Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/hDojU9tJIvfAx0B0Wo9afqVSSTI.roa
File: hDojU9tJIvfAx0B0Wo9afqVSSTI.roa (raw, json)
Hash identifier: mj8Pj+dA7JK+WwUD3Ezn6nZ4jPblMtREi84sAZjkwxQ=
Subject key identifier: 84:3A:23:53:DB:49:22:F7:C0:C7:40:74:5A:8F:5A:7E:A5:52:49:32
Certificate issuer: /CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Certificate serial: 07261A
Authority key identifier: D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/hDojU9tJIvfAx0B0Wo9afqVSSTI.roa
Signing time: Wed 30 Mar 2022 08:29:13 +0000
ROA not before: Wed 30 Mar 2022 08:29:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 45.6.48.0/22 maxlen: 23
87.238.88.0/21 maxlen: 22
185.78.24.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468506 (0x7261a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ff71f2b1a8d62af446a92ba2bdea33f9b69ddc
Validity
Not Before: Mar 30 08:29:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=843a2353db4922f7c0c740745a8f5a7ea5524932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:3f:0a:53:07:0b:8a:f1:7a:46:4e:48:ef:
f1:84:06:ea:d9:0f:0b:96:f2:71:ed:8a:8e:f5:31:
0a:ec:51:44:75:2c:f3:a9:44:23:97:7f:10:8d:cf:
8f:f7:55:d1:cb:66:d6:48:db:c7:96:7e:97:6d:e3:
8a:8d:57:72:4a:02:8e:11:f7:39:73:0a:f8:9c:75:
ff:55:26:4b:1c:a2:f2:48:ae:59:e2:f7:a2:4c:a8:
c9:42:c0:4f:1e:38:30:78:29:1f:87:32:b9:88:95:
98:56:69:28:08:21:42:ec:56:81:36:5a:7e:57:5a:
85:36:f8:c4:2e:a9:b5:86:c1:ca:5c:d7:58:b3:77:
54:28:4e:b1:79:ea:9d:e6:c8:63:89:09:2a:7a:e4:
11:30:cb:05:50:9c:68:6a:db:31:61:a2:86:52:3c:
81:02:ee:b0:ff:09:07:30:12:10:d5:c0:16:63:5d:
9d:d3:4a:25:90:58:ef:3d:c1:ea:7f:1f:a6:dc:5b:
98:a3:f4:a7:a4:8f:ff:c8:c8:36:2f:13:79:5e:6a:
9b:92:2d:f3:50:61:24:35:26:7a:c3:b5:3b:39:a2:
7a:3b:13:fb:11:b9:1f:a6:56:f0:2c:a4:86:e5:f2:
03:fc:b4:28:b2:ed:fb:ee:e5:a7:77:e5:32:73:59:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:23:53:DB:49:22:F7:C0:C7:40:74:5A:8F:5A:7E:A5:52:49:32
X509v3 Authority Key Identifier:
keyid:D8:FF:71:F2:B1:A8:D6:2A:F4:46:A9:2B:A2:BD:EA:33:F9:B6:9D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2P9x8rGo1ir0Rqkror3qM_m2ndw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/hDojU9tJIvfAx0B0Wo9afqVSSTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ea71d4-4dbb-4451-b26b-3b75a567f73a/1/2P9x8rGo1ir0Rqkror3qM_m2ndw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.48.0/22
87.238.88.0/21
185.78.24.0/22
Signature Algorithm: sha256WithRSAEncryption
95:10:5d:c3:ce:76:07:40:8d:7f:ac:58:21:26:ce:2a:fe:ea:
79:29:ae:30:1b:84:13:b7:e6:4b:d1:a1:73:08:68:01:48:66:
8b:e3:7c:79:88:ca:20:ff:71:95:2b:2d:c2:f1:fc:53:fa:3c:
d4:9b:83:e0:01:f2:e8:3a:95:ee:2e:b1:df:97:56:e8:83:b6:
48:05:2b:dd:92:16:e9:c5:f3:e8:a4:78:7c:3f:d2:df:de:13:
2e:09:bf:a7:b3:1b:18:19:78:99:8b:25:31:72:7a:9a:48:1e:
0e:6b:25:45:35:4b:e7:28:b6:d0:38:2d:03:0a:9d:b3:07:23:
5d:06:16:5b:0c:80:6c:10:31:f6:43:3d:d9:38:8b:69:9f:d1:
78:bf:50:cd:89:02:4a:93:c5:a0:ff:4b:45:3d:c5:18:33:7c:
48:69:4a:ca:2c:94:ee:a3:19:3e:8d:0d:47:8b:0b:42:86:94:
eb:c1:d4:fe:3c:1f:94:0d:e0:aa:aa:f8:33:b9:8e:37:d1:2e:
62:49:ac:38:81:d7:a5:3e:7e:bc:8f:aa:b6:2a:d3:62:ee:ad:
69:ed:9f:a7:8f:b4:4d:78:f8:16:27:c1:da:f1:d0:bb:e1:f4:
49:20:90:d6:d8:23:74:c7:6a:94:ea:a9:27:cd:01:5d:e6:80:
06:bb:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:18 2024 by rpki-client on console-fra.rpki-client.org