Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/Ek5_65sX_nkOqyLINRhu5AHJt3s.roa
File: Ek5_65sX_nkOqyLINRhu5AHJt3s.roa (raw, json)
Hash identifier: qAHX+T33udrGBM4/NCqWn+RlYha4eGJnhCBzmAl7ERY=
Subject key identifier: 12:4E:7F:EB:9B:17:FE:79:0E:AB:22:C8:35:18:6E:E4:01:C9:B7:7B
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 042FDE85
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/Ek5_65sX_nkOqyLINRhu5AHJt3s.roa
Signing time: Sat 01 Jan 2022 06:03:33 +0000
ROA not before: Sat 01 Jan 2022 06:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50244
IP address blocks: 89.41.25.0/24 maxlen: 24
188.212.129.0/24 maxlen: 24
89.47.244.0/23 maxlen: 24
94.177.80.0/21 maxlen: 24
89.36.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70246021 (0x42fde85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 06:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=124e7feb9b17fe790eab22c835186ee401c9b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:85:a4:2e:6b:91:98:0a:a9:05:6d:3b:84:
dc:b6:05:7a:34:fc:c3:b7:80:57:f3:2b:c8:ab:bf:
d4:29:f2:2f:68:56:8e:dd:16:a9:d1:7c:0f:99:32:
2b:f1:4e:cf:85:c0:89:f3:2a:0f:71:23:ec:e1:c0:
e4:34:7f:53:04:8b:94:60:93:f0:91:0b:25:45:b4:
12:93:c8:f7:2a:4c:3d:76:9d:21:a7:d4:35:ab:f9:
43:30:53:53:76:75:8f:ca:c0:d3:6f:fb:00:c1:27:
36:30:24:c5:f5:57:33:a7:1c:74:c3:a3:d6:b6:fc:
cb:54:b9:dc:ef:f7:c3:88:c4:fe:a7:17:b1:2a:f1:
ed:76:75:86:4d:b8:b5:6d:1f:82:5e:cd:11:f8:8e:
4c:2f:aa:84:92:e8:fc:a9:2b:e0:c7:1b:19:d9:b8:
42:26:2b:b2:1d:36:c3:21:4a:7a:4b:a9:16:82:3e:
d2:2e:f6:75:bc:30:06:30:1d:3a:9f:0d:87:62:92:
6e:4d:f4:d5:d1:ee:d4:9d:1b:e7:7a:7f:00:e2:a3:
ba:36:bc:58:ca:e9:28:9c:b4:fa:f2:40:13:12:fe:
85:ad:ec:c7:39:11:47:8b:3a:ba:95:76:55:30:7d:
fb:4d:73:02:6a:a4:14:e9:69:78:82:c4:df:e1:6d:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:7F:EB:9B:17:FE:79:0E:AB:22:C8:35:18:6E:E4:01:C9:B7:7B
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/Ek5_65sX_nkOqyLINRhu5AHJt3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.77.0/24
89.41.25.0/24
89.47.244.0/23
94.177.80.0/21
188.212.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:04:61:50:22:3a:d6:04:5b:f1:39:20:17:11:4b:05:4f:d7:
4f:94:af:cb:8c:46:07:7e:bb:97:46:ef:8f:c5:85:8b:f2:fb:
2e:b7:3f:21:df:a5:97:e9:00:de:5e:e3:72:ae:ae:e3:18:cf:
fc:15:91:19:dc:6b:b9:2b:09:86:a2:9a:4a:14:18:1c:ef:6e:
ad:a0:56:a8:0b:5f:6f:82:56:c8:d4:4f:d5:30:79:db:7a:27:
be:4c:29:60:cd:69:b2:d7:58:b2:47:4b:a4:39:55:06:ec:06:
ed:77:48:ae:9d:1a:11:66:38:20:0d:0c:e0:d9:31:4a:42:b8:
9e:9d:69:76:ac:99:0f:13:e3:76:a4:7c:1d:ad:21:6a:0f:a4:
5b:76:98:24:ef:e3:2d:c0:38:23:57:2b:07:68:a0:b1:2c:3f:
d1:16:ef:cb:c3:fc:4c:b2:74:92:4e:67:5f:13:42:a3:7a:2b:
f5:d4:9c:81:f7:7f:55:2e:bd:c7:b9:d6:0c:6c:74:18:ca:13:
28:50:65:e6:da:1e:12:98:cd:46:8a:d1:c2:26:6d:cb:a4:21:
6b:eb:4c:37:60:da:a5:6a:ac:9e:84:0f:16:64:f4:f3:ed:11:
8d:ab:ac:88:2d:ff:ba:52:5a:31:3e:50:b8:eb:2c:a2:bc:6d:
d4:c4:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-ams.rpki-client.org