Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XEz-WqrxJu4f0WJeE2u-91CZUXE.roa
File: XEz-WqrxJu4f0WJeE2u-91CZUXE.roa (raw, json)
Hash identifier: a7gqx6UIdRyJGyhgq26Tz+lx+kOVlcBE2l5+tmZOaow=
Subject key identifier: 5C:4C:FE:5A:AA:F1:26:EE:1F:D1:62:5E:13:6B:BE:F7:50:99:51:71
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 447EA507
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XEz-WqrxJu4f0WJeE2u-91CZUXE.roa
Signing time: Sat 01 Jan 2022 03:58:29 +0000
ROA not before: Sat 01 Jan 2022 03:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28708
IP address blocks: 194.250.131.0/24 maxlen: 24
193.253.141.0/24 maxlen: 24
193.253.142.0/23 maxlen: 24
80.12.209.0/24 maxlen: 24
193.253.170.0/24 maxlen: 24
80.12.210.0/24 maxlen: 24
193.253.169.0/24 maxlen: 24
193.253.168.0/24 maxlen: 24
80.10.4.0/23 maxlen: 24
90.84.144.0/23 maxlen: 23
81.253.0.0/18 maxlen: 24
90.84.146.0/24 maxlen: 24
193.253.10.0/24 maxlen: 24
90.96.0.0/16 maxlen: 24
80.10.43.0/24 maxlen: 24
80.10.46.0/24 maxlen: 24
193.253.78.0/23 maxlen: 24
80.15.251.0/24 maxlen: 24
80.12.68.0/23 maxlen: 24
80.12.70.0/24 maxlen: 24
80.12.66.0/23 maxlen: 24
193.251.116.0/24 maxlen: 24
80.10.161.0/24 maxlen: 24
80.12.100.0/23 maxlen: 24
80.12.102.0/24 maxlen: 24
81.253.64.0/19 maxlen: 24
2a01:cd00::/31 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149150471 (0x447ea507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c4cfe5aaaf126ee1fd1625e136bbef750995171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:04:15:93:ee:2c:04:c0:a7:46:19:fc:09:
28:79:c3:a7:35:09:78:ac:45:e7:ec:34:8b:0f:67:
12:77:2a:1b:5f:7e:c6:1b:95:93:50:6e:8c:98:7b:
7a:6b:22:d6:ac:e8:9d:04:2e:33:af:16:6c:d5:c9:
34:7c:fa:81:d9:8f:b4:d1:b5:cd:f7:c5:9d:83:23:
93:8c:d5:b3:fc:f6:12:b6:04:94:f3:3d:54:04:b6:
63:84:e4:33:9e:58:1e:f6:51:dc:a1:c3:89:e8:52:
a0:a6:bb:2f:ab:83:53:bd:f4:4d:f0:53:17:22:d3:
59:32:ae:64:7a:4b:be:34:04:3b:a2:81:db:3d:b8:
0f:7f:1b:43:f0:47:e3:9b:ff:6c:f7:75:d5:fd:99:
fc:3e:0f:8c:8e:36:34:da:e2:99:89:d7:51:3a:37:
a8:e7:63:64:be:ca:2b:87:d7:a9:55:6f:2e:17:d5:
ef:d3:fa:54:51:f8:bc:6f:d2:66:1f:6e:27:d8:c8:
c6:d1:3f:1c:6f:ad:bd:00:5f:15:65:59:a5:68:52:
24:61:e6:8a:b4:c6:7c:5d:42:e6:14:17:78:3f:b1:
77:bb:7b:8f:b1:d2:5a:e4:fa:f5:9c:75:e2:6e:40:
57:14:c6:aa:ee:5a:2b:f3:44:a3:32:24:82:6e:a3:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:FE:5A:AA:F1:26:EE:1F:D1:62:5E:13:6B:BE:F7:50:99:51:71
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/XEz-WqrxJu4f0WJeE2u-91CZUXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.4.0/23
80.10.43.0/24
80.10.46.0/24
80.10.161.0/24
80.12.66.0-80.12.70.255
80.12.100.0-80.12.102.255
80.12.209.0-80.12.210.255
80.15.251.0/24
81.253.0.0-81.253.95.255
90.84.144.0-90.84.146.255
90.96.0.0/16
193.251.116.0/24
193.253.10.0/24
193.253.78.0/23
193.253.141.0-193.253.143.255
193.253.168.0-193.253.170.255
194.250.131.0/24
IPv6:
2a01:cd00::/31
Signature Algorithm: sha256WithRSAEncryption
3e:0a:c5:73:67:82:e3:af:4d:3d:88:22:a9:12:27:ca:43:7d:
2f:00:cd:6b:eb:48:d1:92:ca:02:1f:97:3d:ee:7f:79:0a:3f:
d9:f7:cf:0a:c9:a9:1a:96:06:ba:9e:43:4d:47:34:f2:67:6f:
10:de:2c:9a:0a:31:28:61:05:df:16:d2:a9:3d:33:b5:70:5e:
10:d2:68:10:18:60:c8:05:86:e6:45:da:a8:e7:91:19:9c:f3:
cf:08:a2:51:55:6f:57:73:b2:dd:71:9e:42:d0:e2:7d:6b:18:
f1:82:a9:af:d7:2a:4a:a4:28:b8:35:d5:ee:ad:9b:6a:1d:38:
92:9f:f8:09:04:1f:d7:57:0e:10:d2:54:56:31:03:76:90:cf:
eb:e5:71:1e:b3:d6:fe:2f:67:22:96:69:f6:09:ae:08:a0:64:
0a:e8:27:fd:0d:38:59:17:37:48:7a:a0:02:37:0c:66:54:d6:
9d:9b:fc:17:43:e1:26:a1:12:fa:01:36:f6:8d:49:45:e2:e8:
42:26:bf:27:e0:f5:c1:70:87:37:44:a9:02:9b:d9:1a:63:a3:
2b:6e:b3:9a:5f:7f:18:c5:29:9e:b4:c3:6e:90:cb:96:42:bc:
cf:ae:c4:93:9d:cf:b4:dc:7e:47:db:53:09:12:7c:8e:5b:71:
2a:05:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org