Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/KNwBIqHL0UausqAMCyfrDlHVl58.roa
File: KNwBIqHL0UausqAMCyfrDlHVl58.roa (raw, json)
Hash identifier: ftGjyQIAjfgVugBw8QqyDNqzLM0p9nWjQHiMHPRcwDU=
Subject key identifier: 28:DC:01:22:A1:CB:D1:46:AE:B2:A0:0C:0B:27:EB:0E:51:D5:97:9F
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0B9E3C43
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/KNwBIqHL0UausqAMCyfrDlHVl58.roa
Signing time: Wed 19 Jan 2022 20:42:14 +0000
ROA not before: Wed 19 Jan 2022 20:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
93.114.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194919491 (0xb9e3c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 19 20:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28dc0122a1cbd146aeb2a00c0b27eb0e51d5979f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:84:b1:c1:d9:dd:f0:9c:8a:28:02:85:66:
a3:f9:d0:4b:09:51:56:96:3f:6c:7e:33:4e:81:c0:
86:a0:92:ce:60:14:dd:9f:bd:d4:c9:6b:5f:ac:a7:
e6:6a:2f:51:b7:a4:52:10:91:d2:f2:8b:fd:8d:56:
92:d0:60:58:8f:59:22:3f:6f:a3:b5:89:b3:b6:0b:
05:c2:72:92:5c:fd:59:e5:f2:56:39:3a:97:57:99:
9f:8d:15:5d:48:8a:c0:7d:8f:4a:2c:ec:65:6f:a1:
b4:a9:da:05:b9:e8:cc:0e:49:65:38:c7:60:b0:21:
13:5c:1e:40:92:f6:78:df:e9:39:44:36:f2:60:c6:
ab:06:06:ee:3c:8d:79:dc:12:9a:43:d2:3a:8b:75:
13:e6:96:b9:e8:e2:e6:a4:f7:4d:af:76:65:ba:68:
4e:ab:3c:8c:89:72:41:d1:29:22:3e:b5:a8:3f:b8:
0a:09:a6:8d:25:74:40:ed:42:b7:25:50:83:a7:56:
8b:eb:fd:d4:0d:1e:0b:42:34:98:78:67:5f:00:6e:
d5:43:48:d5:52:03:4d:2f:54:de:ab:01:4e:91:19:
7e:9e:5d:c7:ef:30:a8:07:65:06:fb:11:6b:98:eb:
a8:04:28:9e:af:b4:eb:3e:38:e7:27:c7:5d:d2:9e:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DC:01:22:A1:CB:D1:46:AE:B2:A0:0C:0B:27:EB:0E:51:D5:97:9F
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/KNwBIqHL0UausqAMCyfrDlHVl58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
89.43.44.0/24
93.113.203.0/24
93.114.171.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d2:d4:c1:83:e1:dc:9d:65:a1:52:97:7b:a5:6f:3c:26:89:
04:bd:cb:08:ac:22:16:10:35:0a:50:31:ab:fe:4b:9b:a3:bd:
f4:67:b3:ea:8e:66:bb:9c:e7:69:ce:5c:09:1a:7c:d1:87:f6:
97:a6:ef:da:57:68:01:28:cd:e1:bf:98:31:ed:44:d1:9c:0e:
19:de:41:40:40:6e:a9:05:a4:38:d1:b8:3c:a0:58:ce:b1:fb:
91:d3:06:2b:9a:7e:7d:6d:1c:56:fc:63:5e:57:5d:f7:f3:43:
43:fd:22:a6:b2:87:0c:34:37:38:c4:05:e2:86:44:85:fc:e7:
9e:58:de:af:1d:54:01:5b:8e:35:34:39:4b:8c:a4:bb:26:03:
4f:6a:17:d6:76:9c:b6:bc:95:7c:85:f2:b3:ba:2b:67:e8:d1:
90:16:7f:33:1b:e5:c8:30:08:62:3a:7a:a8:de:e9:e0:5e:dd:
68:4e:e3:9f:fd:cc:e8:9c:63:0a:37:24:b6:4a:da:90:85:5e:
71:a6:67:2a:9c:2f:e0:85:07:89:5c:6e:c8:65:a8:34:be:e0:
82:fd:50:4f:a8:80:66:fb:24:c2:84:83:0f:2b:e1:78:89:96:
67:0c:83:8b:6b:a0:c6:d1:d2:0f:23:b3:98:b2:1f:a8:56:e9:
b9:a1:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org