Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/t1UNX9GzH86Pq5hh2GYKfSvaPHg.roa
File: t1UNX9GzH86Pq5hh2GYKfSvaPHg.roa (raw, json)
Hash identifier: +IvUqzaRCmYhTE2rOANRrOSv9YHRshKQ82Zhz83AZqU=
Subject key identifier: B7:55:0D:5F:D1:B3:1F:CE:8F:AB:98:61:D8:66:0A:7D:2B:DA:3C:78
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 045ECF40
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/t1UNX9GzH86Pq5hh2GYKfSvaPHg.roa
Signing time: Wed 25 May 2022 08:45:36 +0000
ROA not before: Wed 25 May 2022 08:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5606
IP address blocks: 89.33.236.0/23 maxlen: 23
185.171.186.0/24 maxlen: 24
93.119.152.0/24 maxlen: 24
93.119.153.0/24 maxlen: 24
89.40.16.0/24 maxlen: 24
89.40.17.0/24 maxlen: 24
188.214.105.0/24 maxlen: 24
89.40.19.0/24 maxlen: 24
89.40.18.0/24 maxlen: 24
89.46.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73322304 (0x45ecf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: May 25 08:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7550d5fd1b31fce8fab9861d8660a7d2bda3c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:e3:e4:a3:ee:01:62:38:1c:c8:1b:55:68:
c6:32:95:f1:9f:d1:b1:49:90:50:84:8d:96:65:be:
a8:79:10:76:27:2c:27:8a:40:27:f4:db:fa:5c:75:
8b:af:3a:64:0c:41:d7:16:39:75:36:64:5b:d3:49:
11:dc:cd:53:1c:54:3a:b3:09:5d:48:97:fd:a6:5b:
68:a9:8d:d0:7a:c7:54:cf:d1:f4:44:64:ee:a7:68:
24:08:77:27:07:49:1d:79:2f:e5:30:74:30:91:ac:
0c:c4:b8:fd:56:37:d2:4a:82:6f:c0:46:7b:e8:9b:
09:b1:9e:2f:41:57:83:96:37:5a:81:b9:7a:77:9a:
b9:bc:19:a8:4d:70:0b:14:7a:4d:6e:b2:03:e8:eb:
35:d1:20:09:52:df:6d:4d:ce:00:a3:ca:67:ba:a8:
84:1b:31:8e:7e:0d:e5:3e:b9:d7:bf:0d:ae:64:1a:
2d:aa:b9:13:38:73:f4:9e:f9:9e:c1:ec:79:c8:a1:
5f:53:cd:8b:b1:a4:93:1a:cf:28:e7:0a:b1:4d:73:
97:8d:95:db:cb:83:49:a2:ea:b0:a3:4c:f8:94:98:
9b:95:eb:3d:1f:c4:2d:6b:91:ae:97:79:c4:c5:2c:
ed:19:c2:76:f0:d2:8b:84:07:66:e0:bf:0c:c4:10:
3c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:0D:5F:D1:B3:1F:CE:8F:AB:98:61:D8:66:0A:7D:2B:DA:3C:78
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/t1UNX9GzH86Pq5hh2GYKfSvaPHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.236.0/23
89.40.16.0/22
89.46.6.0/24
93.119.152.0/23
185.171.186.0/24
188.214.105.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9c:a5:f7:73:5d:0e:60:d1:fd:ee:14:47:9b:fe:ec:9a:8b:
0f:82:de:5d:8f:6f:2d:e3:e9:cc:57:b3:f3:d7:d6:70:a5:ec:
fa:0e:22:e1:eb:fb:c8:08:1d:f0:e2:ac:39:23:5b:ed:df:17:
c2:42:ef:ea:e7:2e:7d:a4:7a:16:86:22:1a:d2:2d:ca:41:66:
83:34:7a:6e:78:a6:08:39:1f:a4:7f:8e:3b:d7:ec:7a:5a:89:
d4:b4:4c:87:e4:3c:f0:e7:b4:62:da:97:2e:77:ea:34:00:99:
d6:f6:5a:1c:34:ff:a4:71:d4:5b:a6:b0:c6:77:75:61:a0:bc:
5a:28:5f:cb:f7:09:45:b8:0b:53:b3:24:7a:35:61:57:58:df:
a6:d7:c5:d1:f2:92:93:68:51:42:41:39:49:40:06:f2:9a:74:
80:ec:f0:1c:c3:47:a7:77:bc:55:b1:74:fd:08:42:d7:f1:ed:
24:54:a6:fb:0a:e6:f4:43:6d:37:b2:27:1e:e6:1a:29:5a:7c:
f5:8c:d6:05:a6:8f:dc:88:8c:a3:a4:aa:84:f5:dd:fc:cc:e2:
01:a5:bd:2b:6e:ff:fb:ad:07:80:46:92:0c:bc:0a:2f:32:8e:
c3:b2:ab:3a:2f:99:08:03:40:b5:d7:7d:14:a4:eb:2e:ef:89:
0e:f4:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org