Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/xwFJGPTcYdcCp6HECsUuw6NyMDg.roa
File: xwFJGPTcYdcCp6HECsUuw6NyMDg.roa (raw, json)
Hash identifier: cc7K7ZY0Q5VsQdNUjvD7FBUkgjPapufXgSiJeU/TZiU=
Subject key identifier: C7:01:49:18:F4:DC:61:D7:02:A7:A1:C4:0A:C5:2E:C3:A3:72:30:38
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018293D84B63A7FD3D250EACFF8B3777DDE2
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/xwFJGPTcYdcCp6HECsUuw6NyMDg.roa
Signing time: Fri 12 Aug 2022 20:56:41 +0000
ROA not before: Fri 12 Aug 2022 20:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
89.44.209.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.97.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:93:d8:4b:63:a7:fd:3d:25:0e:ac:ff:8b:37:77:dd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Aug 12 20:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7014918f4dc61d702a7a1c40ac52ec3a3723038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:17:2f:94:6d:0d:2b:c2:c0:7d:82:22:12:
79:dc:bf:85:ee:8b:f3:03:8e:74:04:07:f7:6e:4a:
e0:bb:1e:17:19:4c:9e:bf:b5:80:18:f8:43:58:98:
70:a9:ca:ef:f0:b1:18:4f:ba:e0:f4:99:ae:30:eb:
eb:0d:fc:cb:d1:0d:92:ec:60:34:b1:ff:8e:a1:8b:
0f:ea:64:44:d2:ed:d1:9a:3f:18:89:f1:e5:38:0d:
df:6c:fa:36:e1:aa:e8:6e:30:dd:df:f0:a7:29:ef:
04:cc:db:a1:16:ae:24:53:f0:62:03:db:af:6e:6f:
06:92:a7:ee:45:57:ec:34:1e:f3:d7:33:8e:5b:ff:
25:c4:de:99:0f:5c:c1:96:20:03:82:05:36:c3:84:
12:69:c1:78:70:d2:1b:c6:9a:6d:dc:91:40:dc:67:
7e:13:9f:a9:43:ac:3c:89:71:ab:81:41:a1:f4:d3:
ae:5f:1f:bb:50:79:4b:0d:34:e7:2e:4c:88:81:96:
c9:fa:78:d6:ae:0d:57:fa:5f:a3:2d:6c:19:43:14:
2b:c8:63:66:1c:3c:f4:af:3f:9e:d8:ce:ad:02:82:
73:2e:1b:64:6b:d8:a1:f9:b7:07:7c:c0:87:1c:3f:
47:cf:05:ab:22:65:9b:ed:d5:8a:64:76:a1:d1:62:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:49:18:F4:DC:61:D7:02:A7:A1:C4:0A:C5:2E:C3:A3:72:30:38
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/xwFJGPTcYdcCp6HECsUuw6NyMDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.97.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0/24
89.43.43.0-89.43.46.255
89.43.73.0/24
89.44.209.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
95:b1:10:89:1c:62:23:20:8e:74:8f:ee:42:d7:a6:4a:0b:bb:
b2:ca:45:62:f8:ee:4d:05:81:f2:8f:71:15:ca:23:bb:2d:d2:
4a:9d:3d:1f:54:90:bf:e7:cd:e5:25:21:ba:35:c7:65:db:96:
84:e6:3b:e0:ec:17:51:43:b4:37:ce:f3:8e:22:4c:52:d5:38:
b3:f5:4a:3b:fb:ab:aa:fd:27:48:ff:f5:44:16:79:68:13:29:
04:ca:8c:55:8f:55:34:59:d5:f9:a2:b9:52:bb:8e:7b:df:f2:
83:a0:23:10:38:22:25:ad:67:a8:4c:20:1d:bc:55:65:77:3d:
86:c6:2a:69:2a:fc:c1:c9:66:1d:f3:b0:e5:0b:f5:14:6b:17:
df:c8:a1:f6:15:9b:48:25:bb:d5:20:af:81:a7:76:9e:33:73:
b7:f1:a9:eb:d8:59:e2:b5:54:de:c6:5b:0a:70:94:f8:6a:1e:
92:e8:7c:93:86:0f:ad:77:f1:93:61:29:e2:f0:09:7d:3c:9e:
0e:b1:1e:d2:ba:3a:35:27:5a:da:23:75:ba:18:7b:a6:f8:b3:
61:a9:1b:ee:c9:44:16:d3:41:d4:5b:a3:99:21:9d:a8:a8:e2:
0a:20:8a:a0:ab:5d:5e:cc:04:9a:f4:a2:67:33:08:bc:a9:d7:
6b:89:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org