Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/X17z8RyQw8z41bae_NcaXbCaL9I.roa
File: X17z8RyQw8z41bae_NcaXbCaL9I.roa (raw, json)
Hash identifier: BkIhDKSn7sY18cfLpqp5JJ1IBSK4nET0/Q0bYzDLjzg=
Subject key identifier: 5F:5E:F3:F1:1C:90:C3:CC:F8:D5:B6:9E:FC:D7:1A:5D:B0:9A:2F:D2
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0E25EABE
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/X17z8RyQw8z41bae_NcaXbCaL9I.roa
Signing time: Mon 14 Feb 2022 08:17:24 +0000
ROA not before: Mon 14 Feb 2022 08:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29014
IP address blocks: 195.177.233.0/24 maxlen: 24
195.177.232.0/23 maxlen: 24
193.41.116.0/23 maxlen: 24
93.92.130.0/23 maxlen: 23
93.92.132.0/24 maxlen: 24
93.92.128.0/23 maxlen: 23
93.92.128.0/21 maxlen: 24
93.92.134.0/23 maxlen: 23
93.92.133.0/24 maxlen: 24
185.8.8.0/24 maxlen: 24
185.8.8.0/22 maxlen: 24
85.158.0.0/24 maxlen: 24
85.158.0.0/22 maxlen: 24
85.158.4.0/23 maxlen: 23
85.158.7.0/24 maxlen: 24
85.158.6.0/24 maxlen: 24
194.126.239.0/24 maxlen: 24
2a00:12e8:600::/40 maxlen: 40
2a00:12e8::/40 maxlen: 40
2a00:12e8:500::/40 maxlen: 40
2a00:12e8:400::/40 maxlen: 40
2a00:12e8:100::/40 maxlen: 40
2a00:12e8:300::/40 maxlen: 40
2a00:12e8:200::/40 maxlen: 40
2a00:12e8::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237365950 (0xe25eabe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Feb 14 08:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f5ef3f11c90c3ccf8d5b69efcd71a5db09a2fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:5f:5d:e0:34:9a:1f:61:71:16:d6:cc:95:
95:45:14:9e:c0:5b:83:bf:ca:a4:8d:41:22:a0:33:
cf:f4:f7:d0:36:f8:6c:13:72:bb:ba:b9:09:d3:7e:
7a:28:9b:54:56:65:3b:8e:10:0b:46:38:6e:ae:eb:
61:a4:0c:87:c7:fc:a9:49:3a:b9:79:70:c4:d7:dc:
bb:39:32:cb:d7:27:d0:05:8a:a2:48:91:2b:97:5a:
1c:42:ef:58:9b:e3:23:b2:cd:f6:86:b6:dc:2b:53:
2d:44:9b:44:0a:f5:ec:85:37:3a:ae:6b:5a:4e:4b:
5d:09:bf:2a:0e:77:72:04:f1:b9:a0:34:dc:29:f9:
9b:97:91:75:2c:ec:f1:84:d3:13:9d:95:01:74:a9:
66:eb:73:a5:8e:9b:d3:7f:14:dc:b4:b8:65:03:eb:
31:11:fc:7b:b9:98:6e:5d:63:40:96:e8:a2:85:e2:
b5:2c:68:8e:b7:7f:ce:af:31:bb:fd:64:c7:44:2e:
e8:ae:c1:5d:ed:74:42:45:fc:48:09:c9:cc:d4:63:
3f:a0:14:e0:2b:f2:8b:83:9f:fb:8b:79:b2:4e:48:
93:5a:1d:22:04:db:ec:3a:29:cf:66:a9:94:5b:d6:
4c:52:6a:98:d5:cb:2f:d1:f8:c6:b2:e7:16:2a:80:
a7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:F3:F1:1C:90:C3:CC:F8:D5:B6:9E:FC:D7:1A:5D:B0:9A:2F:D2
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/X17z8RyQw8z41bae_NcaXbCaL9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.0.0/21
93.92.128.0/21
185.8.8.0/22
193.41.116.0/23
194.126.239.0/24
195.177.232.0/23
IPv6:
2a00:12e8::/32
Signature Algorithm: sha256WithRSAEncryption
c3:05:f1:26:5a:88:20:ed:7e:27:67:6e:06:aa:0c:ad:5f:03:
0c:46:3e:da:d2:4e:fb:ed:7c:7c:bb:23:64:ab:f3:c6:62:b2:
37:ed:45:5b:46:2d:4d:6b:64:b7:f6:6b:e6:6a:93:90:12:c6:
c4:c6:53:f4:cd:46:b8:35:9e:66:ba:1b:2e:24:47:ca:77:06:
f6:b9:2e:5f:02:6c:67:6b:fb:79:07:16:fb:d2:7f:59:80:80:
28:11:e3:1c:6b:12:a2:82:2e:32:74:0b:d9:0a:85:d4:1f:94:
6b:31:a7:b4:5d:5b:31:be:1f:ba:57:3b:86:84:ce:56:1c:35:
41:f5:2a:7a:e7:59:d9:e0:68:59:70:0d:b6:9e:af:5e:27:bd:
98:a0:26:93:dd:ee:e1:bc:1e:3a:bf:2c:28:39:83:0a:a6:39:
f8:9f:4d:ee:b4:32:93:10:8f:c8:b5:16:d2:cf:39:a2:88:ed:
6d:ab:1d:29:e3:bc:44:cc:68:90:62:a3:50:da:24:dc:21:21:
32:25:d5:1d:02:21:9b:42:9c:1c:f6:d7:1e:89:34:e3:82:04:
a8:13:79:e0:ec:f8:16:46:b8:fb:7c:35:4f:64:78:40:15:cf:
a7:39:3f:5f:65:1e:6e:3e:d2:21:34:8f:3a:33:04:fb:40:2f:
5c:b2:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:48 2024 by rpki-client on console-ams.rpki-client.org