Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jBSLfG9j5LaJvlZBItrk6fQjrM0.roa
File: jBSLfG9j5LaJvlZBItrk6fQjrM0.roa (raw, json)
Hash identifier: zXDj8d+Fy9Wv2FdOXfnazriRFZCS8gGNV9yiHq2H3ZA=
Subject key identifier: 8C:14:8B:7C:6F:63:E4:B6:89:BE:56:41:22:DA:E4:E9:F4:23:AC:CD
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0185153B6A6FA49F2C5DFEDB5B0878336F8F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jBSLfG9j5LaJvlZBItrk6fQjrM0.roa
Signing time: Thu 15 Dec 2022 10:01:33 +0000
ROA not before: Thu 15 Dec 2022 10:01:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:3b:6a:6f:a4:9f:2c:5d:fe:db:5b:08:78:33:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Dec 15 10:01:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c148b7c6f63e4b689be564122dae4e9f423accd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:dd:a8:79:31:06:d4:8e:f0:86:c1:05:5c:
14:f6:dc:6b:c4:b5:c5:ac:68:79:c9:5d:2f:8b:4b:
aa:df:d2:c3:13:54:65:e3:73:0d:ae:f2:45:ab:40:
4f:08:0d:c7:35:5b:ed:61:1d:38:5b:a3:b3:fe:bb:
92:4a:52:1d:27:f8:cb:cd:36:38:a3:f9:5c:3d:b0:
05:82:a3:5b:34:0d:80:c0:78:61:07:ca:42:89:cd:
61:ea:26:ff:94:bd:0a:2a:b8:8d:7f:ce:f3:3f:c6:
5a:d3:3d:b1:d9:2b:06:df:40:6f:b1:60:0b:29:b8:
36:17:5b:14:8d:d3:28:7b:7d:82:99:c9:fa:b7:37:
ff:80:d3:16:e7:c6:37:25:3c:24:d9:95:25:1b:32:
47:44:15:ae:06:c2:5c:ac:55:41:5e:8a:44:03:1c:
12:f6:24:c9:59:30:4e:41:98:c0:45:e9:41:51:6a:
e1:d2:14:2e:01:33:bb:73:ea:ef:64:27:e9:b8:71:
d0:96:0c:c2:44:bb:11:bb:5d:d8:e8:17:4a:b0:82:
72:5c:62:c8:ac:ea:c7:2c:70:3e:6d:e5:45:8d:af:
c3:91:94:24:59:c1:0e:8d:68:9a:47:9b:96:34:a3:
28:49:dd:94:c6:80:8f:80:ac:f4:d1:45:32:9c:8e:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:14:8B:7C:6F:63:E4:B6:89:BE:56:41:22:DA:E4:E9:F4:23:AC:CD
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/jBSLfG9j5LaJvlZBItrk6fQjrM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0-89.43.46.255
89.43.73.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:24:bc:59:80:fd:45:29:cd:64:5d:42:ed:a3:8f:1f:c2:f8:
d1:e3:89:56:ff:ab:88:db:90:66:20:12:b6:c3:98:9a:46:53:
57:ad:05:fb:e8:4b:ef:92:42:29:fa:5c:87:39:e6:7a:69:8a:
dd:fc:f1:34:38:f4:13:f2:23:6d:80:ee:68:c2:b9:15:91:b5:
5c:08:07:13:d2:86:46:63:cb:86:a1:b0:c5:c0:4d:10:7a:5b:
ba:59:26:48:bb:09:43:bd:10:1f:e8:38:fd:9f:da:92:0a:53:
29:94:57:ca:46:7e:a8:4a:77:9e:22:bd:8f:5f:e6:ba:58:6c:
8c:53:2b:55:52:a6:8c:31:01:85:58:cf:f1:73:02:11:fe:22:
86:bc:66:8d:b8:ac:14:65:5d:15:fb:b5:30:30:60:22:fd:07:
5d:34:d8:28:b1:8a:1a:d6:cd:17:02:25:bf:4f:35:a4:71:a5:
84:4b:a5:25:5f:ce:7b:2d:68:14:87:6d:44:ab:c0:83:e2:89:
3f:28:22:f9:4d:18:6b:10:99:d7:b1:55:ec:c8:6c:97:bc:84:
9b:91:ea:79:e6:40:07:58:72:40:c8:c5:3e:8e:f9:0b:b0:e8:
3e:ff:12:b0:ef:19:4f:4a:3c:b9:e6:ae:69:f3:f8:fd:af:d7:
c1:70:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org