Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0RSk5U9aHialTkmF1O1t6V6ThAc.roa
File: 0RSk5U9aHialTkmF1O1t6V6ThAc.roa (raw, json)
Hash identifier: 83iD4RUyoZvr8RxVxOTpOl5c6pWJORlSKUSC5CkJN34=
Subject key identifier: D1:14:A4:E5:4F:5A:1E:26:A5:4E:49:85:D4:ED:6D:E9:5E:93:84:07
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B90A442
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0RSk5U9aHialTkmF1O1t6V6ThAc.roa
Signing time: Sat 01 Jan 2022 08:56:20 +0000
ROA not before: Sat 01 Jan 2022 08:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44293
IP address blocks: 213.181.76.0/24 maxlen: 24
213.181.75.0/24 maxlen: 24
89.29.184.0/23 maxlen: 23
213.181.74.0/24 maxlen: 24
213.181.88.0/24 maxlen: 24
89.29.244.0/23 maxlen: 23
89.29.248.0/23 maxlen: 23
176.57.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194028610 (0xb90a442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d114a4e54f5a1e26a54e4985d4ed6de95e938407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:e5:42:7c:f9:93:92:93:41:05:16:0e:3a:
cf:62:ff:fd:67:ab:6e:98:75:2d:8f:50:a8:d1:f8:
3c:1c:47:e9:4b:f2:5e:1c:03:7f:19:27:fa:98:cf:
82:dd:e3:16:3a:78:d6:61:51:b7:a1:ed:30:e4:3e:
86:75:0d:69:d4:a1:83:6e:00:08:5e:b1:56:84:48:
de:02:a9:8c:a2:3e:a6:e2:dd:7f:6f:74:ff:12:e2:
95:94:47:04:ad:0b:47:96:37:32:5a:29:a0:1b:7a:
9e:3d:a2:2f:b3:f2:b5:09:04:cd:89:e5:45:be:5d:
93:71:6d:fc:e4:7e:7c:a0:b3:d6:ee:4c:f2:8a:a0:
dd:ce:f4:89:2b:d9:ca:19:40:88:34:e7:f6:d2:2d:
52:fe:ae:8c:71:0f:d8:96:e6:0e:a9:22:da:ca:92:
4d:cf:39:0b:26:f7:96:4c:13:8b:ff:0b:0e:e2:1b:
03:dd:fb:1c:22:e2:5e:6f:b4:e8:41:1d:21:b0:b6:
ae:92:c3:6b:bb:7c:57:45:e3:4a:8c:d5:b1:7f:da:
68:f1:73:9e:8e:2c:47:00:8e:34:d3:2e:08:77:a1:
8c:f5:20:f5:fc:2d:a8:80:0b:1c:b2:42:91:3e:88:
b6:ee:b4:4b:aa:73:bf:b9:50:61:11:3b:95:8e:cb:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:A4:E5:4F:5A:1E:26:A5:4E:49:85:D4:ED:6D:E9:5E:93:84:07
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0RSk5U9aHialTkmF1O1t6V6ThAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.184.0/23
89.29.244.0/23
89.29.248.0/23
176.57.97.0/24
213.181.74.0-213.181.76.255
213.181.88.0/24
Signature Algorithm: sha256WithRSAEncryption
be:4e:7c:f0:21:14:e6:64:da:79:66:80:5e:f4:a6:67:e3:20:
68:bd:44:ad:d3:2f:e8:00:4a:31:5d:04:81:7f:49:d8:ba:86:
0e:52:1a:13:f3:d2:12:68:ba:d7:0f:b4:c1:05:6e:8b:7b:c5:
05:4b:3c:66:cc:e3:32:70:d9:ab:7e:59:e1:46:91:9d:38:75:
72:16:d6:f6:22:65:df:2a:80:eb:a8:9e:0f:f9:c3:b2:df:1d:
07:e8:bd:65:58:e4:72:c5:fa:97:dc:3d:c7:f4:b7:f5:bc:61:
1f:8a:23:a1:43:e3:02:60:e7:7b:09:b0:75:4f:a7:cc:4e:6f:
2c:4a:0e:13:aa:bc:98:a0:e9:19:c5:61:3e:9d:5b:7a:66:c5:
07:a6:72:5a:a6:d7:c9:00:3b:a3:25:8c:e4:de:a1:aa:ef:1c:
56:7c:8f:8a:b8:00:ac:d8:9a:1b:f8:58:80:29:41:02:73:e1:
72:ee:50:b0:b4:c6:83:cc:1c:ea:6d:b5:8f:bd:cd:9b:f5:4f:
c7:df:79:3b:ea:58:17:fd:64:14:f9:68:41:50:51:ea:3b:bd:
64:b1:1f:ae:2e:27:8d:58:17:5d:9c:95:29:84:95:0d:8e:28:
e4:25:ce:59:6f:05:86:23:c1:ad:b3:f7:15:3c:b2:18:ac:50:
04:f1:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org