Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/1-Ij2IJX5TxY3QYTv35bCZouDMoo.roa
File: 1-Ij2IJX5TxY3QYTv35bCZouDMoo.roa (raw, json)
Hash identifier: 3kwzyvOjqOkphMtiXu8lWinbcXluxxyIOVhygwwVA6Y=
Subject key identifier: F8:88:F6:20:95:F9:4F:16:37:41:84:EF:DF:96:C2:66:8B:83:32:8A
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 022B9857
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/1-Ij2IJX5TxY3QYTv35bCZouDMoo.roa
Signing time: Sat 01 Jan 2022 14:07:30 +0000
ROA not before: Sat 01 Jan 2022 14:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202591
IP address blocks: 92.119.28.0/22 maxlen: 22
185.150.184.0/22 maxlen: 22
45.154.164.0/22 maxlen: 22
2a09:b340::/29 maxlen: 29
2a07:7280::/29 maxlen: 29
2a0f:bd00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36411479 (0x22b9857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jan 1 14:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f888f62095f94f16374184efdf96c2668b83328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:2b:bf:a3:9f:8f:46:cd:25:7d:66:e6:3f:
cb:aa:79:c2:c7:73:8d:07:74:38:ac:0b:c7:50:f3:
10:58:0c:70:c6:00:78:6f:50:17:84:21:08:29:ac:
ab:dd:86:6e:2d:27:dc:f3:50:75:2e:ff:72:46:7e:
56:ec:6e:eb:49:cd:d6:e2:58:35:ae:a6:e5:6c:85:
8f:68:fe:3c:ff:77:2f:d3:fd:79:bf:d0:d8:68:8a:
dc:c2:53:7e:72:5f:e2:7e:83:2c:b3:c8:88:58:8c:
4c:47:ff:a7:9e:f1:2b:c5:20:1c:0e:76:9a:8b:35:
c1:37:79:ca:d2:05:99:08:1c:87:e2:96:9a:9e:19:
a9:bf:61:c8:9a:4c:e3:24:14:c3:5e:c6:95:d9:25:
82:26:5f:2d:5c:74:ab:9e:12:80:c2:04:ae:9c:d8:
fc:aa:2c:9e:c4:60:55:8f:17:56:29:70:24:c9:b1:
07:dd:a1:76:56:25:35:5e:eb:47:4c:52:0e:a7:fb:
35:d1:e7:f2:2e:cb:f4:a2:05:79:60:ad:20:34:3f:
39:1c:40:f8:aa:ef:18:2b:b2:dd:e8:d2:f7:c5:17:
51:a2:16:d5:4a:8f:f8:1c:20:3e:1e:aa:c5:08:d0:
9e:0a:90:0c:e5:d4:52:f3:6d:81:94:f9:18:1d:4f:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:88:F6:20:95:F9:4F:16:37:41:84:EF:DF:96:C2:66:8B:83:32:8A
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/1-Ij2IJX5TxY3QYTv35bCZouDMoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.164.0/22
92.119.28.0/22
185.150.184.0/22
IPv6:
2a07:7280::/29
2a09:b340::/29
2a0f:bd00::/29
Signature Algorithm: sha256WithRSAEncryption
76:84:32:c7:3f:70:c2:07:75:7e:3c:23:8a:e3:95:8e:26:da:
31:b7:2c:4a:dd:2b:a6:c7:1e:8e:1d:9a:fa:70:55:1a:27:a5:
e5:3d:80:7c:63:b8:8d:6b:5b:ae:2a:f4:f2:b6:29:0b:61:76:
40:58:cf:23:a5:ae:05:d6:ea:ea:27:4f:79:ec:f4:7b:19:c5:
c7:88:3c:bc:5b:f0:09:d6:ef:45:ca:17:68:8b:35:52:0e:0c:
41:ce:26:12:ee:da:c9:23:ef:be:1f:ef:a3:2e:e6:d2:29:cf:
67:89:2f:91:52:c8:9c:4a:8d:98:08:9a:bb:55:26:61:3e:84:
e5:36:8d:a3:39:f2:99:d8:93:5d:84:b7:16:86:33:71:da:c7:
96:31:d9:48:f7:6a:a6:11:31:8f:19:72:02:ac:33:d9:1e:7b:
a9:f0:65:eb:84:65:79:db:2a:83:60:7d:0b:89:9c:c7:dd:db:
5c:d8:b7:4a:c1:16:86:cf:df:c4:19:10:3f:bf:bf:d9:fb:35:
13:e7:3b:98:52:8e:28:b4:9a:82:a6:0f:22:e3:fc:54:f9:1c:
a3:07:18:ca:08:d8:36:12:d4:f8:28:9b:67:bf:d3:3e:18:33:
31:c3:35:99:cb:7c:7a:7a:08:9a:9c:97:ec:83:70:e4:33:c4:
16:dc:e6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:04 2024 by rpki-client on console-fra.rpki-client.org