Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XtgMHAHT8FMwcLebZ5SfWUUnDg8.roa
File: XtgMHAHT8FMwcLebZ5SfWUUnDg8.roa (raw, json)
Hash identifier: 5nywk9kuOW/j213jFuX9uMAcI+azKxXnZLEfZSs8HYs=
Subject key identifier: 5E:D8:0C:1C:01:D3:F0:53:30:70:B7:9B:67:94:9F:59:45:27:0E:0F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AEF407B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XtgMHAHT8FMwcLebZ5SfWUUnDg8.roa
Signing time: Thu 13 Jan 2022 08:52:43 +0000
ROA not before: Thu 13 Jan 2022 08:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 185.254.29.0/24 maxlen: 24
185.185.232.0/24 maxlen: 24
193.223.104.0/24 maxlen: 24
193.223.105.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
194.62.55.0/24 maxlen: 24
185.243.182.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
193.160.142.0/24 maxlen: 24
93.190.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183451771 (0xaef407b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 13 08:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed80c1c01d3f0533070b79b67949f5945270e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:50:f8:2b:6a:c5:12:8c:ee:25:64:2b:9a:16:
4b:b4:38:99:4d:79:aa:09:dd:5f:b7:68:b9:4d:67:
6c:b5:25:fa:d2:bd:51:64:ee:3a:1f:92:3f:44:ec:
89:4b:20:2e:1a:02:39:ec:46:75:d6:cd:55:a7:72:
73:77:d5:b8:33:e6:4f:a5:43:d0:46:db:42:61:bf:
9d:38:1f:a3:ae:52:c2:a6:dc:18:89:be:68:b7:bf:
47:c7:05:37:78:2a:48:8b:e4:98:5b:5b:7a:3e:da:
d2:bd:89:99:cb:65:5b:c8:47:4d:7f:cf:ab:a5:51:
a5:01:a2:4b:d5:da:51:3d:36:da:61:99:1b:4d:b7:
f4:26:66:1b:16:1b:3d:f4:dc:bd:61:f6:28:d0:bf:
44:6b:8d:36:7b:ac:90:c1:b1:79:20:0d:2e:1a:b3:
dc:23:1f:de:2e:1d:ac:91:63:d7:8d:b6:d3:73:8b:
2d:b8:97:30:e8:1b:91:0c:5f:72:85:df:58:f2:27:
94:72:48:60:19:b9:f8:74:8c:ae:2e:a9:df:01:e0:
0a:3c:d6:ab:ce:91:cf:ba:81:e1:de:09:bf:af:6b:
5c:39:69:08:00:79:3f:3e:e7:d8:55:2f:7a:f7:ae:
04:b5:44:4c:df:01:2b:08:f2:3b:28:58:03:e8:80:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:0C:1C:01:D3:F0:53:30:70:B7:9B:67:94:9F:59:45:27:0E:0F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/XtgMHAHT8FMwcLebZ5SfWUUnDg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.98.61.0/24
185.185.232.0/24
185.243.182.0/24
185.254.29.0/24
193.160.142.0/24
193.223.104.0/23
194.62.53.0/24
194.62.55.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f3:c3:3c:20:62:0c:d0:4e:e2:0e:0a:c8:5a:e8:58:9a:95:
8a:c3:ae:59:03:1b:3e:38:70:30:ca:98:5c:85:56:00:5b:b2:
4b:77:41:aa:ee:69:8b:fa:f3:ad:5e:8c:0f:9c:0a:3e:46:8b:
cc:f2:44:c5:3f:3e:15:e1:e8:77:8c:a2:c0:0e:04:e3:98:11:
e9:f7:f7:22:6f:71:1b:f1:1b:b9:b6:fc:4a:c8:1e:e2:00:bd:
65:fc:52:d0:d5:e8:c1:69:11:00:94:3e:9b:54:c2:74:9f:d0:
7e:bb:68:40:ca:66:0d:07:0f:45:e2:6a:1b:e0:41:19:2a:89:
55:e8:0c:20:68:87:dc:f6:b0:32:90:67:da:81:98:88:30:f7:
47:20:29:d9:e5:4e:e1:82:ff:eb:d5:62:2a:24:8d:4e:8d:cd:
bf:0e:b3:0d:ae:fe:7c:88:7d:fb:ad:9b:30:70:76:f4:1d:1f:
e2:33:cd:8c:d8:b8:b7:e2:4f:04:f1:7c:55:5b:5d:d9:76:f3:
59:89:fc:bd:7a:89:c2:3c:82:c6:a7:c0:1d:16:9a:6f:65:e5:
b2:d0:25:b1:77:53:b7:62:4e:84:7d:45:b8:8f:db:b4:ee:4a:
18:d2:9e:be:18:08:04:2c:a6:47:54:0d:9b:af:5d:d7:13:3b:
c0:b4:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org