Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/8A9JsIETnrayljDMSKyln-AwKig.roa
File: 8A9JsIETnrayljDMSKyln-AwKig.roa (raw, json)
Hash identifier: TJmSqymdKT4onksCpXQVlNNRyZQ2vtJTrQtb8elP35A=
Subject key identifier: F0:0F:49:B0:81:13:9E:B6:B2:96:30:CC:48:AC:A5:9F:E0:30:2A:28
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 0182F38087E71C42A8F337BC6E8A36F0F49C
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/8A9JsIETnrayljDMSKyln-AwKig.roa
Signing time: Wed 31 Aug 2022 10:44:23 +0000
ROA not before: Wed 31 Aug 2022 10:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209984
IP address blocks: 185.249.232.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
185.237.136.0/22 maxlen: 24
109.205.136.0/22 maxlen: 24
89.40.238.0/24 maxlen: 24
2a0c:1380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:80:87:e7:1c:42:a8:f3:37:bc:6e:8a:36:f0:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Aug 31 10:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f00f49b081139eb6b29630cc48aca59fe0302a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:a0:9b:6c:a4:a5:92:60:42:d4:15:48:13:
42:51:b1:78:15:eb:fe:cc:72:17:7e:1a:9b:2c:95:
8f:fb:5b:b1:72:42:ce:bb:c0:e8:59:2a:a2:8c:89:
89:2a:c6:87:46:af:91:76:2b:9a:2f:96:00:6d:21:
4b:c6:3b:d2:2f:ed:52:6a:71:43:92:ad:48:01:59:
5b:80:fd:64:a7:33:bb:85:b4:f4:cd:88:9e:30:82:
1b:e0:96:c3:65:ca:e3:54:02:05:c0:be:2d:80:25:
df:53:7d:56:aa:d3:cd:ba:b1:2b:ab:3d:98:30:9d:
20:ec:db:21:20:87:c6:eb:ad:7e:45:37:f1:fc:81:
a4:aa:4e:83:2c:b5:71:59:31:39:10:49:a0:23:22:
83:ff:6d:88:d4:6b:f9:95:45:c4:d9:7e:a5:9b:8a:
c4:36:d3:93:80:fe:48:0c:00:00:35:1b:ef:a4:48:
2e:9a:94:4a:eb:92:3c:73:56:3e:fd:e2:61:e8:00:
ce:30:bd:3d:a5:58:7d:95:b4:ed:d6:a3:19:d1:13:
71:c1:f5:04:10:da:0f:dd:62:29:ea:a7:9b:fc:f9:
c2:91:bd:75:75:8d:9e:a9:32:92:6f:eb:c5:9d:6a:
7f:1f:00:f1:c6:9d:a3:9e:55:65:84:21:5f:5d:b8:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0F:49:B0:81:13:9E:B6:B2:96:30:CC:48:AC:A5:9F:E0:30:2A:28
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/8A9JsIETnrayljDMSKyln-AwKig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
109.205.136.0/22
185.237.136.0/22
185.249.232.0/24
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
42:f5:45:36:f1:e7:58:3f:6f:9d:ff:d7:d7:7b:38:ea:f2:0c:
9d:2e:2d:2b:bf:d2:ec:72:d0:3c:84:b7:a0:9e:33:2f:a9:7f:
75:ad:3a:3b:f1:37:af:d0:bd:97:77:c0:3e:e8:7b:16:00:f9:
74:bb:2d:d9:80:bd:b7:63:e9:cf:3d:50:c3:9a:a9:b5:ce:f0:
6f:d0:69:11:21:12:91:34:5b:65:32:9d:7a:95:e2:0c:ec:e5:
28:57:1a:61:4e:6b:af:79:dd:51:7b:5a:65:09:f3:58:d9:07:
1f:e1:e7:87:86:c3:4c:73:58:37:e6:f3:03:e9:ae:44:07:28:
91:d6:c3:86:94:22:87:89:3e:bb:ee:da:bb:3a:bb:2b:d1:76:
5c:98:ff:3b:1c:27:a3:b7:f9:08:9d:19:51:ec:45:f8:d5:20:
a9:ca:27:17:1d:23:c1:c5:2f:67:49:20:70:c4:62:f3:ec:58:
bb:5f:8e:e3:5e:80:f6:4b:64:78:5f:cb:05:b1:1f:f9:aa:6e:
80:99:c3:64:4c:ba:94:49:73:86:7f:1e:a7:6b:bb:8c:4e:65:
de:ee:eb:25:1c:a6:9b:4f:94:27:58:bf:c3:d3:3a:d0:d0:18:
44:b1:f9:13:82:ab:e3:4e:70:5d:16:31:cb:ef:09:11:b8:ac:
c5:25:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:25 2023 by rpki-client on console-ams.rpki-client.org