Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa
File: EcOlopigyoIxWPSZyRFUhTJDEfs.roa (raw, json)
Hash identifier: P779AC6GsUfnXdkLYT/f+xL5/fLevmkDk6hgmvq6exg=
Subject key identifier: 11:C3:A5:A2:98:A0:CA:82:31:58:F4:99:C9:11:54:85:32:43:11:FB
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C61AB2E
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa
Signing time: Tue 05 Apr 2022 18:34:24 +0000
ROA not before: Tue 05 Apr 2022 18:34:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
86.106.80.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.97.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207727406 (0xc61ab2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 5 18:34:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11c3a5a298a0ca823158f499c9115485324311fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:28:d9:0d:87:2e:e7:c7:3e:c2:d6:68:a1:
6a:56:c3:da:76:f5:e0:e8:c7:e4:19:10:0b:f4:f9:
24:97:37:e8:ec:72:15:81:42:3d:25:1e:70:19:a0:
ca:ba:63:6f:58:51:fb:cf:ca:a4:28:22:ef:68:22:
df:49:db:a6:24:9c:73:d5:62:e0:05:b6:7c:2c:3d:
bd:e9:3f:9d:74:79:aa:f0:53:01:37:6a:92:bf:61:
85:bc:35:43:cd:01:f8:65:2e:c6:06:a4:22:44:3d:
5f:11:13:b2:24:ab:73:f4:39:ed:30:e3:a0:a2:d6:
2f:28:bb:27:87:4e:61:f3:c9:83:6e:fc:ad:78:e2:
d0:94:47:83:0c:73:93:5e:a3:89:28:c7:dc:7a:42:
ef:ed:fc:e1:49:f0:a6:26:2b:01:70:f8:67:1d:49:
0e:42:d8:eb:4d:11:ad:e2:79:39:5c:4b:e3:d5:ad:
f5:5f:0a:a4:0a:58:26:e6:97:56:5d:50:6e:cf:56:
73:6c:10:2b:04:e2:30:55:a3:9d:cb:dd:21:8e:1d:
38:18:e5:b6:6d:e2:f4:b1:6c:01:18:66:c0:b3:8e:
cf:a1:36:71:e1:4e:2a:e4:1a:75:6d:e8:eb:5a:cd:
fc:2f:2f:82:86:03:45:7c:a1:a6:6b:57:e7:97:86:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:A5:A2:98:A0:CA:82:31:58:F4:99:C9:11:54:85:32:43:11:FB
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EcOlopigyoIxWPSZyRFUhTJDEfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.97.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/22
89.43.45.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/23
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
91:70:80:4a:15:2a:81:3d:ea:2d:33:4c:67:63:28:1a:d3:0e:
9d:84:3b:8f:e8:3a:d7:d8:1f:a2:87:e9:29:80:db:e3:12:30:
62:16:fe:97:91:19:71:40:81:8a:fa:fb:87:c7:f2:2a:6a:ae:
87:d1:b4:d7:fa:55:83:31:a8:5e:cc:b5:a1:dc:02:62:cf:08:
17:8e:9b:d9:fe:87:82:c0:16:d1:db:b8:f3:19:cd:c1:40:6f:
93:cb:58:f2:26:58:bb:bc:9e:6f:66:78:09:22:23:8f:d4:f9:
2e:34:cf:f5:97:fc:5c:3d:e5:b4:e9:cd:c8:af:b1:15:8d:83:
35:83:df:b4:37:1b:54:40:02:2d:e6:7f:f2:a4:eb:92:cb:f5:
1e:46:4b:4c:42:03:46:60:19:49:33:35:1d:eb:56:5e:1b:42:
9c:3a:cf:19:af:bf:92:33:2d:2c:83:f1:9c:3f:87:4e:07:aa:
8c:36:f7:d2:7a:fb:51:2d:8c:1b:69:06:a2:57:da:81:31:d5:
42:24:f2:d1:f1:76:d0:52:71:6b:b5:10:49:db:7b:bf:4d:75:
61:25:ee:c7:88:c5:ef:fa:ef:f2:6f:21:bd:d4:6c:a7:a9:5e:
f1:44:9a:7e:bf:43:32:19:48:a1:0a:1b:6d:02:0a:74:2f:24:
55:ce:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org