Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/iLnliXy9u5KX13Ly6b14fA7dl2s.roa
File: iLnliXy9u5KX13Ly6b14fA7dl2s.roa (raw, json)
Hash identifier: RThq/wd/dzBjXQLT2oyweDY/XnB6/+M+xw9HnrrCnew=
Subject key identifier: 88:B9:E5:89:7C:BD:BB:92:97:D7:72:F2:E9:BD:78:7C:0E:DD:97:6B
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 9E3E02
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/iLnliXy9u5KX13Ly6b14fA7dl2s.roa
Signing time: Thu 17 Mar 2022 10:02:23 +0000
ROA not before: Thu 17 Mar 2022 10:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208552
IP address blocks: 193.254.222.0/24 maxlen: 24
193.254.223.0/24 maxlen: 24
91.211.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10370562 (0x9e3e02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Mar 17 10:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88b9e5897cbdbb9297d772f2e9bd787c0edd976b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:64:3d:dc:fd:88:6e:cd:0b:8a:a3:da:a8:
ff:8e:26:62:f7:9c:37:b7:6a:e0:d3:8d:78:1e:84:
c1:3c:e2:4b:bc:8a:dd:11:a2:b0:03:2a:17:d4:44:
52:fa:55:e8:10:b5:f2:0a:a6:79:89:28:fd:52:bc:
1e:15:20:77:11:9d:d5:19:8d:d4:82:e2:fe:87:4e:
7b:01:de:ca:2d:5c:1d:c8:8e:f8:14:cd:0a:d5:d9:
f7:04:fa:5c:a5:d4:58:13:45:23:f7:e1:79:59:d5:
9e:49:eb:9c:23:26:3c:1a:00:4e:d9:62:df:0a:de:
6b:02:08:83:e9:6d:14:5e:65:14:d0:c6:33:cd:de:
3b:e0:a7:5a:d2:3c:a7:00:83:f3:bb:5c:c2:63:3c:
d3:98:78:f9:20:e0:46:db:7d:84:6a:6c:64:2d:a1:
b6:e2:52:97:8f:a3:fe:f9:4e:71:67:83:f9:c3:6f:
13:3a:88:4a:de:b8:48:ff:2e:3c:78:b5:04:db:37:
22:c3:45:e4:18:2f:38:94:34:bf:f2:a6:26:7f:77:
16:85:ab:a0:44:fb:38:0e:0b:6d:b1:fd:5d:d1:e2:
10:49:85:39:f2:2c:c3:e3:b2:32:88:6c:02:29:cd:
aa:f6:39:20:43:09:d8:f5:fe:6b:04:b6:e2:d8:df:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:E5:89:7C:BD:BB:92:97:D7:72:F2:E9:BD:78:7C:0E:DD:97:6B
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/iLnliXy9u5KX13Ly6b14fA7dl2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.24.0/24
193.254.222.0/23
Signature Algorithm: sha256WithRSAEncryption
29:ef:26:c6:23:6f:fc:a3:38:e7:0d:3f:7c:20:fa:d6:43:e0:
54:ff:c8:ee:ff:ed:4f:fd:41:8d:85:8c:aa:83:c7:67:59:ae:
9e:ad:76:d8:28:7f:e7:b4:25:12:ee:a0:51:83:bf:3c:b8:1d:
4a:5d:e7:c9:8b:6e:2e:01:1e:83:2b:4b:43:46:d9:fa:aa:f7:
1e:ed:e6:25:36:7a:20:3f:4c:52:37:46:76:3e:81:e1:1a:87:
e4:7c:04:0c:75:00:5e:13:b1:e2:d5:66:d5:60:df:0e:1d:c2:
35:69:33:3c:45:6e:93:91:e4:5e:be:b2:ff:22:a4:d9:53:3d:
43:94:ff:18:b9:b0:19:94:cb:d5:36:2c:ee:a5:99:d9:45:07:
ba:83:73:9d:37:da:bc:48:2f:12:41:da:d8:6d:44:4b:4d:53:
17:05:f1:9b:9d:b7:1a:39:c0:e4:44:8b:24:6f:de:92:9d:69:
c1:79:e2:05:03:ba:17:98:92:05:f8:2f:4e:c6:77:8b:4a:92:
87:72:44:df:1a:dd:88:40:7f:cc:5c:b3:07:4a:86:07:ee:df:
93:7b:d2:29:cc:32:3d:a8:36:03:6d:bd:f1:1d:54:fd:eb:a8:
2e:f9:81:ce:3c:07:d6:b4:f0:fe:9e:82:08:20:22:cb:c7:d8:
90:bf:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:50 2024 by rpki-client on console-fra.rpki-client.org