Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XFE-wYIfydSLlTzGuM1FkPQt5JQ.roa
File: XFE-wYIfydSLlTzGuM1FkPQt5JQ.roa (raw, json)
Hash identifier: OLUwj0GcKaX8DkpPJ1a8vqH/3XzKkiqF3aoXsWW+HmI=
Subject key identifier: 5C:51:3E:C1:82:1F:C9:D4:8B:95:3C:C6:B8:CD:45:90:F4:2D:E4:94
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184BE3256FE3750958371BE249EDFB4C2A5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XFE-wYIfydSLlTzGuM1FkPQt5JQ.roa
Signing time: Mon 28 Nov 2022 12:24:40 +0000
ROA not before: Mon 28 Nov 2022 12:24:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:32:56:fe:37:50:95:83:71:be:24:9e:df:b4:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 28 12:24:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c513ec1821fc9d48b953cc6b8cd4590f42de494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:dd:9b:c8:6f:9f:3d:39:5d:81:37:1d:9e:
cf:cf:cd:a3:2e:97:f8:5d:e3:d9:ce:0d:91:ae:81:
83:f8:ed:78:21:ac:28:18:fa:d7:fe:93:62:27:1f:
e5:ef:b7:8e:cb:9e:4a:cb:af:7c:af:d6:56:bc:7c:
00:df:21:94:3e:4e:8e:85:50:a1:45:a9:bc:ca:8b:
9a:ba:e0:b8:a5:9d:31:33:a4:fa:83:b1:2b:f1:3f:
8e:44:38:c8:be:35:97:82:62:32:39:0e:2a:c8:8d:
89:9e:da:57:53:d9:5d:03:c0:a4:2c:a0:bf:81:94:
c4:b6:16:d8:8b:38:3e:12:e2:01:08:5f:dd:60:99:
07:c0:ea:4f:75:f1:03:41:87:8a:41:0a:8e:0a:1b:
f9:ee:59:4f:ce:c9:9d:a4:e2:35:21:93:6d:f2:8a:
4b:b2:55:da:ec:b6:1c:c3:6d:c8:62:c4:ab:ea:05:
e3:06:d1:52:6c:8f:0d:3d:85:04:85:02:00:98:f1:
32:a6:2f:d4:2d:5d:83:21:74:f3:d8:8e:17:99:5a:
c5:24:2f:9a:44:34:0e:5e:01:78:e5:32:23:07:f3:
be:da:3d:39:69:5c:1d:3f:d7:7c:31:25:8a:b7:cc:
1d:fe:97:6b:0c:0f:25:2f:5f:89:04:ac:da:55:df:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:3E:C1:82:1F:C9:D4:8B:95:3C:C6:B8:CD:45:90:F4:2D:E4:94
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XFE-wYIfydSLlTzGuM1FkPQt5JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.32.0/24
109.121.35.0/24
109.121.40.0/24
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
68:02:75:1e:ed:df:af:a9:b4:3d:76:ca:39:26:c5:47:09:39:
0a:dc:3c:23:e7:df:20:91:c7:a3:fb:00:1c:f8:3a:a4:13:b9:
24:56:50:59:65:b4:f9:c6:d5:45:1b:67:ec:1c:2a:4a:9e:d2:
9f:0b:47:fe:83:f8:c3:a8:1a:81:3f:a4:4a:d2:22:a1:51:a2:
eb:a1:90:c0:0b:8b:6e:fa:a7:9a:0e:bb:35:4f:e0:c7:10:b8:
49:12:f5:d6:c5:61:d0:67:8b:f1:8c:d1:eb:27:86:2f:67:90:
aa:79:64:68:c7:1a:cf:d1:f5:e1:2e:b1:d0:b6:97:d8:51:b1:
35:16:63:bf:96:ff:20:06:31:4e:27:f0:9e:d4:32:f2:e9:81:
fe:4f:66:1d:61:4c:07:35:cf:19:22:9d:6f:fd:f5:8f:d1:1b:
68:65:a2:5e:de:f7:d3:3a:ef:92:aa:94:c1:9e:81:44:bc:3f:
f9:15:ab:c5:5d:eb:88:6d:36:65:68:d3:7a:60:a8:a5:e5:cd:
3a:37:2d:5a:33:84:4f:8d:db:28:e8:f0:87:ca:1f:82:14:39:
cb:dc:7c:1e:14:2a:41:ef:3b:2d:bf:c8:4c:45:94:9b:ee:80:
e3:2f:89:43:72:8e:8f:ee:ba:3f:a3:9e:da:ec:22:73:ea:56:
5b:04:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org