Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/XeLhyI_QZjKu8nHsDsKU8POhhUM.roa
File: XeLhyI_QZjKu8nHsDsKU8POhhUM.roa (raw, json)
Hash identifier: JwV+bTXVrWy9W/oS/kv7/udytbtbPZ7JOWtE1gjd0Ko=
Subject key identifier: 5D:E2:E1:C8:8F:D0:66:32:AE:F2:71:EC:0E:C2:94:F0:F3:A1:85:43
Certificate issuer: /CN=d0041ff7980379b798049256868dff39819c2604
Certificate serial: 037CB0E0
Authority key identifier: D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/XeLhyI_QZjKu8nHsDsKU8POhhUM.roa
Signing time: Thu 24 Feb 2022 15:04:22 +0000
ROA not before: Thu 24 Feb 2022 15:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35804
IP address blocks: 213.111.128.0/18 maxlen: 18
213.111.128.0/19 maxlen: 19
194.79.62.0/24 maxlen: 24
194.79.60.0/24 maxlen: 24
194.79.60.0/22 maxlen: 22
194.79.63.0/24 maxlen: 24
194.79.61.0/24 maxlen: 24
2a00:ede0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58503392 (0x37cb0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0041ff7980379b798049256868dff39819c2604
Validity
Not Before: Feb 24 15:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5de2e1c88fd06632aef271ec0ec294f0f3a18543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:29:43:d9:19:09:7c:c8:e4:1a:7b:e3:79:
12:ed:e5:f7:00:c6:32:0d:91:9e:c4:74:67:a6:f2:
b2:45:2a:dd:da:a0:e0:90:88:f3:b0:c0:b2:6a:a9:
88:3d:3f:dc:f9:2b:68:a7:b0:b0:d0:06:97:a9:d8:
f3:33:95:a6:f9:dc:6f:58:3e:f1:13:af:ee:93:76:
14:66:b4:86:e6:f9:24:99:cc:ea:30:79:9c:b1:dd:
74:d5:ba:a2:b7:a5:c4:52:bf:81:b7:fb:4d:c7:5d:
d8:b2:5e:7f:1d:01:3d:e9:55:0d:df:ae:6f:25:b5:
01:61:88:da:7a:4b:a5:31:8e:cb:a7:23:9d:b6:f8:
fb:43:d0:28:0a:58:ca:c4:1c:2f:96:99:3e:9c:98:
4e:fe:c9:7b:41:ad:48:c3:5a:8f:ed:b0:ef:54:be:
78:2f:9e:f3:f9:24:9e:aa:0f:d2:97:b7:c7:28:ac:
8c:2c:bf:81:4e:8b:d8:f1:e4:1c:9e:4b:27:a1:94:
ba:a7:cb:4a:66:aa:bc:71:8d:cf:2c:c7:90:a7:c3:
97:d5:8a:77:05:0f:2b:6e:c1:16:ed:b8:a5:56:01:
c4:83:f9:c8:7a:73:24:ad:fd:7e:74:ed:ae:51:56:
77:05:cb:18:e8:22:1a:89:99:3a:b7:51:2d:d5:b5:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E2:E1:C8:8F:D0:66:32:AE:F2:71:EC:0E:C2:94:F0:F3:A1:85:43
X509v3 Authority Key Identifier:
keyid:D0:04:1F:F7:98:03:79:B7:98:04:92:56:86:8D:FF:39:81:9C:26:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AQf95gDebeYBJJWho3_OYGcJgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/XeLhyI_QZjKu8nHsDsKU8POhhUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e8f452-be70-4176-9da0-e689bf57dd27/1/0AQf95gDebeYBJJWho3_OYGcJgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.60.0/22
213.111.128.0/18
IPv6:
2a00:ede0::/32
Signature Algorithm: sha256WithRSAEncryption
78:ca:a0:51:3d:ac:a3:22:d7:64:76:22:7c:c7:f0:dc:7c:eb:
e0:cf:f4:70:59:45:7b:95:35:d3:02:19:e0:1e:b8:7c:11:c4:
c8:bb:0b:91:13:1f:25:6f:98:ae:30:d7:fa:3f:66:74:b2:34:
76:7b:4d:fa:d6:46:33:36:57:e1:f9:c1:48:e5:d8:67:e7:e5:
69:f2:d5:9f:01:30:78:71:75:03:69:69:b2:54:3c:65:ee:2b:
ed:21:54:48:e4:68:cf:ff:90:ef:c7:68:a5:e3:a7:0b:f3:4b:
18:4c:90:66:84:1b:29:14:30:88:91:12:bc:a7:63:45:af:85:
0f:39:86:ed:3c:60:8c:10:63:c6:ab:02:de:de:e2:ad:43:95:
ac:98:38:b2:ec:1b:b1:83:29:a2:78:fe:da:dc:3d:d5:ac:49:
b4:8b:02:07:d1:d1:16:b8:d0:9f:50:4a:32:85:c5:ad:08:dc:
b8:3a:2c:58:1d:30:a9:4b:94:11:c3:0b:56:15:00:fa:d3:15:
1d:17:ba:11:be:c3:6d:b7:e0:69:27:a5:e7:2e:2b:f0:da:da:
af:35:c0:14:0d:1d:c3:a3:05:3d:bd:37:fb:fc:d2:60:3b:b6:
75:3b:d5:83:de:c1:b5:0e:3a:ee:06:fc:c2:01:b6:01:e6:59:
ed:04:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:04 2024 by rpki-client on console-ams.rpki-client.org