Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/5A93X8r5GlaTz3Js7PpbSMf7O5E.roa
File: 5A93X8r5GlaTz3Js7PpbSMf7O5E.roa (raw, json)
Hash identifier: b78X/l2ZKKCzuZHq30Mp2VkucRKSKgTOS2xuJW6vshM=
Subject key identifier: E4:0F:77:5F:CA:F9:1A:56:93:CF:72:6C:EC:FA:5B:48:C7:FB:3B:91
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 378DC895
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/5A93X8r5GlaTz3Js7PpbSMf7O5E.roa
Signing time: Sat 01 Jan 2022 10:00:54 +0000
ROA not before: Sat 01 Jan 2022 10:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8356
IP address blocks: 217.198.48.0/20 maxlen: 24
217.198.56.0/21 maxlen: 24
185.109.124.0/22 maxlen: 24
2001:768::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932038805 (0x378dc895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 10:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e40f775fcaf91a5693cf726cecfa5b48c7fb3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:09:af:89:90:ad:a1:bc:f9:6f:93:8b:fb:
33:e7:fb:cc:ae:d3:a8:fc:d8:e5:06:8c:ee:40:52:
59:26:53:9e:0e:8e:d2:87:f5:07:14:09:a8:79:70:
1f:f2:97:dc:12:1e:72:19:cf:ac:b4:e5:f0:4f:be:
bf:d4:f0:d3:e6:33:6e:9c:96:10:98:46:28:29:ec:
d6:fa:44:08:48:21:46:c6:c6:b3:f2:5f:27:aa:db:
00:6e:97:c0:9b:2f:d6:bd:cc:10:51:7a:50:db:6f:
a7:81:93:55:63:46:0c:94:af:0e:c8:b9:d5:37:7f:
ae:22:95:03:3e:ea:b6:c3:a2:7d:cd:9c:1c:55:a2:
e2:02:46:10:cc:55:a3:1f:08:c6:f3:7c:72:09:c1:
67:03:15:e5:00:57:09:87:d0:3c:aa:2a:bf:75:36:
31:83:d9:d1:97:d2:ba:ee:bd:9e:98:e4:4d:e5:87:
a1:ee:b4:71:93:1d:1a:f8:84:30:1f:37:ed:73:c7:
45:cc:1c:d4:fc:bb:7a:d7:b8:db:e8:ae:9f:4b:fc:
05:de:a3:a8:57:eb:d9:8a:fb:dd:27:fd:81:b4:ad:
46:6e:da:d2:8b:b5:f5:21:48:11:0a:4d:c4:81:8e:
ea:ab:e5:a0:23:29:cf:80:37:8f:27:03:61:25:cc:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:77:5F:CA:F9:1A:56:93:CF:72:6C:EC:FA:5B:48:C7:FB:3B:91
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/5A93X8r5GlaTz3Js7PpbSMf7O5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.124.0/22
217.198.48.0/20
IPv6:
2001:768::/32
Signature Algorithm: sha256WithRSAEncryption
0d:d8:b9:7c:76:3d:84:fa:67:8b:e6:10:0c:a5:b1:0c:37:2a:
67:55:cd:15:a7:e5:18:df:6f:12:96:8c:51:38:fd:e1:5b:b7:
33:80:53:07:fd:6a:9a:a9:fe:e1:a8:f8:29:a5:ba:e9:72:02:
4f:97:e0:a2:ca:54:a4:8c:85:a4:a5:66:cd:8c:1a:dc:ec:43:
12:9f:f2:43:09:f7:d3:2a:c6:32:18:29:47:91:a7:a6:42:4a:
19:b7:4d:5f:57:c3:2f:6b:85:97:78:48:f1:3a:77:fc:e5:6f:
63:70:10:19:b0:18:f6:20:f0:3a:11:7c:49:45:5c:23:67:21:
5a:76:fe:51:0b:b8:6d:6c:1f:f5:ca:52:a1:7b:b5:9e:f6:50:
bb:b1:43:33:1e:19:ff:68:cd:cc:81:09:48:8b:32:ff:96:a2:
eb:45:c7:a1:ec:24:86:84:fe:d9:77:e0:b0:fa:54:33:54:78:
18:0d:6f:05:de:88:1a:7a:a1:f5:7b:d6:87:bd:c8:98:60:81:
19:f3:3b:20:5c:97:0f:0c:c0:7e:8b:7e:15:56:4b:6e:8c:9e:
c6:d2:bd:54:23:17:fc:4f:cd:e7:43:42:f9:d3:0f:ec:7f:24:
6f:cc:d7:a7:b4:16:c9:b1:b2:86:6c:2b:45:a9:22:bc:60:3c:
79:d2:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:20 2024 by rpki-client on console-fra.rpki-client.org