Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/q2gnQflQTJ6LeBbI1tWQ-ThGHgg.roa
File: q2gnQflQTJ6LeBbI1tWQ-ThGHgg.roa (raw, json)
Hash identifier: wC+FL9Yaz7HJibs9MRy+ZFfLWXTew2l7ENGDiIuI1Bs=
Subject key identifier: AB:68:27:41:F9:50:4C:9E:8B:78:16:C8:D6:D5:90:F9:38:46:1E:08
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C105E50
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/q2gnQflQTJ6LeBbI1tWQ-ThGHgg.roa
Signing time: Wed 02 Mar 2022 11:58:20 +0000
ROA not before: Wed 02 Mar 2022 11:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
86.106.80.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.97.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202399312 (0xc105e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Mar 2 11:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab682741f9504c9e8b7816c8d6d590f938461e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:3e:e7:e5:93:d7:b2:bf:0d:ed:d9:55:e7:
fd:2b:1a:cc:03:38:1a:c9:90:e3:89:ad:8e:ec:ef:
c5:84:07:62:a9:08:40:6a:6d:a1:a1:92:90:1d:6f:
47:ab:13:c3:d5:bc:b0:d4:5e:e3:b1:cf:83:f3:3a:
77:aa:fd:7e:61:4d:51:c4:8d:99:7b:ee:b9:a3:36:
36:fc:b2:42:ab:dd:4a:a0:06:7a:0d:8c:c0:8d:f8:
9e:37:e5:8f:c4:29:55:ff:6a:06:14:18:f4:3e:52:
cc:81:de:96:bd:bf:4f:d8:09:e8:a1:91:82:0a:d0:
97:cb:06:81:8f:bb:66:86:22:34:b3:67:44:eb:2e:
e1:cc:38:57:f9:a9:79:15:0c:7b:05:3f:e0:54:78:
d7:c5:fb:66:eb:36:4a:67:95:58:49:b3:91:69:6d:
87:a9:32:a3:34:a3:94:f6:4d:87:23:1b:d9:60:ff:
26:53:45:6e:c5:a0:cf:27:e5:fb:c5:21:ab:bc:d9:
93:8b:09:cb:2f:5d:62:10:13:cd:bf:74:2b:4b:d0:
21:85:9f:31:0d:12:4d:cc:3d:80:96:50:3c:aa:d7:
52:aa:88:e1:4a:de:b2:80:cb:74:22:4e:98:10:aa:
39:d9:13:a5:ef:ab:77:23:5c:93:97:ae:e1:2d:aa:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:27:41:F9:50:4C:9E:8B:78:16:C8:D6:D5:90:F9:38:46:1E:08
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/q2gnQflQTJ6LeBbI1tWQ-ThGHgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.97.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/22
89.43.45.0-89.43.46.255
89.44.209.0/24
93.113.158.0/24
93.113.202.0/23
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7d:f7:f9:86:1e:ba:ae:ac:f0:b5:a1:df:ee:a3:fa:10:84:
e5:8c:3e:41:7f:3b:59:e7:32:8c:e1:7c:9b:91:bc:83:8c:cf:
16:12:f8:f1:9f:e7:08:ba:63:ef:08:d9:79:7a:b1:3e:2d:fb:
fc:0c:ca:ff:40:51:19:59:a0:97:58:24:46:30:f9:26:b6:cb:
1d:e1:d7:bb:dc:16:d2:b3:b4:ae:f5:01:b3:a5:03:d1:a4:bc:
51:92:f2:61:08:00:64:09:16:94:9f:8b:39:2f:02:f6:88:8a:
13:fc:cd:87:77:dc:7a:6b:27:e0:7c:38:65:c3:3a:0b:3c:8d:
38:c4:96:c0:1e:1c:cf:f6:33:0a:c7:2d:7f:38:1b:6b:89:94:
05:f7:34:3a:52:a3:7d:cd:0f:61:44:e2:b1:b3:df:c1:5a:78:
c1:68:c0:21:79:83:c6:ed:67:b9:b4:8b:9a:22:47:ef:90:2c:
b9:28:ec:9d:a9:ea:b8:d7:69:d1:0d:be:96:80:a2:2b:b3:4d:
b1:62:cf:0f:f9:10:39:fd:47:0d:2f:a9:08:50:5b:04:48:73:
c7:96:cd:83:ca:02:2b:3a:df:62:4e:80:8d:b8:66:c7:26:ed:
c8:a8:e7:36:c2:d5:a2:e0:29:44:38:7d:c1:bc:73:a2:15:65:
b4:ca:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org