Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ID0rv-k_Sl7gdCIVbfI_2kHL9Ek.roa
File: ID0rv-k_Sl7gdCIVbfI_2kHL9Ek.roa (raw, json)
Hash identifier: SRZE72GNTiZeRenVvNSF8WxceDzf9bP+FsIUzLG2f0E=
Subject key identifier: 20:3D:2B:BF:E9:3F:4A:5E:E0:74:22:15:6D:F2:3F:DA:41:CB:F4:49
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 429CF90D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ID0rv-k_Sl7gdCIVbfI_2kHL9Ek.roa
Signing time: Sat 01 Jan 2022 06:04:58 +0000
ROA not before: Sat 01 Jan 2022 06:04:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24810
IP address blocks: 89.248.112.0/24 maxlen: 24
89.248.123.0/24 maxlen: 24
89.248.122.0/24 maxlen: 24
87.117.177.0/24 maxlen: 24
87.117.184.0/24 maxlen: 24
87.117.183.0/24 maxlen: 24
87.117.190.0/24 maxlen: 24
87.117.188.0/24 maxlen: 24
81.23.144.0/24 maxlen: 24
81.23.145.0/24 maxlen: 24
87.117.165.0/24 maxlen: 24
87.117.162.0/24 maxlen: 24
87.117.160.0/24 maxlen: 24
87.117.161.0/24 maxlen: 24
87.117.166.0/24 maxlen: 24
87.117.164.0/24 maxlen: 24
87.117.170.0/24 maxlen: 24
87.117.171.0/24 maxlen: 24
87.117.168.0/24 maxlen: 24
87.117.167.0/24 maxlen: 24
81.23.149.0/24 maxlen: 24
81.23.147.0/24 maxlen: 24
81.23.148.0/24 maxlen: 24
81.23.159.0/24 maxlen: 24
81.23.156.0/24 maxlen: 24
81.23.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117583629 (0x429cf90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:04:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=203d2bbfe93f4a5ee07422156df23fda41cbf449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:73:44:e1:8f:fc:a2:23:c5:54:9e:42:68:
c5:f0:ec:8a:64:02:7e:4a:f9:81:79:35:d6:35:3a:
43:b2:1d:ae:a5:57:c9:96:ec:fe:b7:f1:5c:a2:00:
de:24:5c:09:af:c2:6d:63:38:fa:08:67:0b:0c:53:
23:6a:c9:1e:90:a4:1a:88:d8:fa:b8:29:2c:15:c2:
75:91:fc:29:55:40:ec:22:31:98:20:47:15:72:dd:
e9:0a:02:65:09:fe:d6:ca:c8:8f:31:9c:01:02:0e:
f3:26:3c:29:44:28:30:3c:1d:1e:92:06:e5:fe:ae:
73:5b:4c:97:e7:8b:25:1e:34:4f:cd:97:20:80:5d:
4f:09:44:4b:c3:42:fd:db:d9:5e:3d:74:1a:c7:44:
71:ef:21:dc:f1:a4:42:33:f1:36:75:ff:4f:f1:c6:
4d:5c:27:01:04:5f:7a:95:27:1f:31:ba:af:82:96:
48:15:d2:e2:9e:e3:4e:09:ea:60:cd:1d:e9:b7:94:
bd:f9:84:8b:53:7b:4b:13:45:6a:94:ca:7b:b0:90:
e6:9e:e2:f8:fa:ac:d6:b1:14:67:dd:4d:4a:c0:b0:
9a:73:76:74:60:53:fc:91:ca:ba:f1:8e:b3:be:37:
6f:f6:7b:79:a7:18:10:6e:93:85:1e:2c:b5:e0:c4:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3D:2B:BF:E9:3F:4A:5E:E0:74:22:15:6D:F2:3F:DA:41:CB:F4:49
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/ID0rv-k_Sl7gdCIVbfI_2kHL9Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.144.0/23
81.23.147.0-81.23.149.255
81.23.156.0/24
81.23.158.0/23
87.117.160.0-87.117.162.255
87.117.164.0-87.117.168.255
87.117.170.0/23
87.117.177.0/24
87.117.183.0-87.117.184.255
87.117.188.0/24
87.117.190.0/24
89.248.112.0/24
89.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:dc:2c:e3:c3:e4:af:7c:8c:93:9e:12:ef:f4:78:8c:d0:15:
41:c9:94:fa:c9:c5:b4:f9:57:18:ca:1f:c5:2b:e0:78:0e:d6:
61:95:32:85:7b:a9:79:20:3d:83:d8:24:64:bf:dc:f9:ac:77:
b5:6b:07:66:ba:2b:10:b5:52:ce:a4:49:bb:02:df:8f:a2:46:
9d:ff:07:f6:03:d8:cd:c3:1b:51:ee:87:89:53:6c:d5:cb:0d:
4b:5a:6a:d1:56:18:5a:2f:ab:5c:0f:48:0f:20:21:a7:fd:4c:
37:77:e1:5b:ed:b9:3e:c0:a7:13:83:75:7b:94:60:b6:3e:8f:
b9:6b:f9:5b:17:d5:aa:d8:74:e2:04:bf:54:f4:73:5f:a0:9d:
d6:25:83:77:90:c2:3f:16:68:64:1d:5d:a8:99:81:38:93:4a:
c1:e5:fe:80:8b:3b:fb:38:7a:f8:87:6a:f6:d0:6f:84:15:0b:
49:21:18:4f:be:d7:58:fa:2e:9b:41:fe:88:2b:36:73:78:7d:
18:76:aa:a9:61:35:28:9e:fa:57:1c:a1:f8:0b:83:ef:ea:61:
bb:9e:08:9f:e6:4a:5f:25:c2:b2:bc:b5:cc:9e:b2:bd:d6:42:
4c:65:6a:6e:aa:5a:d5:a8:5e:fc:67:1b:fb:bc:2a:56:8e:bf:
93:22:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:24 2024 by rpki-client on console-ams.rpki-client.org