Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/rFecefhfrCWpuyabw393OcZwXUk.roa
File: rFecefhfrCWpuyabw393OcZwXUk.roa (raw, json)
Hash identifier: CXKuVM7cOsWCWBMi7j/j1McHxreRjvWZl3fNNr9Fam0=
Subject key identifier: AC:57:9C:79:F8:5F:AC:25:A9:BB:26:9B:C3:7F:77:39:C6:70:5D:49
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B90ED63
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/rFecefhfrCWpuyabw393OcZwXUk.roa
Signing time: Sat 01 Jan 2022 08:56:20 +0000
ROA not before: Sat 01 Jan 2022 08:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49000
IP address blocks: 213.181.77.0/24 maxlen: 24
213.181.72.0/23 maxlen: 23
89.29.190.0/23 maxlen: 23
213.181.89.0/24 maxlen: 24
213.181.90.0/23 maxlen: 23
213.181.92.0/23 maxlen: 23
213.181.94.0/24 maxlen: 24
89.29.206.0/23 maxlen: 23
89.29.225.0/24 maxlen: 24
176.57.96.0/24 maxlen: 24
89.29.253.0/24 maxlen: 24
89.29.247.0/24 maxlen: 24
89.29.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194047331 (0xb90ed63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac579c79f85fac25a9bb269bc37f7739c6705d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:66:1b:ae:24:c8:14:34:76:7c:8f:50:f9:
e3:ab:89:2b:78:7f:02:74:dd:67:88:b7:0d:72:57:
68:76:1f:df:39:15:57:e5:73:16:f6:c7:66:1e:f1:
2f:61:b5:2b:6b:d5:97:33:3f:b3:94:40:8b:1e:02:
0a:96:c3:78:b5:d1:59:f7:56:f2:0d:08:1f:6c:b9:
15:88:06:28:75:9c:83:e5:1d:6e:99:c3:fe:29:86:
a5:39:06:db:a4:99:02:e4:4a:07:27:a3:96:ce:75:
6b:46:6a:5e:46:ce:bf:c4:45:7b:6a:0b:e7:c4:b8:
03:df:1b:fd:4e:10:55:a9:63:32:c8:fa:39:a1:7c:
cc:c2:6d:93:a4:58:76:08:fa:d5:60:c7:29:b0:3c:
bd:1a:98:2b:49:eb:fb:24:64:44:b4:8b:3d:8f:1f:
1e:db:72:28:82:6e:3a:66:ff:c5:b3:71:3d:f2:ed:
33:8d:45:98:20:0c:2b:07:ff:53:9e:85:97:38:2f:
ef:5a:c1:de:10:61:aa:ce:0a:6f:90:b3:9a:47:b8:
7c:3f:68:65:3c:e5:ae:23:32:04:7b:36:8c:8b:a6:
04:d8:eb:4f:57:b1:f4:7e:13:36:86:d1:f3:a6:58:
ad:f0:27:bd:a1:55:1d:7b:41:75:11:27:79:19:3c:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:9C:79:F8:5F:AC:25:A9:BB:26:9B:C3:7F:77:39:C6:70:5D:49
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/rFecefhfrCWpuyabw393OcZwXUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.190.0/23
89.29.206.0/23
89.29.225.0/24
89.29.247.0/24
89.29.253.0/24
89.29.255.0/24
176.57.96.0/24
213.181.72.0/23
213.181.77.0/24
213.181.89.0-213.181.94.255
Signature Algorithm: sha256WithRSAEncryption
04:a3:13:b5:c3:d7:45:56:aa:40:6a:6b:05:79:0b:78:0f:f4:
b1:38:a8:81:49:78:59:e9:46:83:58:c2:35:eb:58:6f:49:6f:
a9:70:da:a8:8d:5a:aa:a9:fd:ab:aa:8d:27:9c:e2:b4:2c:ca:
3b:68:ff:d1:32:05:bf:0a:0b:a2:6f:9b:a2:a8:03:93:5b:58:
4c:a3:e4:94:43:97:f8:36:b1:fb:ec:cd:9e:98:82:34:ae:84:
fb:e1:9f:14:33:08:b2:84:c4:df:bc:ed:c8:ea:3d:4f:5e:8e:
1e:2a:3f:35:00:ad:66:ad:0a:d9:5a:36:e1:65:06:ce:23:b7:
ae:9e:6d:ee:38:cd:20:67:c8:e0:a8:c3:6c:a8:b2:1d:12:33:
4c:e4:82:16:32:f4:d2:97:3d:3e:41:41:08:24:df:e8:13:cb:
b5:7b:59:29:f9:88:e8:ef:ee:44:f2:50:36:51:7d:45:f2:4d:
bd:75:b0:d6:56:71:6c:ee:28:6a:64:e5:f3:35:3a:7e:d4:38:
2d:f9:73:80:9b:c7:fc:33:5f:10:43:ac:a1:1a:0f:46:0f:1a:
fe:55:e6:97:91:93:f8:dc:d8:a1:c0:59:b4:c4:97:57:51:47:
61:cf:22:d7:70:65:05:78:e2:49:0e:4c:52:0f:e3:96:95:ac:
c1:51:f9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org