Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hXXX4OI43qHsgUjK-FszXO0fvqs.roa
File: hXXX4OI43qHsgUjK-FszXO0fvqs.roa (raw, json)
Hash identifier: CgKPmhp22K6GjT/A1uAJ8y5rRVDKNRbfEwgPIfuOdxg=
Subject key identifier: 85:75:D7:E0:E2:38:DE:A1:EC:81:48:CA:F8:5B:33:5C:ED:1F:BE:AB
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018341260C7469516630CE6159B9675CE098
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hXXX4OI43qHsgUjK-FszXO0fvqs.roa
Signing time: Thu 15 Sep 2022 12:35:56 +0000
ROA not before: Thu 15 Sep 2022 12:35:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:26:0c:74:69:51:66:30:ce:61:59:b9:67:5c:e0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Sep 15 12:35:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8575d7e0e238dea1ec8148caf85b335ced1fbeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:5b:14:24:b9:3f:55:b8:a1:fa:3b:a9:19:
50:bb:b5:06:86:a9:0a:cb:db:2f:0c:c8:34:e6:69:
0d:cb:a2:96:6c:f1:7b:8a:e3:17:82:0d:2a:c3:1d:
26:fe:c9:e3:86:05:13:53:67:ec:e6:86:c3:9c:ab:
f5:46:23:7b:69:0d:37:a4:17:85:5c:6f:69:cb:76:
d8:07:7b:dd:c2:87:ae:8f:a7:76:ce:d4:9f:9b:55:
aa:d7:9e:be:40:fb:75:1e:91:05:36:12:75:7b:4f:
fb:1d:55:02:14:36:62:64:93:88:8b:9a:c3:64:35:
2b:9c:01:09:a6:80:0a:61:84:11:ca:a8:40:2c:d5:
21:9b:e3:8d:a5:9b:5f:76:8a:3e:d6:e7:bb:02:94:
cd:1b:c8:d7:af:d4:6e:41:8b:37:15:ce:08:45:70:
aa:d3:05:c5:ca:b4:1c:ff:f9:1c:01:ea:52:68:97:
a4:82:ad:c7:de:77:6e:5c:7e:f7:ac:20:74:04:7d:
45:82:0c:33:cb:1c:1e:24:3a:0f:ac:8f:9a:b7:3a:
cb:bc:58:cb:08:f1:e5:12:0c:4d:e5:c8:6a:b1:39:
1c:20:f4:20:f4:98:9f:31:1a:1c:fe:e4:ad:c1:96:
8e:8f:37:c6:89:44:54:68:0b:7a:3d:ca:b3:1f:23:
9b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:D7:E0:E2:38:DE:A1:EC:81:48:CA:F8:5B:33:5C:ED:1F:BE:AB
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/hXXX4OI43qHsgUjK-FszXO0fvqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.43.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
26:4c:2d:ed:0b:00:75:bb:8d:21:1a:36:c3:3b:00:d4:11:1e:
42:2a:12:33:24:40:0a:1a:ab:28:ae:92:3a:a5:7b:b9:d6:10:
13:16:63:f3:55:d9:70:b2:f9:26:e1:70:80:61:ff:48:40:3c:
b4:0a:e0:96:78:1b:83:20:84:dd:26:87:ee:4a:d2:f9:c1:6c:
64:c7:cd:84:c1:19:e8:f1:92:31:76:64:c4:1e:04:c8:ea:27:
3f:d7:e5:0a:f4:4d:cc:f8:0c:0a:a5:8e:b8:6b:62:3d:5c:aa:
0f:1e:49:60:c7:ce:7f:e9:0d:8f:f0:f4:26:5d:3a:b3:ce:c5:
46:03:25:0f:f2:6d:05:e7:a1:07:71:0a:ad:02:8e:36:2a:12:
28:d5:36:68:7c:45:3b:d0:74:af:9d:e9:34:57:10:50:4b:17:
e0:f5:f2:7b:fa:61:08:28:54:f7:a7:a1:2c:ac:0a:93:a7:d9:
fa:19:d8:80:9f:80:44:24:9b:7f:00:f6:76:79:e6:0e:1d:3a:
10:17:a7:93:5f:bd:98:28:9e:6f:61:9f:56:32:27:26:60:bd:
3b:94:a6:f0:8c:9c:3a:37:30:6c:cc:d4:9c:4d:f9:f1:44:66:
46:0d:56:67:8e:2c:a2:8f:73:fb:29:16:3a:94:84:0f:ae:84:
88:55:63:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:38 2024 by rpki-client on console-ams.rpki-client.org