Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/0q61wJ6rRfQCRVMj9-t0m-WVotE.roa
File: 0q61wJ6rRfQCRVMj9-t0m-WVotE.roa (raw, json)
Hash identifier: ILgyrMO6BRupvWQaCte2flmw4A8isoTv8uhpli/OrSs=
Subject key identifier: D2:AE:B5:C0:9E:AB:45:F4:02:45:53:23:F7:EB:74:9B:E5:95:A2:D1
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 18FFD482
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/0q61wJ6rRfQCRVMj9-t0m-WVotE.roa
Signing time: Sat 01 Jan 2022 10:03:56 +0000
ROA not before: Sat 01 Jan 2022 10:03:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42541
IP address blocks: 89.23.224.0/19 maxlen: 19
185.10.220.0/22 maxlen: 22
193.104.135.0/24 maxlen: 24
193.106.164.0/22 maxlen: 22
2a03:5440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419419266 (0x18ffd482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Jan 1 10:03:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2aeb5c09eab45f402455323f7eb749be595a2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:a8:73:f4:4f:14:82:8c:49:e5:ae:ab:61:
1c:12:cd:0a:73:9e:74:f6:03:8e:68:1a:4d:96:7a:
77:d0:b3:2d:6a:57:a4:10:59:d6:2e:c0:f8:a0:af:
5f:13:03:84:ad:f1:5e:2c:ff:b7:01:44:ba:36:57:
c7:62:26:2a:d2:bb:d9:1b:42:9b:96:10:aa:3c:15:
ae:52:b3:7a:09:24:f4:57:17:76:bf:95:16:06:ad:
a8:df:0b:48:91:34:3c:c8:39:e6:5f:32:46:bb:78:
e4:a3:4f:66:39:0e:57:20:44:3b:85:b9:aa:3e:e4:
00:d4:6d:48:92:8f:53:94:fe:eb:07:05:45:f3:29:
1c:07:27:21:ed:9f:90:a8:39:ae:80:b0:2b:88:47:
5d:71:83:98:be:01:12:0e:4d:7d:69:9a:84:f2:aa:
b8:b5:5e:17:b4:fe:89:12:fe:02:e0:ae:42:6a:64:
f2:94:5a:bf:b4:5c:20:f2:8f:1b:d0:81:43:b4:7b:
54:15:11:8c:98:7b:f9:52:bb:f3:f6:e3:c3:20:c3:
82:8d:28:60:fa:78:40:4d:b8:f8:ef:79:bb:78:1e:
c0:99:78:39:aa:cb:c6:6e:3f:2b:d4:25:99:0a:31:
d9:10:03:05:1b:5c:2c:2b:53:ca:58:44:69:01:60:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:B5:C0:9E:AB:45:F4:02:45:53:23:F7:EB:74:9B:E5:95:A2:D1
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/0q61wJ6rRfQCRVMj9-t0m-WVotE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.224.0/19
185.10.220.0/22
193.104.135.0/24
193.106.164.0/22
IPv6:
2a03:5440::/29
Signature Algorithm: sha256WithRSAEncryption
39:c7:d3:6a:f7:12:c8:b3:cb:51:9e:8f:f7:7a:1e:70:67:f4:
ad:84:aa:cd:77:b3:33:d1:c0:0a:e1:9a:5a:fa:8c:b2:58:ce:
2f:65:24:15:56:3e:ce:cc:59:7b:b5:2d:78:9a:f3:6c:25:46:
78:de:f0:e4:df:c5:91:33:53:b8:c1:02:76:ce:1b:1c:87:f2:
bb:6f:af:78:43:59:9a:81:31:54:11:6c:64:74:80:f8:1f:43:
bc:64:3a:c9:94:7f:22:c2:8f:1b:41:8f:ab:dc:d8:87:a2:fa:
eb:b1:f5:ef:e1:5b:c9:9a:6b:f8:4b:42:ae:82:4a:6d:e9:d3:
f1:40:3b:2d:fd:ba:9e:11:22:e4:94:5d:38:db:68:6f:0f:c8:
4f:31:dc:c9:6b:6e:1f:20:79:af:54:12:ae:1e:05:92:3e:ee:
18:40:32:96:0b:16:60:97:20:ff:37:0f:e7:87:72:c4:47:d1:
83:00:bb:51:b8:b1:ef:f1:6b:ce:bb:ba:67:60:92:61:d5:d1:
85:fc:9c:fa:4c:95:5c:3a:22:02:09:00:a6:72:d0:1d:d2:ef:
32:1c:4b:cc:e5:f6:a6:1b:52:68:84:35:6f:62:39:4a:47:21:
ed:32:ad:14:cd:76:2d:f3:7c:f5:fd:24:b6:9c:c5:7b:cc:9e:
00:73:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:56 2023 by rpki-client on console-fra.rpki-client.org