Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/8paxpP99T1YxTsITd3ADIdcGXvY.roa
File: 8paxpP99T1YxTsITd3ADIdcGXvY.roa (raw, json)
Hash identifier: zENaO47GxTdKXg5tLnEhm2rPRQ0Elkfb+8QWKxqQm8U=
Subject key identifier: F2:96:B1:A4:FF:7D:4F:56:31:4E:C2:13:77:70:03:21:D7:06:5E:F6
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 05A9A209
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/8paxpP99T1YxTsITd3ADIdcGXvY.roa
Signing time: Sat 01 Jan 2022 12:57:34 +0000
ROA not before: Sat 01 Jan 2022 12:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204635
IP address blocks: 91.213.37.0/24 maxlen: 24
185.244.196.0/22 maxlen: 24
2001:67c:26ac::/48 maxlen: 48
2a0d:3d80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95003145 (0x5a9a209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Jan 1 12:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f296b1a4ff7d4f56314ec21377700321d7065ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:1d:f5:8d:05:31:65:1b:40:bf:69:5e:48:
f0:77:c2:57:e1:79:4a:fe:0f:f5:c1:6f:16:ca:28:
6d:3b:0b:a1:55:26:f0:17:dd:a8:38:86:5a:ef:fc:
0e:d7:91:d0:2f:a4:90:36:88:ec:6c:6d:62:6f:d7:
84:35:2d:a6:94:73:ee:fe:e0:32:8e:0b:94:9a:a5:
d6:08:04:a5:6f:78:af:9b:ae:c1:47:cb:c5:53:11:
a7:3b:68:c6:be:5f:14:53:a9:51:34:e6:f4:f9:d1:
df:b1:13:79:a1:cc:7e:9e:1b:90:f4:ea:ab:4a:0d:
ec:b4:36:49:77:a1:89:89:27:5e:35:d9:20:83:dd:
a8:5c:fc:3c:5c:5d:43:89:4b:f4:2d:ba:a0:73:db:
dc:14:ff:2c:19:cf:3e:5c:12:e1:55:25:51:0c:6c:
f2:0a:43:66:ec:a9:ec:70:a8:e1:79:64:ed:79:99:
8c:4b:95:f6:3c:06:6b:83:38:e0:b7:02:94:c9:a8:
12:dc:15:41:27:4a:71:5f:1d:bd:b1:1c:12:29:4b:
29:46:ed:5d:e1:4a:02:37:ad:32:71:86:02:10:de:
fd:9f:51:ea:d3:12:f7:9b:aa:1d:a0:05:97:b0:75:
22:d7:b2:fe:e9:ce:92:b1:8a:42:bc:61:e2:b6:3e:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:B1:A4:FF:7D:4F:56:31:4E:C2:13:77:70:03:21:D7:06:5E:F6
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/8paxpP99T1YxTsITd3ADIdcGXvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.37.0/24
185.244.196.0/22
IPv6:
2001:67c:26ac::/48
2a0d:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
a3:94:f8:48:d1:66:30:3c:cf:61:93:53:a9:0d:4d:b6:a9:cc:
ee:1e:ab:8e:b2:b2:e6:c9:78:62:c4:5b:f2:b9:34:dc:16:d7:
85:65:fe:01:d0:75:cd:2e:b4:c6:7c:81:46:79:fb:5b:68:22:
26:8c:2c:6a:32:8a:e1:47:c4:8c:a1:97:b3:b9:a8:39:8b:a9:
04:fd:8c:4d:90:40:fd:d0:9b:ae:d4:ce:66:20:a4:36:c2:af:
5b:39:0e:d8:36:32:cd:9d:35:41:9a:d7:19:f3:1e:0c:3a:b1:
d6:4d:22:be:e6:40:1d:0c:c1:c4:21:e8:7d:13:af:1a:47:ad:
62:0e:0d:e8:be:fd:7e:8b:b5:29:d1:8a:83:fb:6a:7e:90:08:
e1:1c:2a:95:5b:9f:a3:a6:a2:36:af:75:db:ae:8a:4f:b1:3c:
ad:ec:5e:a7:62:c3:3b:fa:29:69:44:34:fa:26:56:e7:50:32:
47:0b:fc:54:06:82:60:92:2b:1d:c1:c1:03:93:2d:b2:8f:b8:
1d:cd:90:b0:f0:69:86:fd:57:c5:a6:cd:cf:f5:3e:5c:13:8a:
56:d9:63:ad:f1:f4:98:24:1e:e5:01:60:71:de:f5:b9:84:94:
12:a7:a0:16:ce:89:92:10:86:20:ce:47:2f:c4:3a:f5:35:3c:
ab:d6:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-fra.rpki-client.org