Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W0Tt6ohAHPQDvqfBS_V9QhB14xE.roa
File: W0Tt6ohAHPQDvqfBS_V9QhB14xE.roa (raw, json)
Hash identifier: 1qv5DihodAF5edCauYQybsnuOxHcRm9sJJIKlc+fJWg=
Subject key identifier: 5B:44:ED:EA:88:40:1C:F4:03:BE:A7:C1:4B:F5:7D:42:10:75:E3:11
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018439BC4372FA75C4264E9B1BED4AC8E8B0
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W0Tt6ohAHPQDvqfBS_V9QhB14xE.roa
Signing time: Wed 02 Nov 2022 19:05:50 +0000
ROA not before: Wed 02 Nov 2022 19:05:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 89.185.24.0/21 maxlen: 24
109.72.122.0/24 maxlen: 24
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
81.22.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:bc:43:72:fa:75:c4:26:4e:9b:1b:ed:4a:c8:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Nov 2 19:05:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b44edea88401cf403bea7c14bf57d421075e311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:fb:bc:a9:11:df:af:c0:45:3e:8a:8d:06:
83:38:46:d2:01:68:30:70:8c:9d:ee:25:7d:04:e0:
87:dc:2c:1e:6d:44:21:47:48:82:98:eb:8e:6f:78:
80:28:38:31:2c:37:63:66:60:82:64:2d:84:06:d0:
54:95:0e:de:dc:e7:8c:ff:45:b0:c8:02:02:f5:25:
a3:4d:61:d9:20:e4:26:49:d9:83:b6:ce:1b:e0:b0:
51:23:ce:7b:c5:b0:89:9a:39:33:bc:53:62:59:cf:
ff:8e:53:68:8a:2c:6b:7a:ad:55:f8:82:f2:53:fa:
9e:cc:dc:5c:cc:7e:78:81:2d:9a:fc:bb:b6:ba:30:
f3:cf:e0:a3:cf:ee:49:72:b4:20:64:ab:43:5c:4f:
d7:95:3e:ad:06:cc:ff:53:d2:83:ca:4c:67:ce:cd:
41:33:9a:26:c4:74:04:8f:9b:47:af:46:3b:f7:44:
45:6a:9f:84:57:ec:5a:6a:c5:00:39:95:2d:7c:4a:
4d:ed:6e:78:d3:70:4e:39:99:15:8e:74:0e:d5:a7:
80:b5:4e:f3:71:45:70:cb:03:af:1f:54:02:a8:22:
fb:2e:20:b3:eb:93:a5:46:bd:7a:19:42:e5:03:a3:
29:03:47:92:04:c5:25:12:44:38:c8:11:62:73:98:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:ED:EA:88:40:1C:F4:03:BE:A7:C1:4B:F5:7D:42:10:75:E3:11
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/W0Tt6ohAHPQDvqfBS_V9QhB14xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/21
89.185.0.0/22
89.185.24.0/21
93.185.214.0/24
109.72.122.0/24
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
82:60:7d:80:09:6d:3e:7c:e5:7a:8b:fd:8b:a4:a2:32:52:fa:
78:1b:ff:5d:35:1f:7e:04:00:25:b9:e5:dd:de:ef:a3:db:bd:
6f:ac:73:53:23:95:6c:cc:85:b0:be:3e:d9:80:44:85:97:bf:
d5:93:d5:2d:4b:06:c7:df:65:c5:1e:00:90:49:d5:b2:09:dd:
1c:55:df:19:c8:8f:9b:ae:7e:03:92:a1:22:71:3b:14:c2:e6:
a0:19:1e:d0:47:d3:3c:f5:f6:2d:e1:f0:8e:b2:92:15:7e:2c:
0e:51:19:49:24:3b:25:2e:6b:e1:75:cb:c5:aa:b7:7d:6a:ff:
cd:c7:46:06:56:c8:f8:c5:49:6f:4d:4d:10:e1:d2:5e:58:77:
15:b5:58:46:78:b9:7c:0e:bf:51:00:67:84:b7:0b:ea:8b:16:
c2:7a:ec:68:9c:c5:5e:ad:cc:83:ca:9b:22:04:44:e1:80:b7:
6a:b5:4b:8f:17:19:04:c8:07:77:88:30:32:34:c0:4a:8c:e9:
f2:70:61:dd:7b:da:f5:b2:55:7d:73:2a:56:9d:10:6d:77:a8:
39:c4:6e:88:f2:de:d4:6f:cb:c1:ce:36:14:46:55:5e:b4:f7:
95:0b:7f:90:1b:0a:79:9d:6b:81:41:41:82:36:1c:7c:84:5c:
61:9c:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org