Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/xFstMoUC0MoQxM5UIi3-8ieNo6M.roa
File: xFstMoUC0MoQxM5UIi3-8ieNo6M.roa (raw, json)
Hash identifier: bMCY9XR2ok/idTft6/nqpgYt+qREKqgBy6qdjo3I1VI=
Subject key identifier: C4:5B:2D:32:85:02:D0:CA:10:C4:CE:54:22:2D:FE:F2:27:8D:A3:A3
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01837F4EE1A68371B8A9358F3EEC7250A51F
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/xFstMoUC0MoQxM5UIi3-8ieNo6M.roa
Signing time: Tue 27 Sep 2022 14:16:59 +0000
ROA not before: Tue 27 Sep 2022 14:16:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 195.211.98.0/23 maxlen: 23
195.211.96.0/23 maxlen: 23
82.117.252.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
82.117.254.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.236.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
62.233.57.0/24 maxlen: 24
2a05:9400::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9405::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:4e:e1:a6:83:71:b8:a9:35:8f:3e:ec:72:50:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Sep 27 14:16:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c45b2d328502d0ca10c4ce54222dfef2278da3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:79:3d:b0:b1:68:71:ea:91:37:71:e4:21:
48:f3:c9:7e:cd:9c:a3:bc:78:ab:33:e4:2a:27:64:
f2:fb:67:ab:4c:35:04:39:f9:56:af:ee:db:78:c7:
18:d1:96:55:c4:cc:8d:83:de:70:9b:02:b3:af:d6:
e1:e8:1f:72:32:54:29:f3:55:04:54:f2:2b:d3:87:
93:44:2a:1b:4c:03:1c:02:3a:6d:fe:7e:04:3a:53:
55:5c:b6:9d:4a:87:41:91:1e:d0:49:b0:49:40:28:
23:b3:69:4f:3c:e3:45:bb:b0:86:3d:b3:1c:be:da:
ea:4c:ac:53:29:ce:9c:f2:aa:16:31:62:39:57:86:
64:1d:1e:d1:ca:7a:c4:be:6f:36:d9:e3:35:63:f8:
2e:8e:5f:9f:d7:46:af:5c:5d:b1:fd:a9:e4:53:40:
30:39:49:dd:54:a1:b4:36:93:70:d9:dc:99:fd:40:
b6:02:9d:e2:8f:c9:67:7e:ee:0d:60:46:ae:b4:0b:
ce:0b:1a:52:1a:a9:8c:60:c6:ab:9c:08:c5:83:77:
4b:4c:4e:8d:cf:30:b4:86:bf:35:50:2d:04:77:11:
6a:59:9e:a6:f4:0c:45:50:64:4f:dc:1f:d4:04:2a:
82:ce:81:85:6e:58:fe:c7:5b:4a:ae:a8:3b:a2:b2:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:2D:32:85:02:D0:CA:10:C4:CE:54:22:2D:FE:F2:27:8D:A3:A3
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/xFstMoUC0MoQxM5UIi3-8ieNo6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.56.0/22
62.233.57.0/24
82.117.252.0-82.117.254.255
195.123.232.0-195.123.247.255
195.211.96.0/22
IPv6:
2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff
2a12:6fc0::/31
Signature Algorithm: sha256WithRSAEncryption
83:27:2f:dc:0a:30:4c:d7:83:d7:5c:f5:aa:a8:6d:14:ae:cf:
48:7f:71:74:f8:81:43:11:e1:01:af:24:83:8d:c3:8b:ae:d9:
d8:5d:8e:9b:7d:e0:c3:08:dc:d3:69:44:97:b1:5f:a3:9a:c9:
d7:6e:be:04:af:7c:17:90:b8:1b:ed:4d:38:c5:87:8f:0c:24:
85:89:cc:f5:ac:cc:8d:c9:b5:f8:5c:5d:d0:f9:17:ff:a6:9f:
54:4b:74:86:a0:0c:ac:75:ca:35:21:f4:32:30:a9:ce:9d:4a:
c5:8f:3e:93:17:b6:88:d8:0b:79:f7:c4:37:ec:aa:2a:73:72:
3f:47:c9:71:31:2c:2a:e7:32:00:2c:53:ea:66:b7:9f:36:73:
ba:11:a5:64:da:aa:ae:c0:e4:86:59:ea:ae:67:c2:36:98:7c:
45:2f:5a:e0:5c:c6:9c:e3:78:f2:d5:5a:1d:1d:da:8d:b7:49:
bc:73:a8:d0:ab:41:c6:13:ce:f4:10:1a:80:3d:2e:2c:fd:5a:
82:5a:ed:79:cb:83:bd:b4:ec:07:7b:de:c8:cf:47:a5:ed:ae:
93:86:7a:a2:44:cd:94:ed:31:9f:47:4c:3e:89:1b:67:03:48:
49:7e:90:fb:e9:2a:8a:79:4c:62:52:b7:d6:2d:f8:54:f8:7b:
b9:68:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org