Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/AbAJaanih_aoPAiWLwykfbFErE8.roa
File: AbAJaanih_aoPAiWLwykfbFErE8.roa (raw, json)
Hash identifier: 3RYMrRtrTQhUAEm1DHATlxcCcLt2gcgVRaokHnyB6qE=
Subject key identifier: 01:B0:09:69:A9:E2:87:F6:A8:3C:08:96:2F:0C:A4:7D:B1:44:AC:4F
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 04E8E377
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/AbAJaanih_aoPAiWLwykfbFErE8.roa
Signing time: Sat 01 Jan 2022 08:58:59 +0000
ROA not before: Sat 01 Jan 2022 08:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213358
IP address blocks: 194.113.22.0/23 maxlen: 24
91.208.68.0/24 maxlen: 24
94.124.100.0/22 maxlen: 24
2a06:a900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82371447 (0x4e8e377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jan 1 08:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01b00969a9e287f6a83c08962f0ca47db144ac4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:ba:a4:c5:fa:4b:fb:8b:b3:81:fc:c1:48:
4c:11:78:b0:f6:d9:19:b7:64:e9:97:0e:a7:85:a9:
48:c1:13:19:36:c3:0b:32:a2:12:0e:58:b9:6e:83:
8e:4e:49:61:fb:96:07:fb:0f:42:33:73:64:23:8a:
15:6a:2d:3b:c4:bb:b0:7c:99:e4:92:fc:3c:ce:5f:
56:3f:28:78:54:22:33:e0:73:22:ba:d3:ca:b4:59:
a0:ce:4c:7a:5f:87:87:64:47:9e:dd:d0:4c:3e:96:
17:62:8c:41:d1:ee:c3:ba:e3:fd:97:16:46:92:ff:
a6:0a:98:9e:54:54:e6:6a:a6:c7:7a:99:b1:79:9f:
1a:07:00:f1:07:88:58:87:10:e5:04:ae:08:88:3a:
d2:6a:15:af:a9:5c:91:c6:e0:64:6f:46:e2:7b:b2:
c4:13:09:d4:d0:6b:04:a5:d0:9e:e4:d8:9b:bb:4c:
ca:53:e7:21:93:7a:d3:46:7b:dc:14:67:2c:bb:da:
3a:44:6a:7c:04:f3:72:82:48:6d:7f:c2:90:e6:99:
a5:49:74:ec:26:96:c3:05:5b:6e:90:fe:86:9b:3b:
74:87:ee:b7:26:11:a6:3f:ef:5c:68:71:82:58:6e:
8a:ee:65:17:25:4c:2e:de:ba:e8:f3:c7:3f:cb:8d:
89:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:09:69:A9:E2:87:F6:A8:3C:08:96:2F:0C:A4:7D:B1:44:AC:4F
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/AbAJaanih_aoPAiWLwykfbFErE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.68.0/24
94.124.100.0/22
194.113.22.0/23
IPv6:
2a06:a900::/29
Signature Algorithm: sha256WithRSAEncryption
16:4f:d0:7d:1a:b9:f0:75:48:08:a8:62:69:44:7d:dd:74:7b:
75:9c:87:5c:ea:75:95:51:65:66:bc:f0:83:b3:0f:c4:0b:cf:
21:41:52:b7:6b:ee:d1:9c:6b:21:b8:60:bf:32:4c:bc:fd:30:
7b:34:88:28:c2:59:9a:e6:8e:b6:74:db:ad:53:99:f1:59:3c:
b6:e8:92:cf:40:0e:1a:4e:06:da:b4:e6:1e:60:5f:ed:94:73:
e3:25:58:04:c8:ea:a1:3a:65:1f:7b:94:16:41:4c:c3:a7:5a:
45:4c:35:69:31:bd:bb:8a:3d:7d:4f:af:56:a8:80:62:5c:86:
e5:df:02:2d:ab:bb:f9:db:c1:d6:b8:dd:e6:86:16:30:64:29:
15:59:1b:22:d6:eb:e8:ab:d8:0c:c9:6f:cf:2f:0a:85:79:dd:
da:c4:f9:20:46:2d:88:d5:22:95:2c:33:03:db:f3:8b:40:84:
fe:3b:ba:fd:5a:3c:94:4c:f4:7d:6f:d9:57:0e:10:5f:9c:61:
ff:2b:c9:6a:45:a4:98:0e:4d:f1:29:16:f9:16:30:19:c0:b3:
c9:31:24:f2:2a:00:1f:4b:6a:d6:09:ec:05:fe:73:47:96:99:
76:f9:b5:2a:c1:22:ee:09:8c:2a:8f:ad:32:c7:2d:4e:b2:7b:
c9:a1:33:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:34 2024 by rpki-client on console-fra.rpki-client.org