Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa
File: Pl6w6SEe_N8NBddtJZbopVUzMis.roa (raw, json)
Hash identifier: afrQHO4vEwXIvOxTu4cFDlngfo5JAYJ6vC4jZr6p8wI=
Subject key identifier: 3E:5E:B0:E9:21:1E:FC:DF:0D:05:D7:6D:25:96:E8:A5:55:33:32:2B
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B8C898C
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa
Signing time: Sat 01 Jan 2022 08:56:18 +0000
ROA not before: Sat 01 Jan 2022 08:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3339
IP address blocks: 213.181.68.0/23 maxlen: 23
213.181.66.0/23 maxlen: 23
89.29.186.0/23 maxlen: 23
213.181.82.0/23 maxlen: 23
89.29.188.0/23 maxlen: 23
89.29.212.0/22 maxlen: 22
89.29.208.0/22 maxlen: 22
89.29.216.0/22 maxlen: 22
89.29.220.0/22 maxlen: 22
185.64.241.0/24 maxlen: 24
176.57.102.0/23 maxlen: 23
176.57.100.0/23 maxlen: 23
213.181.64.0/24 maxlen: 24
89.29.230.0/24 maxlen: 24
89.29.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193759628 (0xb8c898c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e5eb0e9211efcdf0d05d76d2596e8a55533322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:4e:71:b1:66:5b:81:fc:e0:d8:c1:bc:ca:
93:a7:6f:67:68:3d:36:c2:17:c1:f7:f5:94:2e:2b:
89:55:f4:30:05:41:44:bd:52:6b:d0:3c:69:83:5a:
1d:cf:bf:77:9c:ef:89:3d:9c:ea:ee:4d:0b:e2:88:
97:45:7d:c0:d0:69:d3:80:0a:90:0f:9e:c5:77:32:
c9:28:1a:b3:04:5e:13:f4:54:e9:a4:0a:85:9a:d7:
1e:8a:4a:eb:36:84:81:65:3c:7a:eb:a1:cf:e5:03:
f0:94:2c:54:54:05:75:1d:ac:9d:0d:9f:bf:97:08:
d0:a6:fd:0f:15:03:27:e1:d9:3f:56:52:4e:17:eb:
a5:e3:28:ae:53:3d:de:a7:9f:af:7b:b9:09:18:5d:
a5:1b:3e:bc:5d:8b:b6:bc:5a:02:c2:1f:a4:37:d8:
c1:1f:49:c6:6c:de:8c:e1:71:a8:f8:4f:30:64:d8:
8d:ee:4d:2b:90:5d:55:3d:42:2d:4d:a5:b8:36:f0:
02:27:58:5b:76:3e:a0:f8:57:79:46:15:03:c3:7d:
e9:1a:01:a4:ae:45:92:fb:dc:49:93:ac:09:6a:f5:
73:b8:6e:ab:f4:2b:ac:cf:57:51:ea:84:c3:89:7b:
2e:fa:9e:05:cb:e3:5d:69:d1:33:3c:8a:ed:fa:ab:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:B0:E9:21:1E:FC:DF:0D:05:D7:6D:25:96:E8:A5:55:33:32:2B
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/Pl6w6SEe_N8NBddtJZbopVUzMis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.186.0-89.29.189.255
89.29.208.0/20
89.29.230.0/24
89.29.240.0/22
176.57.100.0/22
185.64.241.0/24
213.181.64.0/24
213.181.66.0-213.181.69.255
213.181.82.0/23
Signature Algorithm: sha256WithRSAEncryption
55:1b:95:80:c4:33:7b:4b:4d:f5:34:a5:10:72:f9:18:e7:81:
86:17:36:a3:bd:73:e5:b0:98:53:0c:65:bf:e7:b1:35:46:6a:
81:12:03:24:00:d3:9e:4c:ea:b6:6c:02:b6:3c:b8:7c:e1:fa:
41:bd:56:20:e1:82:10:c9:48:bc:aa:e2:ce:6b:ea:72:39:67:
69:d1:ca:16:41:81:fa:d6:1c:29:34:52:83:0d:ba:81:64:4e:
37:cb:78:ca:72:e9:75:44:1f:62:39:d9:30:56:78:40:72:a9:
56:99:e8:c3:59:8a:5f:5d:53:80:bb:e4:03:d2:5d:07:22:a9:
48:a8:04:dd:49:63:e3:24:cf:a7:8d:ef:5f:c6:59:7b:6f:b4:
c0:5e:ac:fc:68:c7:5d:1a:e5:45:db:15:8e:91:9e:4e:e6:f5:
e2:fa:1e:75:f0:43:b5:7d:74:63:b6:0b:44:75:64:0f:7f:8d:
f8:ec:70:85:2d:78:eb:c0:52:47:29:4f:9d:21:62:87:f3:9a:
0e:6d:2d:f2:77:55:19:78:db:e0:06:5c:50:c5:b5:b3:a9:8c:
75:66:0b:db:e6:8b:ce:63:4d:53:a8:a7:47:46:d3:d9:3b:23:
ae:3b:c7:98:30:07:cb:06:a4:5d:40:03:c6:c9:de:13:ca:71:
c8:2f:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:48 2024 by rpki-client on console-ams.rpki-client.org