Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KOuEcDqSLzY8m34dLCPgz31IvW8.roa
File: KOuEcDqSLzY8m34dLCPgz31IvW8.roa (raw, json)
Hash identifier: X0kUACcOmJs+gbBd1Py4+jXLzA9aEZ8V6DOeVSmsXyo=
Subject key identifier: 28:EB:84:70:3A:92:2F:36:3C:9B:7E:1D:2C:23:E0:CF:7D:48:BD:6F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01838D5915AAD24F8072366A80D34B0FFED4
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KOuEcDqSLzY8m34dLCPgz31IvW8.roa
Signing time: Fri 30 Sep 2022 07:42:49 +0000
ROA not before: Fri 30 Sep 2022 07:42:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5511
IP address blocks: 193.251.220.0/22 maxlen: 24
193.251.240.0/20 maxlen: 24
90.84.48.0/20 maxlen: 24
81.52.128.0/21 maxlen: 24
90.84.128.0/20 maxlen: 24
81.52.136.0/22 maxlen: 24
81.52.140.0/23 maxlen: 24
90.84.151.0/24 maxlen: 24
193.251.160.0/20 maxlen: 24
193.251.169.0/24 maxlen: 24
81.52.236.0/22 maxlen: 24
90.84.255.0/24 maxlen: 24
81.52.160.0/24 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.166.0/23 maxlen: 24
81.52.176.0/20 maxlen: 24
80.12.71.0/24 maxlen: 32
80.12.76.0/24 maxlen: 24
80.12.79.0/24 maxlen: 24
81.52.190.0/24 maxlen: 24
193.251.128.0/19 maxlen: 24
80.12.98.0/24 maxlen: 24
80.12.96.0/22 maxlen: 24
81.52.202.0/24 maxlen: 24
80.12.96.0/23 maxlen: 24
2a01:c000::/19 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:59:15:aa:d2:4f:80:72:36:6a:80:d3:4b:0f:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Sep 30 07:42:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28eb84703a922f363c9b7e1d2c23e0cf7d48bd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:35:17:81:15:9d:d7:95:fd:f1:ac:a0:d5:
c4:0c:62:05:69:59:f5:eb:b8:a3:07:b5:45:74:7f:
e1:27:51:66:d1:a2:cf:be:f0:3e:6b:a3:09:43:66:
af:3e:a4:72:19:e0:e8:45:7b:32:93:c8:5f:4d:da:
75:e2:eb:33:0b:ae:e2:5a:b6:23:52:05:41:7e:b8:
f3:7a:6f:5b:9a:db:ac:f0:67:22:ac:32:b0:2b:6c:
8a:da:35:f9:b1:51:d1:36:6e:14:95:91:bd:25:03:
a0:33:2f:e2:80:07:71:6a:96:21:ff:9a:b3:e4:33:
b6:9b:cc:a2:1e:bb:e5:b3:4f:68:ff:16:d6:d9:ca:
b2:58:f7:93:a7:dc:2d:9d:a4:91:0f:9b:d0:9a:94:
25:35:84:37:03:ef:6d:b6:fe:00:20:6b:4d:89:eb:
95:f2:20:40:b1:92:5b:08:d3:c2:4c:8e:e6:c9:a6:
89:39:d9:44:fb:8a:69:05:9e:4b:7e:32:ed:e6:85:
e3:3e:d7:ec:9c:aa:69:4c:81:ed:dc:24:80:a3:98:
07:f8:9c:a6:5c:4b:6f:6b:bd:11:7c:4b:73:f2:1e:
ea:5a:cf:7c:b0:74:7e:08:f3:89:98:6d:04:b3:ce:
2f:cf:6a:36:f7:b5:e5:3f:99:ff:62:6c:e0:6b:b9:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EB:84:70:3A:92:2F:36:3C:9B:7E:1D:2C:23:E0:CF:7D:48:BD:6F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/KOuEcDqSLzY8m34dLCPgz31IvW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.12.71.0/24
80.12.76.0/24
80.12.79.0/24
80.12.96.0/22
81.52.128.0-81.52.141.255
81.52.160.0/24
81.52.166.0-81.52.169.255
81.52.176.0/20
81.52.202.0/24
81.52.236.0/22
90.84.48.0/20
90.84.128.0/20
90.84.151.0/24
90.84.255.0/24
193.251.128.0-193.251.175.255
193.251.220.0/22
193.251.240.0/20
IPv6:
2a01:c000::/19
Signature Algorithm: sha256WithRSAEncryption
14:8b:3f:a2:17:73:ac:03:7f:c8:85:fa:87:73:76:01:03:78:
bc:44:b6:24:59:d5:32:d1:18:08:d9:74:f8:3e:cb:c9:e4:8d:
f3:27:52:3e:4a:c6:41:73:88:5b:70:89:1f:e4:71:a7:f7:9d:
6f:6f:2c:d0:44:03:b3:8a:d9:4c:0a:89:8f:f4:9f:74:56:8c:
d3:06:f7:a6:02:c6:a9:f3:10:32:78:80:b3:ae:ad:1f:eb:8f:
4b:59:f6:e6:c6:05:0f:fb:1c:63:59:40:70:e0:f5:7f:e0:f4:
01:f8:67:ff:c5:66:06:f8:5c:58:49:dc:40:69:80:e5:97:56:
a0:76:0c:f2:52:e0:22:0f:58:b0:92:a9:aa:a8:7b:5d:eb:fc:
6e:64:2f:7f:63:14:52:8a:bc:01:94:fe:5a:81:05:46:7b:cc:
e8:d4:88:21:18:5b:47:e2:22:6b:9a:fe:85:ff:b0:58:25:e6:
fa:ed:e7:65:59:57:7f:d9:08:57:df:45:25:7c:b7:28:26:1b:
79:9b:9c:51:85:b8:74:7f:21:c5:64:96:50:10:59:7e:05:dd:
77:ca:49:23:9d:c5:44:27:40:7e:5b:9e:76:84:25:66:8d:a6:
e1:91:69:98:cc:0c:b2:3e:07:5f:26:ae:39:d4:02:11:f2:2e:
07:55:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org