Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/X1aNUs6tzvNB-1ASUqFhVQj6tFY.roa
File: X1aNUs6tzvNB-1ASUqFhVQj6tFY.roa (raw, json)
Hash identifier: Y8/LbFtXo6fCQiIrdflG9Rx37Z8/2ZLEy00Uhc1aREk=
Subject key identifier: 5F:56:8D:52:CE:AD:CE:F3:41:FB:50:12:52:A1:61:55:08:FA:B4:56
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0182B122FBA843734C84066F34DB3F0FDD33
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/X1aNUs6tzvNB-1ASUqFhVQj6tFY.roa
Signing time: Thu 18 Aug 2022 13:27:15 +0000
ROA not before: Thu 18 Aug 2022 13:27:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
94.154.128.0/22 maxlen: 22
45.150.188.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
185.228.88.0/22 maxlen: 22
2a00:ab01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:22:fb:a8:43:73:4c:84:06:6f:34:db:3f:0f:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Aug 18 13:27:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f568d52ceadcef341fb501252a1615508fab456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:7e:ce:69:91:0d:45:4b:b8:3b:dd:3c:7c:
6b:7f:8d:8e:81:90:bc:50:02:0d:b7:b5:d6:76:83:
4c:1c:1e:c7:8b:c2:ac:ed:5a:de:ca:5b:90:f8:5b:
12:b3:e6:31:38:74:c1:a8:ef:9c:33:b0:31:07:ea:
b8:be:73:c5:44:1c:d5:14:6d:a4:4c:3f:f5:a9:0d:
97:e9:37:b6:f7:c9:a3:5c:10:59:69:3d:d7:c6:1e:
e4:53:59:c1:73:b4:31:c0:98:a0:e8:ab:f1:5b:28:
2a:c0:fd:ce:7e:65:26:5f:93:61:04:34:8e:c2:38:
ac:d5:8f:5e:f2:c0:2a:0b:15:8b:06:a2:af:18:f7:
a3:a8:56:2f:e9:3e:d1:0d:73:29:97:04:39:53:5a:
a2:00:20:77:96:71:3e:61:bb:61:a1:ed:7e:ad:0c:
a9:61:fc:66:22:fa:24:70:aa:05:fa:00:c3:f7:b3:
09:37:fa:c4:0e:11:93:41:4a:a5:a0:0b:0c:8d:c2:
96:ca:12:e3:d9:d6:c3:22:9d:03:c0:71:ff:f8:b2:
05:45:1d:a7:e1:e8:b0:6a:4a:e5:73:19:ee:e8:7e:
55:a6:fd:c0:41:80:8a:49:35:15:fc:84:f9:78:52:
fa:37:18:2d:e9:f4:2d:3b:e4:f8:1f:c7:9c:c7:b0:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:8D:52:CE:AD:CE:F3:41:FB:50:12:52:A1:61:55:08:FA:B4:56
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/X1aNUs6tzvNB-1ASUqFhVQj6tFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
62.122.216.0/22
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
94.154.128.0/22
185.228.88.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
08:6a:66:f0:d1:a5:5c:e9:82:a2:ae:25:d7:8b:48:8d:8f:36:
61:b6:b2:3d:80:51:9f:1a:67:59:e2:db:7a:d3:bf:a8:ff:b3:
a7:2c:06:9e:5f:20:88:5a:f1:de:00:3f:fb:e4:7c:59:17:2b:
44:c9:58:36:2d:b0:1b:bd:f9:03:2d:58:95:44:c9:06:31:dc:
12:89:d7:52:41:15:b6:00:74:eb:42:b9:20:a3:6e:75:a5:88:
a4:56:ec:b1:90:2a:05:7c:59:d6:f0:ee:3f:2e:54:f5:e9:ab:
84:9a:1d:42:45:b8:13:5f:de:ef:41:bc:46:55:d3:b8:a7:f2:
75:92:bf:a2:21:c7:3f:2f:a2:c9:e3:76:58:cb:0a:54:ff:89:
e2:0c:a1:3c:a8:83:fc:b4:5c:81:4d:15:08:f1:eb:18:5b:64:
73:3b:26:da:bc:fd:d8:1e:c9:ad:87:2a:83:cd:12:7f:08:87:
3e:a4:e8:f2:0c:4d:f6:4e:dd:14:be:44:8a:2a:39:ba:7c:89:
45:c9:aa:09:ba:88:8d:c0:fe:bd:d3:de:51:8f:d3:67:e7:53:
1a:42:29:18:bb:4a:f6:9f:28:c3:e3:2a:8c:c3:d5:c4:5c:86:
a3:cf:b6:51:fa:d6:b0:30:2e:e6:b1:3f:8e:6c:34:6a:83:39:
24:03:50:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org