f356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 26 13:26:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939004e87f9d8b482502b221a5369f675c52eed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:66:6d:ea:3b:d8:bb:f2:57:ad:d7:b6:c2:
48:84:50:c7:33:ff:02:e3:fb:d8:87:37:78:ac:58:
f0:61:9a:8f:2e:c3:b4:53:af:09:77:bb:ac:ea:ec:
df:96:0b:ef:5e:45:36:2f:57:e7:f8:22:14:b1:f6:
39:4a:1f:ea:15:a2:d8:f9:99:ea:13:7a:57:d5:01:
5b:8d:ba:06:64:aa:c9:11:38:b9:ca:e1:17:9f:f0:
29:bf:f1:e7:46:48:e2:6a:d2:28:60:c1:0d:21:42:
ad:3c:0c:fc:50:9c:12:e2:43:c1:20:80:fe:7d:b6:
ac:1e:69:3c:55:dc:0c:12:25:c7:2a:64:8a:49:58:
80:b1:87:73:23:96:27:db:28:d9:d4:e5:c8:fd:07:
31:b6:08:bd:c3:93:36:ab:c7:83:b5:34:aa:52:8f:
6d:d9:54:4f:ea:df:0d:8a:d4:7a:e6:f9:bd:d9:86:
ea:6b:94:62:28:52:31:27:b2:bd:15:4c:6f:37:ad:
a7:df:44:cb:9e:5b:c1:0b:05:e1:6a:01:77:23:dc:
69:a9:e3:1b:d9:13:c0:2a:ac:ad:eb:1c:fb:c1:2c:
34:09:fb:e5:17:ed:5a:ef:67:47:42:92:df:f2:dd:
07:93:c2:e9:91:75:3b:b9:ca:1f:2c:a8:7c:46:0e:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:90:04:E8:7F:9D:8B:48:25:02:B2:21:A5:36:9F:67:5C:52:EE:D1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/k5AE6H-di0glArIhpTafZ1xS7tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0-45.141.234.255
91.92.34.0/24
94.26.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:53:db:e9:80:20:24:c6:40:8e:1e:96:8d:e1:41:75:46:07:
78:96:ee:7c:7c:95:f2:0a:e2:c9:9c:c6:43:0b:71:c6:c3:b7:
30:ad:b9:31:5e:a2:fd:44:79:58:cb:c0:c9:1f:d9:51:e6:8b:
e4:7d:c4:87:11:ad:83:9a:88:e3:8d:8c:d0:07:2c:85:db:3f:
53:ed:8d:40:fb:a5:00:70:dc:23:fb:45:78:85:38:a9:13:5e:
bc:2c:20:9e:fa:d8:f4:89:96:36:c7:a3:d2:d6:a6:67:e4:c4:
1a:55:80:e6:6c:8e:ce:8a:04:84:01:e2:fe:1f:4e:30:54:88:
b7:47:de:6c:92:5d:08:38:aa:30:cf:4a:bd:58:41:fa:4b:b3:
26:34:df:63:98:74:dd:f6:8d:4b:4e:19:84:d2:40:a5:31:da:
4f:37:31:89:49:12:d2:e7:dd:34:02:56:1f:c6:85:24:ff:f2:
ab:cf:be:eb:00:d4:a4:30:41:7d:bb:84:d2:d7:29:6d:dd:44:
16:01:f7:e0:14:07:5b:e1:40:ed:dd:b9:26:7b:df:88:98:46:
f9:d3:87:a4:67:40:cd:e5:2d:b0:49:c2:b6:3b:d7:74:3e:3d:
84:db:36:92:28:2f:f3:bb:0a:19:09:87:fe:b4:b6:bd:56:5e:
be:aa:d5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org