Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XtNTc6tEZ4BSdWrEXXSean-_1yg.roa
File: XtNTc6tEZ4BSdWrEXXSean-_1yg.roa (raw, json)
Hash identifier: pfzTsnb4jfmKxIVQ6BZssB1k4iLc5OpthnmTqXt0xVI=
Subject key identifier: 5E:D3:53:73:AB:44:67:80:52:75:6A:C4:5D:74:9E:6A:7F:BF:D7:28
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 01852CD45FDB655541BB26611123F6F1D169
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XtNTc6tEZ4BSdWrEXXSean-_1yg.roa
Signing time: Mon 19 Dec 2022 23:59:53 +0000
ROA not before: Mon 19 Dec 2022 23:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205262
IP address blocks: 89.40.74.0/24 maxlen: 24
37.122.216.0/22 maxlen: 24
185.84.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2c:d4:5f:db:65:55:41:bb:26:61:11:23:f6:f1:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Dec 19 23:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed35373ab44678052756ac45d749e6a7fbfd728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:98:45:c0:d7:80:7a:5e:d9:c9:27:34:2e:
59:05:4f:27:e6:5e:9e:c0:5f:31:30:89:48:57:6d:
29:82:a2:fa:4b:fc:81:6b:99:ef:b1:1b:1a:08:b8:
9d:41:5e:b1:0e:01:4f:22:cb:07:18:f1:96:37:11:
41:e7:fc:b7:41:6c:38:d4:0b:22:12:8b:51:6c:97:
2b:d6:4b:3e:22:c6:cb:52:b1:27:dd:14:9d:bb:b9:
c2:3e:45:5a:46:ba:3d:5b:c8:ad:ed:37:22:dc:94:
44:ec:ee:58:dd:bd:49:71:47:a6:fc:af:8c:a7:15:
a1:21:67:17:fc:69:6f:1d:a5:cc:1e:84:59:6a:a0:
db:82:8f:bd:a5:8c:8a:81:8a:39:a2:82:17:ae:fb:
5f:61:c9:05:6e:6d:c6:25:e9:a7:e3:84:1f:e4:94:
b0:86:62:76:12:10:54:97:a7:fa:66:8e:ec:23:48:
d2:fc:1f:af:9f:cc:f2:5f:ca:2b:1b:e4:66:3c:f9:
3d:98:35:eb:f3:3a:42:15:02:c1:a0:59:27:8b:a5:
ad:05:ed:1c:57:cd:f6:ea:61:28:88:2a:4f:4f:f4:
9d:1c:d3:32:7c:50:8a:31:35:90:61:07:9f:26:1f:
ab:d2:f2:ee:16:93:2a:8a:ee:11:4a:b5:b8:c9:73:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:53:73:AB:44:67:80:52:75:6A:C4:5D:74:9E:6A:7F:BF:D7:28
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/XtNTc6tEZ4BSdWrEXXSean-_1yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.216.0/22
89.40.74.0/24
185.84.204.0/22
Signature Algorithm: sha256WithRSAEncryption
82:5c:ff:c0:49:a7:52:3a:5c:d6:b4:e0:5b:c3:9c:88:a0:03:
c9:1a:8a:b2:36:cc:88:ca:71:b4:56:e3:32:b3:1b:99:c6:70:
bd:ed:60:46:a3:34:a9:01:9d:07:ed:1d:52:1a:4f:0d:69:51:
6b:ff:c5:66:8e:d6:b6:07:31:53:a7:88:17:72:85:50:97:53:
96:84:cf:7d:59:6c:62:56:82:c1:c7:92:72:95:c1:fa:94:a9:
f4:ad:ed:ba:7a:b5:5b:fa:81:c0:02:3a:0b:09:29:0d:7c:aa:
78:58:c8:45:41:b6:b8:b7:42:8c:ca:2b:fd:ad:f3:f2:fb:f4:
81:7f:0b:5f:f1:28:6e:7a:99:98:48:02:37:15:0d:7c:31:be:
bb:2d:e2:4f:92:0b:2f:22:b9:78:81:e8:a2:40:f1:17:d4:4e:
d0:5e:a4:f7:b1:89:51:b1:1f:66:09:8c:5c:03:5d:4a:53:4a:
be:b0:c5:c4:c5:e2:ab:6b:7f:53:79:20:97:fc:e3:15:5f:b0:
97:5d:8b:4d:c3:e0:b8:d0:02:96:fd:b8:e1:63:05:8f:bd:59:
52:87:63:51:75:aa:3d:7a:30:20:15:36:c4:8c:61:c7:57:22:
f2:f6:71:cf:a5:60:d2:92:e9:f1:9a:9c:85:60:60:16:d1:b2:
19:71:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org