Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CiWDJBgLo-wGpijsyASWdd6t4RU.roa
File: CiWDJBgLo-wGpijsyASWdd6t4RU.roa (raw, json)
Hash identifier: 2FrIZrDbzN5727K5PBwnpiNzV3Nwdi0xWFw/zVoZbi0=
Subject key identifier: 0A:25:83:24:18:0B:A3:EC:06:A6:28:EC:C8:04:96:75:DE:AD:E1:15
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C11E2D8
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CiWDJBgLo-wGpijsyASWdd6t4RU.roa
Signing time: Wed 02 Mar 2022 18:05:26 +0000
ROA not before: Wed 02 Mar 2022 18:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202498776 (0xc11e2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 2 18:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a258324180ba3ec06a628ecc8049675deade115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:da:fe:19:4f:ee:5d:70:80:bd:f0:1b:b1:
69:56:eb:c4:58:10:dc:45:37:f1:49:ea:36:0e:e8:
16:05:bc:ff:72:bc:99:b1:e5:d5:7b:ee:eb:78:6f:
b1:3c:cc:02:58:2b:84:3e:74:30:9d:a2:5c:75:cb:
aa:7b:da:b1:29:cf:84:c5:3d:33:5c:9f:d8:ff:dd:
b0:8f:d5:fb:82:59:ec:ce:b3:5a:d7:56:90:96:f7:
c2:78:83:b3:56:56:82:e5:5d:26:74:c3:7a:8a:26:
78:b4:c3:75:83:4a:fb:84:cc:a2:a6:72:d3:b9:e7:
b1:84:3a:72:cf:dc:ae:9b:78:6e:87:46:25:d4:03:
e7:b9:b1:00:cb:66:17:8c:1c:ba:21:13:e1:c8:a4:
fd:63:97:63:c0:d1:b9:0e:68:24:d9:bc:8c:db:1b:
72:30:16:40:3f:50:9e:a8:b7:e3:88:ff:a4:09:d9:
59:28:64:13:68:56:65:27:8f:a2:e7:f6:38:58:e2:
fc:4d:21:b2:03:6a:d8:7f:4e:3e:f5:5a:a7:c8:83:
b6:0c:ce:16:3c:c5:df:09:68:96:09:ac:55:8e:57:
77:8e:b6:18:73:3f:93:e2:17:33:8c:49:e5:2c:1e:
69:a5:30:83:9c:da:82:ac:66:d8:d1:42:a3:f0:ad:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:25:83:24:18:0B:A3:EC:06:A6:28:EC:C8:04:96:75:DE:AD:E1:15
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/CiWDJBgLo-wGpijsyASWdd6t4RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
89.43.73.0/24
93.113.203.0/24
93.114.171.0/24
188.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
51:76:a3:6f:aa:25:e0:b6:3d:6a:e2:a8:7e:27:5a:8d:09:3e:
1f:56:7f:27:1e:04:69:c1:b1:07:20:a9:82:a2:01:a5:8b:48:
c0:01:8b:b7:bd:25:0d:00:33:45:1f:10:5a:83:6f:f1:e9:67:
e8:23:a3:26:1a:95:b6:16:66:bf:18:6e:c7:17:c5:a7:80:b6:
ae:97:11:4a:d7:a0:3d:da:b4:e0:c1:7a:45:af:a8:7e:6d:b5:
0b:2d:9e:96:75:17:b1:a0:4a:1c:93:87:02:6a:f7:be:66:f5:
6f:6f:ab:3d:02:d7:b4:d5:5e:7f:3d:2e:f2:57:5d:55:8a:37:
58:00:53:6b:d4:42:96:ec:64:3c:04:0a:af:e2:ae:e1:48:e8:
2b:90:a5:03:0a:20:7c:a7:18:81:4f:0c:38:4b:a1:67:8c:7b:
a6:97:13:36:3f:ea:02:e2:1c:7e:f3:95:83:88:fe:d8:05:f3:
66:33:e9:ee:b0:7d:ce:5f:24:1e:c3:7c:01:95:b8:78:6b:38:
a3:fd:22:ec:59:40:2c:0d:2c:e1:5e:31:c4:57:8b:7a:ae:fd:
5b:4e:be:07:c2:c5:9f:d3:c7:ce:7c:a9:39:07:b2:00:fc:35:
5e:58:a2:6f:9e:d9:ce:cc:f9:fc:92:b3:21:29:b6:56:f8:40:
c6:2e:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org