Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/CDkomua3OPM6Y49tjJ4NiSI5emg.roa
File: CDkomua3OPM6Y49tjJ4NiSI5emg.roa (raw, json)
Hash identifier: UJlczGkcrJwQOhorrqAtrneVYF88AdcvSpe9UEZCQC0=
Subject key identifier: 08:39:28:9A:E6:B7:38:F3:3A:63:8F:6D:8C:9E:0D:89:22:39:7A:68
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 018452B47BD862D8E74F754E36D07C61E005
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/CDkomua3OPM6Y49tjJ4NiSI5emg.roa
Signing time: Mon 07 Nov 2022 15:27:50 +0000
ROA not before: Mon 07 Nov 2022 15:27:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22351
IP address blocks: 91.232.198.0/24 maxlen: 24
91.232.208.0/24 maxlen: 24
185.87.144.0/22 maxlen: 24
91.232.235.0/24 maxlen: 24
91.232.129.0/24 maxlen: 24
80.73.219.0/24 maxlen: 24
80.73.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:b4:7b:d8:62:d8:e7:4f:75:4e:36:d0:7c:61:e0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Nov 7 15:27:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0839289ae6b738f33a638f6d8c9e0d8922397a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:82:c3:5c:d4:1f:cc:c8:9d:a9:5b:59:5a:
b2:42:45:86:9e:22:c3:5e:66:08:8f:41:c5:73:41:
8d:96:57:e5:7a:fb:cb:37:9c:a7:ef:b0:fc:9f:31:
3a:6f:13:0c:65:67:17:1a:4f:d8:9d:67:d7:59:2a:
2d:bc:da:e2:e0:ed:8e:2e:eb:23:70:33:85:35:22:
d9:77:d5:a9:cc:6e:84:b7:95:9f:ba:12:c7:dc:d2:
fd:93:f9:31:53:15:cb:45:15:e1:bf:3a:e7:0a:5e:
d3:a1:ab:00:ea:bc:a9:2d:72:78:e7:39:2f:96:fd:
4c:85:e5:5f:5f:7d:78:fa:3f:68:05:fa:59:62:89:
65:af:70:23:80:4b:67:b3:bd:0a:0d:80:b2:70:86:
a7:9f:38:98:4d:eb:08:86:e1:c5:fa:b3:2f:3e:da:
41:5b:08:1d:9a:48:8d:75:70:46:27:25:4d:83:e0:
c1:9e:62:95:1f:06:a4:43:14:2f:f2:4c:45:19:23:
7d:83:18:c8:78:16:7a:a7:da:7c:b6:e1:4a:f8:85:
f8:d7:90:ea:5f:db:b2:9e:71:c2:b9:b2:3e:2e:24:
05:24:3a:54:3d:df:e3:f5:27:0f:ba:ed:28:f1:c4:
0b:62:1d:f3:ad:64:8f:6a:6a:38:c6:29:94:a8:e5:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:28:9A:E6:B7:38:F3:3A:63:8F:6D:8C:9E:0D:89:22:39:7A:68
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/CDkomua3OPM6Y49tjJ4NiSI5emg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.219.0-80.73.220.255
91.232.129.0/24
91.232.198.0/24
91.232.208.0/24
91.232.235.0/24
185.87.144.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:c1:dd:94:08:3a:ef:46:f6:7b:cc:35:bf:f9:3f:62:d4:53:
dd:49:bc:73:08:80:45:39:96:71:23:6c:2b:56:26:7a:76:0b:
9c:fd:1d:ce:c9:38:ca:ea:8f:e3:09:2c:81:54:44:4f:02:61:
c6:c3:1a:73:4a:bc:4a:19:5a:9e:a3:ad:48:85:f5:f5:bf:19:
e2:fd:e9:a5:cd:af:a9:a7:8c:4f:f4:57:2f:a6:48:23:3b:36:
b5:23:88:6f:dc:99:bc:e4:04:b0:b7:c8:15:eb:0b:3a:4d:05:
4a:7f:90:2f:d8:e8:0f:6f:22:9b:1d:2e:ae:a9:bf:45:4e:fc:
8f:10:18:b5:55:b0:e5:86:cc:fd:c7:be:d7:85:2c:dd:e1:03:
4d:a9:12:2e:52:ab:81:d2:ed:aa:62:1e:8b:b5:e5:27:f6:17:
ea:b6:c3:5f:d8:92:13:eb:0f:60:d3:d7:b6:bb:d6:cf:5a:e0:
6d:90:3c:76:8c:3c:9b:ab:c3:48:95:db:75:1d:e3:82:b3:4d:
12:a2:9d:8e:ab:ff:df:85:e9:ff:34:0e:f9:e9:28:09:da:18:
8e:1d:da:67:af:65:4f:19:6f:2a:96:33:6e:7c:a5:df:f8:24:
c5:ff:c8:36:17:f2:de:46:fa:eb:4a:bd:5f:a4:1a:d2:64:18:
8b:44:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:15 2024 by rpki-client on console-fra.rpki-client.org