Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Oh4CgMyePdS7kCYzO7wYLNLq2Wo.roa
File: Oh4CgMyePdS7kCYzO7wYLNLq2Wo.roa (raw, json)
Hash identifier: E+Tn3dY1Om1l1n1xL2YY9vTRvI9e0AfuwsWGrES5Cpg=
Subject key identifier: 3A:1E:02:80:CC:9E:3D:D4:BB:90:26:33:3B:BC:18:2C:D2:EA:D9:6A
Certificate issuer: /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial: 074D4D84
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Oh4CgMyePdS7kCYzO7wYLNLq2Wo.roa
Signing time: Sat 01 Jan 2022 04:53:34 +0000
ROA not before: Sat 01 Jan 2022 04:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12417
IP address blocks: 185.220.24.0/22 maxlen: 24
185.220.24.0/24 maxlen: 24
185.220.27.0/24 maxlen: 24
185.220.25.0/24 maxlen: 24
91.234.46.0/24 maxlen: 24
178.218.163.0/24 maxlen: 24
178.218.160.0/20 maxlen: 24
178.218.170.0/24 maxlen: 24
178.218.171.0/24 maxlen: 24
178.218.172.0/24 maxlen: 24
178.218.173.0/24 maxlen: 24
178.218.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122506628 (0x74d4d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
Validity
Not Before: Jan 1 04:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a1e0280cc9e3dd4bb9026333bbc182cd2ead96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:32:56:4c:f0:67:cd:ad:5f:db:26:19:77:
c5:2b:d6:df:30:4e:76:b0:ae:86:23:0c:d4:bf:a7:
d9:ff:3c:ba:e2:04:b4:2a:90:9c:5e:26:da:87:75:
3a:57:4e:eb:99:84:b1:e4:6e:c1:b3:3b:77:0d:13:
bc:5c:cd:e9:07:70:f4:bc:f6:04:a1:fa:1e:bd:35:
08:0f:98:48:a9:80:2b:91:f5:4d:f3:35:da:3b:26:
3a:69:39:c8:52:21:1a:ad:1c:91:8e:f0:38:ca:a0:
54:23:24:67:b2:3d:1d:be:a2:e6:8c:a8:d6:e4:aa:
39:d5:5e:f9:bb:f2:a2:cd:dc:e5:4f:db:62:bd:9d:
78:18:2b:75:80:a0:f9:c2:47:e6:bf:57:d1:5c:bc:
e3:3c:1d:dd:ba:45:de:e8:a2:48:6d:06:99:1b:43:
26:f3:c9:5f:35:b6:e3:c8:20:94:bc:ba:33:d1:e4:
ed:c4:14:b2:4a:ad:6c:30:8b:6e:29:d6:c7:0e:ed:
7f:6e:51:c2:ee:e3:b8:5c:df:b4:47:c2:f3:40:1c:
d2:d3:e6:5d:c8:f4:a6:b1:b2:95:91:1d:c1:41:6b:
b5:a0:ce:90:21:e4:7e:70:87:59:6b:90:8a:0a:c3:
7b:94:4a:80:a3:65:a1:e5:09:9a:52:56:e4:cf:cd:
3d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:02:80:CC:9E:3D:D4:BB:90:26:33:3B:BC:18:2C:D2:EA:D9:6A
X509v3 Authority Key Identifier:
keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/Oh4CgMyePdS7kCYzO7wYLNLq2Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.46.0/24
178.218.160.0/20
185.220.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a4:4d:ac:9d:1c:29:95:55:0a:ac:33:27:7b:ce:c6:5c:21:
3e:d3:30:aa:2a:78:d2:2f:ad:e8:d8:64:ed:1d:84:94:4a:bf:
e6:fb:f1:51:f3:18:e5:2f:4e:aa:4f:ef:da:70:aa:5d:c5:f7:
5a:2c:0e:45:d1:5d:ab:e5:8c:2b:1e:e3:08:2e:e0:b5:a1:93:
92:00:f1:de:58:5f:bd:d3:7e:4d:74:e3:86:1d:38:2b:d6:18:
5c:27:71:70:3e:db:00:93:0f:3d:e2:37:b4:4e:e7:8e:44:f3:
70:34:95:80:5c:68:2f:c8:5e:3d:d9:57:8f:23:7f:f0:66:a3:
b7:7d:96:af:0a:1b:9c:69:7d:a2:78:e3:91:38:23:ba:35:ec:
d5:e9:59:07:d0:f0:6c:44:ba:e9:d6:ac:bf:7d:2e:7e:7c:a9:
e0:d7:d8:d0:24:fa:98:6c:74:7c:8d:74:c4:fa:82:8f:0a:04:
5f:da:40:1c:04:db:0b:dd:cb:ad:f0:02:90:1e:b6:50:0b:7e:
24:c9:18:9e:d6:5b:be:04:0f:2d:ae:d1:e7:e4:a7:99:99:06:
a0:fd:97:86:50:97:1a:52:6a:d4:cf:ec:fc:9f:13:2c:20:7d:
e2:e8:75:74:b9:62:09:b8:bc:7a:14:4d:40:26:48:95:15:83:
bc:08:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:12 2024 by rpki-client on console-fra.rpki-client.org