Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/I-Z4OSO-_Yl1Zysva0uKD-_WC-U.roa
File: I-Z4OSO-_Yl1Zysva0uKD-_WC-U.roa (raw, json)
Hash identifier: vaU54ACvnWkX8d+HrnB9W6ThwrV5OFg1TRlSKQpB2DE=
Subject key identifier: 23:E6:78:39:23:BE:FD:89:75:67:2B:2F:6B:4B:8A:0F:EF:D6:0B:E5
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 0182EE2172F96CB1BCFC457B23FC85DCF351
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/I-Z4OSO-_Yl1Zysva0uKD-_WC-U.roa
Signing time: Tue 30 Aug 2022 09:42:25 +0000
ROA not before: Tue 30 Aug 2022 09:42:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39308
IP address blocks: 46.21.80.0/20 maxlen: 20
185.56.96.0/22 maxlen: 24
176.12.64.0/20 maxlen: 20
109.109.32.0/19 maxlen: 19
89.144.128.0/18 maxlen: 20
89.144.130.0/24 maxlen: 24
109.109.48.0/24 maxlen: 24
159.20.96.0/20 maxlen: 20
2a00:1570::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:21:72:f9:6c:b1:bc:fc:45:7b:23:fc:85:dc:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Aug 30 09:42:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23e6783923befd8975672b2f6b4b8a0fefd60be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:6f:4a:68:e9:1a:75:71:04:5c:7a:d7:77:
13:84:75:35:da:c8:4f:69:99:56:24:f4:d8:b9:dc:
31:24:ca:4a:cf:ff:d4:d5:f3:8a:42:23:b6:b7:9c:
62:41:f3:79:ca:57:c1:2b:c8:08:45:a3:c9:a4:cc:
0f:29:38:c9:44:ce:2a:ad:fe:12:97:52:09:05:5f:
21:73:68:f6:8e:fb:93:b5:be:02:19:88:b6:19:a1:
f0:f9:8d:dd:b4:06:17:1c:82:5e:44:63:2c:65:d4:
a7:c1:3f:e5:97:8a:b5:ff:7f:fa:b4:95:b7:e6:4c:
18:27:6c:cf:31:a8:68:c8:3a:29:e6:01:2c:2b:a6:
12:54:1f:c7:70:1f:f3:d1:10:2c:e1:6c:b0:24:0d:
dc:05:a9:2c:b8:da:20:f7:de:44:b9:7b:12:fd:f2:
31:b6:21:e5:f9:55:47:54:80:bd:bb:e0:71:fc:b8:
2d:e6:03:08:2f:84:e7:9c:71:94:b2:2a:89:af:f2:
21:01:17:62:e8:84:ec:74:93:f5:6a:5f:17:b0:a6:
b5:0a:23:6b:f1:86:84:70:a3:60:7c:01:3e:a8:6c:
46:e5:ea:e5:5c:a4:ca:13:8f:2e:55:f9:88:f3:c2:
08:00:2f:2e:04:fc:5f:42:41:2d:08:57:11:2b:8f:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:78:39:23:BE:FD:89:75:67:2B:2F:6B:4B:8A:0F:EF:D6:0B:E5
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/I-Z4OSO-_Yl1Zysva0uKD-_WC-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.80.0/20
89.144.128.0/18
109.109.32.0/19
159.20.96.0/20
176.12.64.0/20
185.56.96.0/22
IPv6:
2a00:1570::/32
Signature Algorithm: sha256WithRSAEncryption
cf:45:d7:79:df:b6:4f:b0:95:cb:8d:5d:a0:0d:e9:11:ff:a7:
f4:cc:03:b6:0c:1d:05:10:bb:35:64:15:e6:b2:5f:e2:3c:3e:
45:de:ca:2e:f0:35:73:c1:f9:22:e5:ef:11:ff:68:27:d6:83:
bb:55:3c:1a:b7:c1:7f:e1:04:85:5e:2a:2f:33:df:e1:fe:bb:
1f:c6:87:d2:f4:86:09:e7:d0:85:7d:39:49:46:45:3c:73:60:
c6:fc:94:fa:91:2a:c6:7b:75:55:dc:eb:5e:09:73:7a:82:b1:
09:91:45:59:6f:93:fa:38:32:20:d4:af:f8:c8:1f:e2:33:32:
0e:51:54:f5:c1:e0:a4:9d:0d:ce:7e:f7:88:5f:2f:d6:ff:78:
af:d8:a6:2c:70:af:02:d3:ff:b4:4d:fe:2d:af:3b:c2:88:5d:
3d:5f:bf:29:e0:15:4f:d8:cb:2f:2c:f4:71:91:f8:95:dd:fd:
46:e0:1e:8c:32:0a:69:45:02:9a:a6:da:ec:ff:5b:65:ec:df:
41:01:50:12:49:e6:62:54:26:de:f8:cf:7f:fa:5d:3a:6e:26:
8f:8c:ba:c0:d6:ae:ac:98:ec:d0:8f:10:60:b2:1a:1c:69:d9:
3f:7c:70:02:5a:1c:4b:36:d9:d0:e2:19:3c:90:88:23:03:96:
1b:8e:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org