Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/suuPR2gwt9Mb0zZeFzJyZ9XkrRo.roa
File: suuPR2gwt9Mb0zZeFzJyZ9XkrRo.roa (raw, json)
Hash identifier: 8riV3qmR7cl6Rtl1mBvw8tO1rfWlIRr2RORA82fmsHw=
Subject key identifier: B2:EB:8F:47:68:30:B7:D3:1B:D3:36:5E:17:32:72:67:D5:E4:AD:1A
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01839DC443674B44EB426A79C82E11ACEBB0
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/suuPR2gwt9Mb0zZeFzJyZ9XkrRo.roa
Signing time: Mon 03 Oct 2022 12:13:48 +0000
ROA not before: Mon 03 Oct 2022 12:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:c4:43:67:4b:44:eb:42:6a:79:c8:2e:11:ac:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 3 12:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2eb8f476830b7d31bd3365e17327267d5e4ad1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:ee:77:a0:99:1c:b0:54:d4:00:f8:2c:33:
d7:74:34:2b:e4:f1:ae:a1:6d:43:28:5d:b4:6c:f2:
15:f4:ae:02:29:08:e7:51:56:4b:43:7c:09:a5:85:
19:58:6c:97:80:d8:14:e7:fd:1f:d6:2e:80:de:37:
84:2c:a3:4a:7c:e4:b5:66:f3:07:c6:20:34:8f:27:
42:f5:a3:93:0a:0b:9e:be:89:13:35:09:54:92:e5:
62:97:f8:91:c2:00:62:2f:98:a7:ab:22:cd:b7:d4:
f0:86:ab:06:e1:71:10:ce:d8:af:1c:05:2f:4f:e9:
fd:0a:2a:09:b6:80:89:1a:05:29:d5:91:9f:eb:bb:
0d:1f:28:66:25:89:e1:d6:42:e5:45:eb:9a:73:a9:
d8:3f:f8:05:33:3d:a9:57:78:37:1f:6d:14:5f:4c:
d1:c8:f5:b7:84:ca:23:4f:90:0e:c8:af:6a:ac:a2:
de:f0:05:1e:d4:a1:41:3c:11:1d:b7:30:15:32:27:
09:94:f4:ea:98:1a:ee:10:96:d7:0b:e6:d5:b2:a6:
df:86:76:48:e7:44:4f:47:c1:8d:20:f4:b7:8b:05:
aa:71:85:13:53:04:3a:9d:d6:b7:50:d4:c4:74:66:
17:b1:d4:e7:2a:e9:7e:e1:bc:44:c8:e0:54:ce:7f:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EB:8F:47:68:30:B7:D3:1B:D3:36:5E:17:32:72:67:D5:E4:AD:1A
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/suuPR2gwt9Mb0zZeFzJyZ9XkrRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.43.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
25:82:b0:a4:96:1f:65:13:cd:16:de:94:f9:a3:6e:20:9f:f3:
ca:a2:ac:9c:a1:60:35:0b:96:31:ea:ef:08:bc:e9:c1:58:ed:
85:44:b0:de:a7:7d:5a:58:bb:14:11:f9:05:bb:71:5d:aa:26:
23:ff:b7:d6:a6:3b:5c:a7:e9:50:ab:ea:59:51:26:d3:ce:60:
e7:76:b8:ed:bd:a4:59:67:6b:dd:ea:4e:04:06:b0:3d:85:0e:
79:41:28:0b:e6:f3:91:7b:94:a0:6e:69:77:54:02:c3:4a:28:
58:86:fb:70:37:29:1f:6d:4f:2c:59:5c:dc:51:ae:4e:c6:34:
31:46:b2:46:19:d0:e0:0c:50:89:59:d7:12:b5:be:9f:39:4d:
d6:11:71:0f:c8:d2:8f:98:90:29:76:58:f3:29:79:15:b9:f4:
32:19:2c:33:3a:67:fb:4f:36:07:b3:fc:6d:b1:de:5f:d0:d2:
75:e0:7a:9f:ea:81:78:0f:61:da:69:94:8d:22:69:c2:24:50:
f8:63:cf:e5:0a:09:a2:75:79:93:d9:23:e6:cd:20:a2:ca:0e:
da:69:b9:cd:a8:1a:12:c0:2c:7c:c4:5a:85:74:92:bf:fd:2b:
30:06:47:25:29:09:cd:f5:f2:d6:3a:c7:dc:e9:29:c2:04:16:
9c:67:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org