Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/xfOYhuBur-c_JFbfOxvQg7_usRA.roa
File: xfOYhuBur-c_JFbfOxvQg7_usRA.roa (raw, json)
Hash identifier: +5noT8nzXcdV9y2JGpGexgMvVAX1nj6nOrQrsxw4T6I=
Subject key identifier: C5:F3:98:86:E0:6E:AF:E7:3F:24:56:DF:3B:1B:D0:83:BF:EE:B1:10
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 2DF5E092
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/xfOYhuBur-c_JFbfOxvQg7_usRA.roa
Signing time: Sat 01 Jan 2022 14:58:12 +0000
ROA not before: Sat 01 Jan 2022 14:58:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 80.238.32.0/19 maxlen: 19
84.38.32.0/20 maxlen: 20
89.200.128.0/21 maxlen: 21
194.50.165.0/24 maxlen: 24
85.188.192.0/18 maxlen: 18
195.189.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 771088530 (0x2df5e092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Jan 1 14:58:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5f39886e06eafe73f2456df3b1bd083bfeeb110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:d8:41:4e:5f:03:c0:3f:14:a0:42:62:94:
c7:bb:40:0d:45:86:3f:72:77:5f:57:68:68:83:a4:
0a:7c:fd:b6:a3:12:08:03:d6:aa:00:c6:90:38:c6:
be:95:cb:21:a5:a8:b9:73:9e:21:90:70:ee:24:51:
4b:a1:f0:dd:eb:0c:8b:ce:7a:42:5d:e6:25:1d:4a:
30:82:3d:d1:1f:b7:2c:ff:9d:bd:22:b0:9c:54:76:
d7:ac:23:b6:d5:1b:aa:b1:c3:c4:f1:7e:5a:55:9d:
ac:60:02:94:2b:ed:18:9a:1b:b1:b8:72:f2:30:6a:
93:de:64:dd:cc:7c:98:bf:69:46:e7:16:aa:c5:7e:
d4:bb:9e:94:b2:15:02:ea:fa:fc:5f:36:00:cf:b7:
bf:70:7d:0e:ed:ef:4e:5d:60:2e:f5:37:f3:18:83:
0a:16:fa:ab:40:47:b5:05:2e:14:ce:ad:8b:2f:37:
e8:0b:f8:5c:b2:14:d8:c0:67:11:c4:ea:77:1e:da:
53:35:64:1c:dc:e2:c7:75:7b:47:fa:e9:d1:a6:fc:
66:e6:49:41:73:9a:8f:a8:36:74:94:9c:ba:d4:04:
10:5a:aa:da:f2:58:80:a7:d9:7b:d5:15:01:4d:ed:
64:67:15:50:e9:d2:3d:88:75:4b:aa:6b:94:14:25:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:98:86:E0:6E:AF:E7:3F:24:56:DF:3B:1B:D0:83:BF:EE:B1:10
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/xfOYhuBur-c_JFbfOxvQg7_usRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.238.32.0/19
84.38.32.0/20
85.188.192.0/18
89.200.128.0/21
194.50.165.0/24
195.189.158.0/23
Signature Algorithm: sha256WithRSAEncryption
25:a4:61:00:35:6d:67:1c:57:a2:87:19:82:2c:d9:2d:c2:d0:
62:a6:ca:10:87:6b:6b:d1:e9:a0:52:bf:60:09:7a:1c:e3:20:
74:3b:62:4b:7c:09:b3:e9:84:3d:16:ee:90:c0:2b:c2:2f:6e:
8e:4e:9f:86:df:61:cd:d2:8a:b8:a5:e8:aa:29:46:2d:0c:19:
33:ec:da:a9:87:57:70:2a:77:f1:74:d0:0b:3b:c1:f2:8c:87:
ed:f0:30:b4:fb:81:77:2e:32:90:a4:28:f2:64:81:64:ba:e1:
b5:09:76:66:18:aa:f8:db:17:39:42:36:a6:33:6c:2f:e7:ce:
60:f0:da:44:1f:88:57:b5:56:21:4f:c0:67:5e:26:dd:46:b7:
05:b5:72:19:63:76:13:e9:70:a1:23:1f:c3:f7:78:f7:a2:bd:
fe:4a:c8:1d:11:26:16:41:09:ad:ec:7c:c4:39:20:a9:5c:b8:
de:db:bb:17:c6:52:ca:1a:46:57:5e:e3:21:5e:f0:30:a5:a1:
8f:81:54:d9:57:75:ab:1e:a7:be:70:f6:bc:1d:3b:f7:95:3f:
1b:5b:1f:38:c4:63:85:de:26:32:ae:b6:03:63:40:a7:96:b4:
58:52:69:fd:60:15:b5:9a:9c:71:1e:43:69:95:84:cd:85:0c:
3e:c0:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-fra.rpki-client.org