Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa
File: hPergF5N_gZ4-CP07DW0Bq2omOc.roa (raw, json)
Hash identifier: K5AJblNXjrBZg3pEBBuAaSoF6zHslsNA7t5jb6sINMU=
Subject key identifier: 84:F7:AB:80:5E:4D:FE:06:78:F8:23:F4:EC:35:B4:06:AD:A8:98:E7
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0B3FDC7A
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa
Signing time: Sat 01 Jan 2022 13:04:55 +0000
ROA not before: Sat 01 Jan 2022 13:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31554
IP address blocks: 89.44.214.0/23 maxlen: 23
89.35.160.0/23 maxlen: 23
89.39.110.0/24 maxlen: 24
89.33.248.0/23 maxlen: 23
89.37.156.0/23 maxlen: 23
89.33.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188734586 (0xb3fdc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 13:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84f7ab805e4dfe0678f823f4ec35b406ada898e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:68:b5:70:20:28:2e:24:27:49:ac:2c:78:
44:82:f6:27:37:7b:f0:58:ee:e2:2e:97:c7:1a:e0:
84:02:8e:83:57:e1:2a:dd:bd:62:21:e3:e4:62:6c:
85:80:92:2c:21:7d:7a:f6:5b:3b:08:86:08:f7:31:
19:87:94:cf:5d:31:85:70:cc:81:9c:3a:8a:8c:6b:
cb:44:9d:82:6c:2f:ff:8d:bc:a3:1b:4a:96:10:3c:
14:83:a4:92:46:f1:c1:78:a7:37:6b:52:d0:2f:76:
1f:e0:2a:d5:ef:21:e3:29:9c:aa:51:db:a3:a9:05:
a4:06:bc:b3:2e:e2:7c:3f:96:ba:0b:28:47:c8:91:
16:b2:88:a1:7b:44:f6:55:a5:fe:df:8d:5c:1e:17:
f5:1d:e0:46:25:e7:59:d2:c5:bb:b1:91:bf:f5:a4:
df:16:d6:5e:6a:bf:38:ec:bb:a4:a2:9b:cd:e0:bb:
e9:66:b0:36:f8:95:9a:bd:42:e0:76:fa:d0:75:0b:
6c:83:47:da:b8:9b:4f:d5:ec:79:64:b4:ee:67:07:
7b:56:dd:33:8e:0a:1f:55:e1:b4:89:0e:3f:37:21:
05:64:3d:3f:2a:bc:3a:11:a4:d5:b6:0f:63:b6:9a:
2a:a9:41:c3:0e:03:4d:87:59:80:9e:e6:87:2d:a2:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:AB:80:5E:4D:FE:06:78:F8:23:F4:EC:35:B4:06:AD:A8:98:E7
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hPergF5N_gZ4-CP07DW0Bq2omOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.5.0/24
89.33.248.0/23
89.35.160.0/23
89.37.156.0/23
89.39.110.0/24
89.44.214.0/23
Signature Algorithm: sha256WithRSAEncryption
00:ae:4d:c0:e3:5e:c7:56:6f:3d:d5:79:53:d8:ee:9f:fe:44:
3d:81:c1:28:85:51:6e:2c:8b:1d:6c:ef:eb:8c:87:97:32:75:
40:c0:1e:60:4f:69:04:91:71:3a:fb:df:78:7c:f1:b8:7b:70:
9c:8f:3a:9d:83:6f:eb:3d:a3:5a:04:51:3c:49:86:9a:cd:96:
fa:39:41:16:1d:df:08:be:50:61:31:23:f9:75:52:63:c7:b3:
5a:f0:c7:46:a2:6b:85:11:90:d3:e5:24:df:5f:cc:7f:04:1a:
c1:bd:c8:7e:22:59:88:70:60:72:d2:77:e3:e1:d9:6b:d2:26:
1f:8e:bb:55:5e:f4:26:92:70:ff:75:41:33:8a:2b:67:dc:91:
83:f2:f2:f1:0b:98:68:c0:b6:50:98:aa:23:59:76:b2:92:43:
ba:3c:87:1f:5c:e5:b5:85:40:f9:30:c5:ef:cc:5f:8b:56:2e:
13:5e:21:a4:2b:ee:af:a1:00:a2:2a:45:5d:32:dc:92:47:e6:
4a:cf:70:22:78:90:da:35:1f:a6:91:31:d3:48:ca:74:38:59:
ce:e4:cf:4d:fc:9f:ea:db:9e:f2:f7:5b:c1:48:f2:7c:79:3c:
ea:25:b3:fd:c6:21:45:7a:df:2d:47:96:71:2f:7d:b5:5f:6b:
8f:ee:3a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org