Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/TewG527oJ__vA3LlKztjy4RManA.roa
File: TewG527oJ__vA3LlKztjy4RManA.roa (raw, json)
Hash identifier: Z+bVidvNB4f19/HujqfHDiLMluQtx6KCb7+5Dg7QJcs=
Subject key identifier: 4D:EC:06:E7:6E:E8:27:FF:EF:03:72:E5:2B:3B:63:CB:84:4C:6A:70
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 14728E5E
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/TewG527oJ__vA3LlKztjy4RManA.roa
Signing time: Sat 01 Jan 2022 09:58:54 +0000
ROA not before: Sat 01 Jan 2022 09:58:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207333
IP address blocks: 86.107.44.0/24 maxlen: 24
86.107.45.0/24 maxlen: 24
89.33.41.0/24 maxlen: 24
185.129.51.0/24 maxlen: 24
185.129.50.0/24 maxlen: 24
92.114.7.0/24 maxlen: 24
185.100.64.0/24 maxlen: 24
185.100.65.0/24 maxlen: 24
185.100.67.0/24 maxlen: 24
188.241.216.0/24 maxlen: 24
188.241.217.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
185.111.105.0/24 maxlen: 24
185.111.104.0/24 maxlen: 24
185.111.107.0/24 maxlen: 24
185.111.106.0/24 maxlen: 24
185.98.7.0/24 maxlen: 24
185.98.5.0/24 maxlen: 24
185.98.6.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
89.46.34.0/24 maxlen: 24
185.113.132.0/24 maxlen: 24
185.113.135.0/24 maxlen: 24
185.113.134.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
2a06:940::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343051870 (0x14728e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 09:58:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dec06e76ee827ffef0372e52b3b63cb844c6a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:6b:52:9d:ac:27:c5:e3:53:da:45:d5:dc:
4e:b2:ea:cc:34:05:e0:a6:73:84:6c:d3:12:9b:d8:
e0:b8:78:84:a2:8b:66:69:d2:ae:70:c9:17:b4:ac:
6c:c4:8a:41:3f:10:0c:c5:1d:00:df:aa:14:4f:a3:
6a:45:33:22:22:4e:46:04:8e:7a:27:b3:23:23:f6:
79:af:b6:db:76:cb:ed:41:7c:8c:3c:d3:a8:f2:c5:
fa:a6:43:97:90:16:99:c6:ed:fc:1b:ab:63:56:49:
18:ce:49:26:70:7c:3a:90:c4:80:33:a7:b1:99:e4:
f2:4d:c7:c4:36:f4:10:2e:8b:a0:c5:89:71:81:0f:
f2:87:dd:03:a1:96:14:de:1c:47:93:4c:20:69:da:
0c:0e:a0:de:00:be:8a:be:62:13:10:ad:91:4a:3b:
06:dd:50:bf:e4:ff:fa:eb:7f:c3:20:c1:e3:19:ae:
d9:b3:5f:50:2d:18:22:c0:30:e1:81:98:95:74:c2:
e9:16:b2:fa:79:5f:6c:bc:6a:c8:51:26:58:45:66:
7f:e2:61:42:c4:8d:51:af:95:9a:4f:e0:25:f7:cd:
1c:9b:d7:95:14:52:ea:7e:d9:d7:88:76:2a:f4:2b:
51:5a:cc:7a:81:fa:1a:22:d3:be:9a:bd:3b:24:ec:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:06:E7:6E:E8:27:FF:EF:03:72:E5:2B:3B:63:CB:84:4C:6A:70
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/TewG527oJ__vA3LlKztjy4RManA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.44.0/23
86.107.198.0/23
89.33.41.0/24
89.46.34.0/24
92.114.7.0/24
185.98.5.0-185.98.7.255
185.100.64.0/23
185.100.67.0/24
185.111.104.0/22
185.113.132.0/24
185.113.134.0/23
185.121.80.0/22
185.125.89.0/24
185.129.50.0/23
188.241.216.0/23
IPv6:
2a06:940::/48
Signature Algorithm: sha256WithRSAEncryption
4b:2f:8b:70:b2:c5:e1:ee:3f:59:8a:1a:a4:37:16:38:4c:ac:
4f:c0:8d:b9:64:83:7a:3c:bc:dd:dd:68:4f:7b:5a:6e:ef:ec:
99:98:07:5f:e2:ad:91:fa:60:c8:48:c9:ec:ac:83:b1:a3:f6:
4f:75:3c:b4:1b:e6:c7:1c:db:12:7c:33:78:8c:ef:05:29:e2:
9c:60:e3:ef:59:ef:78:c9:9a:88:d0:02:80:19:8c:77:3a:f1:
2f:c1:af:26:ec:d5:a6:52:54:b6:56:85:47:b4:60:97:04:9d:
6e:39:3e:4d:b4:ee:b4:e5:24:96:c2:8f:8c:53:7e:98:5f:db:
26:ab:db:ff:a2:f7:b0:40:d0:39:d3:44:ad:46:f3:36:ec:43:
34:64:ca:4b:3d:1c:01:2b:44:2b:72:3a:42:14:9e:7d:00:b8:
c9:9e:7c:d6:84:c3:c8:dd:e7:3f:8d:6f:60:d2:36:85:02:09:
0a:c8:35:34:81:8a:36:73:e2:fd:3f:85:cc:78:a6:eb:63:37:
f7:e8:ce:08:0c:c9:62:6b:82:b0:74:45:12:7d:a3:a7:8e:0a:
86:18:d5:20:ae:22:06:7f:28:7b:76:91:ef:7c:3a:63:a5:14:
23:86:86:e2:50:49:de:f1:cd:6d:4e:af:65:6e:b4:53:f0:ee:
b3:a9:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org