Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XBNdBjHyAhOC7BDUE2FtdyJx81c.roa
File: XBNdBjHyAhOC7BDUE2FtdyJx81c.roa (raw, json)
Hash identifier: fdXHXePH89S/L4m5KZBUAg9WmsuxSds5N99Wz4ObxH8=
Subject key identifier: 5C:13:5D:06:31:F2:02:13:82:EC:10:D4:13:61:6D:77:22:71:F3:57
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0570A8FA
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XBNdBjHyAhOC7BDUE2FtdyJx81c.roa
Signing time: Mon 28 Mar 2022 05:45:02 +0000
ROA not before: Mon 28 Mar 2022 05:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212461
IP address blocks: 193.37.69.0/24 maxlen: 24
194.113.235.0/24 maxlen: 24
87.251.68.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.85.0/24 maxlen: 24
87.251.84.0/24 maxlen: 24
87.251.87.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
80.66.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91269370 (0x570a8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 28 05:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c135d0631f2021382ec10d413616d772271f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3f:20:9b:33:46:51:64:38:47:c4:d9:75:89:
17:43:33:7a:94:1b:47:a2:0d:2d:d1:d5:18:22:60:
4c:b2:4b:d8:fb:b0:58:88:d7:40:37:33:73:c9:be:
51:97:96:5c:bb:b4:6e:16:ed:02:41:71:44:73:10:
0b:3e:74:dc:00:7e:50:fd:b3:3e:05:d3:d0:61:9b:
58:bb:66:ee:1e:f9:1a:5f:b3:8a:51:d1:ae:b6:76:
5a:5a:f7:1b:aa:14:cf:8a:97:6a:ba:cd:15:a6:af:
87:96:46:19:e8:de:25:16:08:6e:22:2f:81:08:73:
fe:27:16:0d:5b:05:02:41:df:29:cc:b5:c0:c2:08:
03:59:14:0e:41:14:a2:2a:7a:de:5e:d6:e2:cd:c1:
aa:4a:8f:4c:ba:0e:4d:61:a1:75:c3:4f:af:03:58:
f4:9c:4f:8a:89:1a:20:3d:42:7b:14:e9:9d:20:4d:
b2:d5:f9:c5:7d:91:b2:a7:fb:d0:ef:d3:37:43:7a:
34:3e:2a:63:4e:d2:1f:bb:5d:a4:95:a3:6f:10:8b:
67:22:ca:7e:3f:8e:bb:a6:25:15:be:13:d7:a0:d9:
b3:7b:60:ab:f3:67:dc:09:c5:0f:96:bb:ab:1c:4f:
be:ef:91:ec:3c:f8:04:eb:03:19:52:5f:e7:6d:ba:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:13:5D:06:31:F2:02:13:82:EC:10:D4:13:61:6D:77:22:71:F3:57
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/XBNdBjHyAhOC7BDUE2FtdyJx81c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.78.0/24
87.251.68.0/24
87.251.78.0/24
87.251.84.0/22
193.37.69.0/24
194.113.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c8:61:75:35:d2:26:b2:5f:8b:90:b1:08:20:9e:97:36:81:
c1:56:62:8a:05:c1:0f:18:42:d0:48:45:d4:49:6b:5e:5f:96:
3b:a0:91:36:a7:fb:58:3a:7e:8d:9f:5a:8f:49:45:43:f6:47:
6c:e3:fc:07:97:96:37:36:5b:e3:04:d9:88:63:bf:22:65:20:
6e:30:e1:b2:34:0b:f4:a5:30:48:ed:1b:54:7a:05:4d:01:32:
38:34:ca:c1:c2:0e:a4:09:2d:42:86:c1:e3:81:42:40:d7:7d:
dc:bf:79:c3:9e:5a:58:6f:03:81:64:d8:a2:f4:9e:5f:a8:5e:
d3:a0:41:9e:05:87:9c:03:6b:0f:8e:e1:7c:5b:32:ac:21:d1:
c5:6e:bc:c5:50:28:40:8b:99:cc:ec:c0:8d:80:33:64:d4:6a:
b0:2a:26:2a:1a:89:e0:16:74:58:11:da:c1:9e:ff:4d:63:a0:
95:18:36:f0:3e:53:05:8b:5f:17:c4:2f:b8:fc:90:db:44:d0:
86:d1:cb:28:f4:7d:37:52:65:c1:e4:1a:d2:4c:c4:63:ee:27:
6e:10:c7:2f:0a:97:08:f8:38:30:a7:75:31:1e:32:fd:dd:ad:
92:d1:7a:bb:f0:40:78:66:44:38:5c:c6:47:fe:0e:cb:e7:7d:
02:61:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org