Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-3Xl9mlKTRhLewIuEN1fazjEFHs.roa
File: 1-3Xl9mlKTRhLewIuEN1fazjEFHs.roa (raw, json)
Hash identifier: sG8UrTov2k2u/J+gkzqWa2KM+qxBLN6+NCmjvM3DAoE=
Subject key identifier: FB:75:E5:F6:69:4A:4D:18:4B:7B:02:2E:10:DD:5F:6B:38:C4:14:7B
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 018267E9AB382ADDAFBA69C3AE1BADFB554B
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-3Xl9mlKTRhLewIuEN1fazjEFHs.roa
Signing time: Thu 04 Aug 2022 08:12:23 +0000
ROA not before: Thu 04 Aug 2022 08:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35394
IP address blocks: 89.29.176.0/21 maxlen: 21
213.181.76.0/24 maxlen: 24
89.29.184.0/23 maxlen: 23
213.181.74.0/24 maxlen: 24
213.181.75.0/24 maxlen: 24
213.181.84.0/23 maxlen: 23
213.181.80.0/23 maxlen: 23
213.181.86.0/23 maxlen: 23
213.181.88.0/24 maxlen: 24
185.64.242.0/24 maxlen: 24
176.57.97.0/24 maxlen: 24
89.29.160.0/20 maxlen: 20
89.29.244.0/23 maxlen: 23
89.29.248.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:e9:ab:38:2a:dd:af:ba:69:c3:ae:1b:ad:fb:55:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Aug 4 08:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb75e5f6694a4d184b7b022e10dd5f6b38c4147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:56:73:f4:6f:55:5a:0c:0e:aa:84:99:c5:
c7:c5:4f:ca:fa:b6:b9:c0:96:85:76:4e:09:ed:19:
37:3e:40:9a:4f:c4:58:33:26:b8:97:71:98:21:3e:
c2:56:45:06:31:41:b7:3b:df:45:87:25:b3:2a:6f:
40:43:e4:7c:e9:82:ac:71:15:24:37:89:c7:d8:85:
b4:22:a0:8e:56:08:d9:f5:02:57:9f:32:42:5e:e4:
b8:e4:ca:e9:01:4b:34:5d:d3:3c:61:08:61:aa:ce:
4a:0f:fb:16:ae:b1:42:5d:21:3a:12:b0:21:55:d0:
92:c3:30:20:fa:e0:8f:05:11:bf:72:18:e6:47:8c:
d3:70:fb:78:0d:3b:94:1e:44:3b:3f:01:c7:df:3f:
92:42:a7:12:d6:35:7e:20:07:23:94:60:62:79:40:
72:bd:b4:8d:99:29:c8:3b:01:4c:46:6b:bb:72:8b:
e9:2b:03:3c:2f:1d:46:17:61:50:70:11:c1:f8:33:
1f:9b:71:0b:19:9c:09:8e:ad:1b:28:72:c4:45:1c:
fb:0a:69:11:f4:bd:ea:1d:8f:06:53:3b:54:72:2b:
96:e7:b3:85:ec:f6:44:c9:9b:de:9b:1a:1e:b4:0f:
ac:8c:6d:d7:4f:75:79:4b:a3:dc:79:ca:39:ac:62:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:E5:F6:69:4A:4D:18:4B:7B:02:2E:10:DD:5F:6B:38:C4:14:7B
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/1-3Xl9mlKTRhLewIuEN1fazjEFHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.160.0-89.29.185.255
89.29.244.0/23
89.29.248.0/23
176.57.97.0/24
185.64.242.0/24
213.181.74.0-213.181.76.255
213.181.80.0/23
213.181.84.0-213.181.88.255
Signature Algorithm: sha256WithRSAEncryption
20:a7:ed:e4:4d:56:5c:e0:6b:41:1d:a7:52:a5:b7:dc:73:d4:
da:a0:44:87:03:0a:79:c1:ec:45:51:80:ef:b2:7f:39:db:4d:
71:16:89:89:6b:6c:4a:0e:36:78:2e:2f:cf:15:26:9a:0f:8c:
81:e2:ed:c1:42:d6:25:24:13:b9:51:a3:e3:1d:53:15:de:4b:
09:0c:90:bb:29:10:67:bb:e8:cf:bd:89:29:75:9d:3f:63:c5:
e5:1b:9c:0f:67:b5:c0:82:96:26:5d:bd:10:9b:ea:a7:e7:60:
79:5e:e1:a8:f5:57:c4:ed:4b:e9:e6:91:a5:9d:82:22:9a:1f:
65:9d:e0:2e:b1:cc:79:1f:5f:94:cf:51:52:db:9d:bb:c3:a6:
85:8b:0c:49:63:45:41:a3:b7:bd:9c:fa:96:83:e5:f9:b3:e4:
46:5f:80:15:18:0d:9b:b0:1b:19:d2:21:31:8e:0d:27:7a:50:
29:c1:04:33:40:cf:e1:3a:68:1e:cd:1b:8d:85:42:6b:cc:68:
44:82:20:3e:03:ec:48:6e:07:a8:e7:96:74:10:0d:f3:77:f6:
f9:82:f8:65:45:37:2e:8b:1e:e7:fc:b8:0c:75:ba:39:a4:17:
83:94:25:e5:1a:5f:c3:67:b8:65:80:60:f7:81:31:9f:1b:8c:
94:8b:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:53 2023 by rpki-client on console-ams.rpki-client.org