Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hK5zYXbu_EkHSYGZOCMnWTa9GHo.roa
File: hK5zYXbu_EkHSYGZOCMnWTa9GHo.roa (raw, json)
Hash identifier: 9HrFWrUs0cB0HWwK5nV2ybGw0cfFXLqy3/Wg0ZQQl7U=
Subject key identifier: 84:AE:73:61:76:EE:FC:49:07:49:81:99:38:23:27:59:36:BD:18:7A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C14737D
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hK5zYXbu_EkHSYGZOCMnWTa9GHo.roa
Signing time: Thu 03 Mar 2022 17:22:47 +0000
ROA not before: Thu 03 Mar 2022 17:22:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202666877 (0xc14737d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 3 17:22:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84ae736176eefc49074981993823275936bd187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:e5:c5:40:a0:84:03:d0:6c:7c:f2:03:50:
9e:7e:52:e3:ee:65:ce:b5:cf:33:1e:7a:81:b0:b0:
45:e8:a6:04:7d:63:f2:7a:b5:c3:06:56:fc:cd:47:
2d:3d:29:3f:69:e4:92:e6:9c:0d:18:f2:31:ac:04:
5c:e2:51:06:16:ca:f7:de:6a:77:7d:fd:5d:f8:b4:
4d:53:a1:99:c6:58:59:f3:35:d0:bb:1d:ab:3c:c2:
71:b2:07:e8:be:76:00:f0:8c:e2:66:93:10:5d:6e:
b5:1f:1f:e5:3e:ff:f1:a1:46:2f:f1:76:bb:5e:d1:
12:2e:3b:a1:c3:b0:ba:17:1b:49:db:bb:5e:f4:37:
30:c6:2e:1a:02:55:ef:87:64:01:e9:16:57:53:03:
b9:f9:0f:84:46:e8:d0:70:b9:ce:93:c6:61:43:23:
71:be:a1:5e:7d:32:eb:18:9d:72:e0:82:37:e8:5b:
a0:27:b9:15:f5:c2:7c:0d:fc:10:0a:3a:91:53:8e:
b3:38:d5:c9:73:f8:f4:d9:06:52:57:4f:f3:a7:01:
8f:9c:5f:3f:6d:cc:4f:a2:13:07:7e:ba:aa:15:7d:
fa:f4:49:88:d3:06:38:0e:3c:27:51:65:e4:a3:5b:
81:19:c5:de:e8:c4:04:01:ac:10:1e:0d:db:b8:ae:
c7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:73:61:76:EE:FC:49:07:49:81:99:38:23:27:59:36:BD:18:7A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hK5zYXbu_EkHSYGZOCMnWTa9GHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
89.43.73.0/24
93.113.203.0/24
188.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
73:71:62:6f:f9:ba:a7:0b:52:13:58:4c:5e:e3:bf:5f:5a:56:
03:12:65:a5:22:87:2b:0f:3f:fe:da:13:62:3f:56:5c:bb:be:
c6:88:df:e6:99:7d:2a:91:47:73:a6:4d:91:f4:48:ba:e7:74:
65:09:04:17:79:22:db:70:d0:36:e0:87:f6:83:af:a1:62:f7:
ef:53:af:cc:e2:32:d6:5a:f8:2c:ab:2d:8d:6a:36:1f:fe:4f:
f2:c2:41:9b:07:86:01:89:f0:80:c6:4c:95:88:45:9f:22:d7:
22:3f:50:eb:0e:ea:ce:26:86:a5:08:f4:25:73:60:98:20:47:
91:1f:04:7a:2c:61:8d:d2:48:d9:bd:99:81:a7:d3:cf:f6:2d:
4e:2d:bf:18:4b:b0:9b:c2:1a:51:af:2e:a9:7a:69:37:dd:6b:
72:6a:82:fc:3e:2d:19:01:1e:db:a7:63:15:f5:33:46:1a:8e:
e2:3d:60:15:e7:40:e7:b0:29:68:0d:e2:2b:b7:84:90:c5:92:
93:1e:f8:c8:96:6d:7a:44:8f:6b:43:33:d9:aa:9e:15:ef:f8:
82:8f:87:3a:34:b0:c8:74:7e:26:57:65:21:4f:1f:a7:5b:cd:
26:8a:bc:db:11:ef:9b:fc:63:56:a9:f3:c8:4e:d8:80:80:27:
8f:68:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org