Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_voRlIjdZwhvy1EIxeK-b8oXps0.roa
File: _voRlIjdZwhvy1EIxeK-b8oXps0.roa (raw, json)
Hash identifier: cqNGTNZYBQ5q8VqSmn0xAAYV1Mq1CuRjgS8F6RuTf7c=
Subject key identifier: FE:FA:11:94:88:DD:67:08:6F:CB:51:08:C5:E2:BE:6F:CA:17:A6:CD
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 018200D44EBD7DC4C7402F6D06D3B302DFE3
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_voRlIjdZwhvy1EIxeK-b8oXps0.roa
Signing time: Fri 15 Jul 2022 07:48:09 +0000
ROA not before: Fri 15 Jul 2022 07:48:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34354
IP address blocks: 89.221.120.0/24 maxlen: 24
89.221.120.0/23 maxlen: 23
89.221.122.0/23 maxlen: 23
89.221.124.0/23 maxlen: 23
89.221.126.0/23 maxlen: 23
89.221.112.0/23 maxlen: 23
89.221.114.0/23 maxlen: 23
89.221.116.0/23 maxlen: 23
89.221.118.0/23 maxlen: 23
85.158.72.0/23 maxlen: 23
85.158.74.0/23 maxlen: 23
85.158.76.0/23 maxlen: 23
85.158.78.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:d4:4e:bd:7d:c4:c7:40:2f:6d:06:d3:b3:02:df:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jul 15 07:48:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fefa119488dd67086fcb5108c5e2be6fca17a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:07:2f:0e:82:e3:f2:0f:a9:86:61:90:b7:
8a:e0:43:21:99:4d:7f:6d:1e:0b:05:04:2a:d9:2c:
fb:b5:11:74:b4:0b:a4:2f:3c:04:97:a7:4b:ad:1a:
8b:21:67:92:fa:63:5e:f9:54:cb:b0:03:39:b6:04:
1a:c0:d5:02:f1:30:14:15:74:b0:d0:8e:af:81:1e:
b4:82:e0:e6:fc:82:95:f0:8e:39:af:98:f0:2d:4c:
c0:14:fe:2c:22:a3:e2:4d:e3:0f:42:41:8f:ed:66:
4f:59:a5:66:00:78:0b:c8:b9:36:c3:f8:b1:7c:ff:
73:cc:74:72:65:40:e8:28:7e:08:f3:3f:b6:b7:cf:
9e:a5:1d:49:ee:69:93:71:3b:90:31:81:a6:a5:94:
08:6e:2b:2a:a0:ec:87:8c:37:b5:fd:3a:87:d1:6d:
bb:49:35:c6:3f:89:8b:e7:b9:6f:13:62:b5:35:13:
87:c6:54:ae:95:37:d8:78:3b:13:1f:77:02:f7:69:
55:9b:e5:11:b9:a2:a5:27:4e:25:15:22:90:ad:46:
25:e6:95:ff:e0:c1:53:c8:d9:4d:b9:8a:f9:56:3a:
6e:67:3d:52:54:7b:ae:e8:05:3a:08:08:0a:c1:3b:
fa:88:c2:26:bb:84:26:e7:84:49:90:d4:34:18:98:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:11:94:88:DD:67:08:6F:CB:51:08:C5:E2:BE:6F:CA:17:A6:CD
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/_voRlIjdZwhvy1EIxeK-b8oXps0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.72.0/21
89.221.112.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:44:02:f8:88:ea:69:46:3a:58:e0:21:d8:e9:95:46:48:fc:
9b:de:bc:bb:2c:49:7d:2c:ea:43:ed:0c:ec:7a:a6:d6:02:62:
1b:ed:8c:da:6e:b3:59:82:f8:a3:b4:1b:dc:7a:78:d2:86:c9:
7e:cf:d5:0e:2c:12:fa:67:6f:b9:a1:3e:ca:a4:72:d4:69:ef:
38:f0:be:56:7d:1e:ae:e4:5d:38:34:07:00:60:27:9f:43:b0:
88:25:15:5b:e6:8d:09:b3:26:58:44:ca:2a:c4:b5:d0:bd:fc:
e9:f0:51:a2:45:74:c0:4b:93:6f:f5:cd:73:14:b9:c7:02:d2:
ad:4b:58:b9:16:13:b9:04:c6:77:46:39:c6:7d:96:75:78:94:
a3:5b:4f:94:27:6e:df:92:72:c3:4d:3d:a9:f8:e8:47:1a:04:
76:cd:0e:94:69:5b:6a:8b:56:14:4c:cc:ef:52:00:75:a6:5e:
ac:87:09:f0:12:72:8e:02:7c:c5:70:d1:3f:23:f9:21:00:4f:
cf:07:97:86:0d:b7:0b:6a:9c:c2:49:99:95:51:e5:d9:ae:7a:
4c:3d:dd:33:3b:79:9d:3b:f6:1b:97:43:e2:2f:44:bb:bd:d4:
32:7a:bc:76:05:1a:99:2b:ea:77:24:bd:ee:d9:6d:3c:37:7f:
81:2c:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:04 2023 by rpki-client on console-fra.rpki-client.org