Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_QiJT6vIcsneycN7xSH4dVrBvo.roa
File: I_QiJT6vIcsneycN7xSH4dVrBvo.roa (raw, json)
Hash identifier: pK6UJPG/Yq75Jztm0xzvrWLE+vidTQlfnpJYlZUWbLI=
Subject key identifier: 23:F4:22:25:3E:AF:21:CB:27:7B:27:0D:EF:14:87:E1:D5:6B:06:FA
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C0FA1F7
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_QiJT6vIcsneycN7xSH4dVrBvo.roa
Signing time: Wed 02 Mar 2022 11:58:19 +0000
ROA not before: Wed 02 Mar 2022 11:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202351095 (0xc0fa1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 2 11:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23f422253eaf21cb277b270def1487e1d56b06fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:e0:60:94:a9:2c:0a:d0:20:75:a0:92:6a:
34:b5:81:21:9c:95:d0:4a:51:1c:9c:c9:ba:c0:de:
51:7b:91:47:40:e0:4a:d8:3d:9a:10:f9:d9:47:24:
3a:b2:4e:53:e8:42:d2:ef:cb:ec:57:3a:e9:ac:25:
dc:25:9d:68:07:4c:4b:4f:9a:78:8c:3a:49:40:e1:
c2:e6:db:8e:3b:3c:06:16:c6:73:62:97:f8:51:6a:
89:4c:81:ba:86:72:69:fc:d5:af:92:03:97:c6:ca:
7b:b0:7f:98:e2:85:fe:fc:dd:ac:79:61:13:e3:39:
c7:d7:9a:ac:b2:a4:d9:bf:79:7d:10:c8:a8:56:4b:
68:20:a9:a3:f0:eb:6f:ed:40:5b:31:2e:96:36:59:
9f:b2:18:b6:3c:2e:cf:b5:af:15:db:30:e6:ac:01:
8a:d5:6d:c3:12:75:db:8d:78:3c:45:f6:8b:4f:d5:
ff:bb:88:94:b1:84:f7:36:f0:76:4a:66:2b:fc:ab:
ba:e4:e7:a4:04:3d:da:9c:d2:08:f8:dc:b6:4f:94:
6b:f7:8e:3f:69:14:16:3c:19:3f:bd:f6:99:d6:34:
89:06:21:53:fd:ae:ac:3f:70:49:b7:5a:75:f1:4a:
0c:51:24:85:10:ae:52:5b:25:53:ca:55:9d:3d:67:
dc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F4:22:25:3E:AF:21:CB:27:7B:27:0D:EF:14:87:E1:D5:6B:06:FA
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I_QiJT6vIcsneycN7xSH4dVrBvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
89.43.73.0/24
89.45.34.0/24
93.113.203.0/24
93.114.171.0/24
188.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b6:a8:e6:49:77:dc:6c:84:97:9e:bd:8d:e0:dc:8b:c4:98:
24:08:a9:33:36:47:fe:06:ce:f6:49:f1:c2:e5:2f:4d:b6:47:
d8:dc:42:b6:13:45:02:4e:93:22:91:ff:6a:7b:08:65:a4:ea:
57:51:f9:0f:02:56:51:18:f5:7f:5f:f7:9c:a4:38:2d:97:e9:
8e:9d:3c:62:ef:cb:4d:4b:dc:36:1c:94:0d:cc:f0:1e:9a:72:
ca:7e:5f:a3:87:0f:77:ea:5d:ca:46:8a:9d:b3:25:19:5f:fe:
a5:18:8f:6e:b6:10:ed:60:ed:57:32:42:b6:0c:46:48:68:0d:
c2:6a:9a:2b:2b:07:11:a4:b6:44:08:b4:77:9f:f3:fe:0d:67:
ca:c9:e6:3a:50:9e:4e:79:d7:ad:80:f7:6b:07:43:66:8e:0e:
ed:23:81:f8:a0:5a:5e:f0:03:54:8c:94:b6:6f:e8:29:a4:cd:
cc:e5:0f:33:c5:8b:1d:3f:1d:84:d6:07:d5:2c:dd:58:16:fc:
00:02:4b:20:a8:fb:08:db:9e:aa:34:56:46:01:cd:2b:e0:41:
4f:58:04:3b:44:f7:4c:11:e0:9c:d8:59:29:f9:c7:a9:df:d0:
ee:70:c9:67:0f:4f:27:f6:e0:7e:bf:31:e4:27:4c:21:13:d6:
b4:93:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org