Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LvI1ocyriwMC5hCgplRyew8S9Rk.roa
File: LvI1ocyriwMC5hCgplRyew8S9Rk.roa (raw, json)
Hash identifier: bSE251HtIBQzJz9xUXuOt48QU3AKudhWZTX+8cDXHkY=
Subject key identifier: 2E:F2:35:A1:CC:AB:8B:03:02:E6:10:A0:A6:54:72:7B:0F:12:F5:19
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C129D0F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LvI1ocyriwMC5hCgplRyew8S9Rk.roa
Signing time: Wed 02 Mar 2022 18:05:26 +0000
ROA not before: Wed 02 Mar 2022 18:05:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
86.106.80.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.97.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202546447 (0xc129d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 2 18:05:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ef235a1ccab8b0302e610a0a654727b0f12f519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:46:ad:2d:24:44:d0:65:cf:50:80:5f:8d:
a3:08:ff:b0:25:15:e8:b0:a8:f4:4a:46:07:8f:ad:
92:f8:a2:23:9e:2a:13:37:b3:5f:f7:6a:80:bc:ac:
8b:1a:dd:3e:6f:0b:a4:24:7a:5f:bb:a3:34:f8:83:
55:f5:00:15:15:72:51:f6:b6:47:64:8f:b2:39:29:
81:6b:9d:be:78:c4:89:07:b3:f0:cc:c7:ed:94:43:
a7:d7:c2:38:ce:e4:67:3c:2d:f3:49:84:59:bc:9f:
96:19:22:4a:e8:3c:d9:39:8d:d0:7a:37:51:52:c0:
57:9a:94:e8:06:c5:dc:2c:87:aa:28:5f:c0:29:01:
9a:35:8c:e7:7b:36:f6:30:23:d9:2f:7a:be:29:54:
cc:6b:ef:65:1c:05:7c:e2:08:5b:bd:84:2f:26:6e:
66:9b:fb:6b:85:0c:df:8d:88:93:c4:5e:79:f9:56:
4c:e7:58:1b:ab:0b:de:c7:0e:36:f6:2e:5b:46:92:
ab:75:9f:5b:9f:f7:3e:c2:e5:53:f6:d8:53:54:d8:
9a:e5:09:e1:11:2b:11:91:b3:e8:0d:ad:f5:69:65:
aa:57:0d:5e:cf:61:3d:7d:54:fe:9d:23:11:6c:70:
cf:a3:3f:75:e9:23:95:3b:5b:5d:91:d0:3f:94:8a:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:35:A1:CC:AB:8B:03:02:E6:10:A0:A6:54:72:7B:0F:12:F5:19
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LvI1ocyriwMC5hCgplRyew8S9Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.97.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/22
89.43.45.0-89.43.46.255
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/23
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
48:1c:fc:70:7a:8d:bf:61:21:53:a6:20:0e:73:01:a2:5e:53:
e0:14:78:49:00:0f:53:10:01:a4:03:9e:17:2f:08:81:b6:79:
d7:db:c3:b2:53:c3:b5:cc:bd:8b:61:4d:bc:24:f7:3c:b1:03:
bc:17:9b:d2:81:2a:14:95:57:1e:76:ed:9e:20:f3:cd:08:4a:
2e:e2:09:2e:28:5d:b6:98:65:98:d7:2c:39:a0:d0:96:2f:ee:
87:c4:2a:32:3c:de:37:15:b6:14:28:83:45:5e:b8:32:83:96:
3a:6e:d8:79:5b:91:84:98:f9:93:d5:dd:b1:80:e9:e0:e7:26:
ee:7e:c5:ce:ad:cb:10:e5:50:01:de:12:19:89:1e:20:eb:dd:
17:1b:c5:fd:b4:5d:a3:35:41:cc:f6:f5:62:53:54:a8:5a:a7:
78:5c:fd:d1:e9:4f:9d:6e:1d:a5:91:94:3d:90:a7:70:49:b7:
24:17:01:03:ea:4c:00:a7:20:05:67:d0:a5:4d:b6:79:f3:5c:
d9:81:c8:24:68:77:bc:e3:fb:d2:fe:24:8d:55:8b:b4:f9:59:
ec:24:ff:cc:fd:4b:69:e4:c1:94:18:c1:af:81:7c:d7:f1:af:
ba:b3:32:fb:8d:4d:2e:16:e5:1d:2d:24:1f:f6:97:3a:02:4f:
3e:76:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org