Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7ljxBifR6czkZW_xn3jRllazfWk.roa
File: 7ljxBifR6czkZW_xn3jRllazfWk.roa (raw, json)
Hash identifier: iLYoEUOPi3SL5L2BvZnvnrA3Kvl4KgvolA26JLyfa5k=
Subject key identifier: EE:58:F1:06:27:D1:E9:CC:E4:65:6F:F1:9F:78:D1:96:56:B3:7D:69
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 04A6B142
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7ljxBifR6czkZW_xn3jRllazfWk.roa
Signing time: Thu 26 May 2022 20:32:13 +0000
ROA not before: Thu 26 May 2022 20:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39409
IP address blocks: 89.37.98.0/24 maxlen: 24
37.153.156.0/24 maxlen: 24
89.37.99.0/24 maxlen: 24
185.216.8.0/24 maxlen: 24
2a10:9906::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78033218 (0x4a6b142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: May 26 20:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee58f10627d1e9cce4656ff19f78d19656b37d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:3d:af:63:b7:70:fa:bd:82:4e:e8:a3:48:
e3:14:05:c9:06:40:ab:e6:0a:80:bf:13:06:f6:ea:
1e:b3:7b:ec:26:1d:35:11:65:ed:e6:15:2e:81:31:
d0:89:78:1e:ff:3c:3c:fd:c4:38:0d:14:df:26:e4:
a9:b2:f4:56:c3:78:31:de:3d:15:ad:70:dd:59:a8:
9b:28:29:4c:01:28:1c:55:2a:92:d4:ea:ea:ad:49:
a4:13:8f:8f:0b:5b:d3:ee:83:70:6d:c9:6c:c3:22:
1e:b7:8d:0a:90:bb:61:96:30:c4:04:d0:2b:16:0c:
89:0a:d8:28:86:7a:af:fe:09:5f:bd:e4:17:ba:dc:
8d:89:aa:7e:1a:98:52:06:13:4d:35:aa:a0:bf:98:
31:a3:e3:38:ad:ca:40:ae:57:15:36:bb:57:8f:4c:
a5:66:0e:63:9e:1f:4c:91:98:c1:b8:d7:07:5f:e1:
0c:a3:a8:c8:b2:44:ef:b1:83:8d:8b:b0:a0:6e:d1:
10:aa:fc:99:0c:3a:5a:37:c0:42:36:f9:fa:1e:71:
fd:d6:bb:5a:b3:8f:14:68:42:a7:56:2a:2d:f4:75:
8e:75:43:8e:14:d4:fd:18:a5:b7:00:06:76:7b:d2:
66:08:e1:26:61:fa:d7:15:70:47:2a:1f:dd:6f:2b:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:F1:06:27:D1:E9:CC:E4:65:6F:F1:9F:78:D1:96:56:B3:7D:69
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7ljxBifR6czkZW_xn3jRllazfWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.156.0/24
89.37.98.0/23
185.216.8.0/24
IPv6:
2a10:9906::/36
Signature Algorithm: sha256WithRSAEncryption
52:77:f7:3e:df:8b:b4:8c:0f:e9:67:6b:ea:dd:4d:45:8d:33:
31:a4:70:b3:af:26:ad:d5:e7:84:ac:8f:79:06:4d:eb:f9:0e:
86:98:d0:5c:4f:44:d1:e4:69:40:b4:89:a6:d3:44:3e:0f:e8:
77:30:de:c8:c4:df:ba:b9:87:14:70:7c:e6:42:1e:06:00:a4:
09:b9:06:b1:61:30:34:02:fd:4c:44:03:33:58:06:12:28:8e:
d7:9b:a2:03:a1:f6:b9:a3:60:8f:cc:0d:45:b8:5d:a3:d2:0c:
26:fe:ea:ce:4d:1e:75:67:3f:c3:fd:7b:80:2e:d9:5c:d1:11:
a2:f4:77:1f:20:a6:fb:c0:6e:c0:79:b8:a5:97:81:91:19:dd:
ae:23:bf:77:15:96:b9:ea:3f:31:cd:ce:12:de:04:af:15:34:
f2:03:25:6b:54:d5:1f:5c:d8:8f:f9:ac:62:02:18:7f:ff:14:
c4:09:f6:80:65:4a:ec:06:3b:5d:67:1e:75:34:ba:c1:74:56:
54:1e:3c:66:5c:63:a3:35:81:c5:f2:8f:21:50:9b:ca:a5:bb:
54:d4:9c:6b:95:e4:84:04:80:13:58:c9:4d:db:ef:f5:60:15:
c7:9d:31:bd:ff:5a:d6:eb:78:5c:c5:00:69:e4:71:62:48:35:
61:01:b4:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:45 2024 by rpki-client on console-ams.rpki-client.org