Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/_CtLOeuKMNn9uxOF3JQXFGoMFJk.roa
File: _CtLOeuKMNn9uxOF3JQXFGoMFJk.roa (raw, json)
Hash identifier: b8CDLXpNsMfyYniQBG6AORM+R1OfdOF6YA8rS1ZFCeY=
Subject key identifier: FC:2B:4B:39:EB:8A:30:D9:FD:BB:13:85:DC:94:17:14:6A:0C:14:99
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 018254A4CE832567C64D49332DE76733B061
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/_CtLOeuKMNn9uxOF3JQXFGoMFJk.roa
Signing time: Sun 31 Jul 2022 14:24:23 +0000
ROA not before: Sun 31 Jul 2022 14:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
2a00:e30:ed00::/41 maxlen: 48
2a00:e30:3000::/41 maxlen: 41
2a00:e30:2100::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:54:a4:ce:83:25:67:c6:4d:49:33:2d:e7:67:33:b0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jul 31 14:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc2b4b39eb8a30d9fdbb1385dc9417146a0c1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:75:7e:54:9d:4f:f2:9a:89:92:eb:d0:26:
98:14:c7:71:16:69:01:88:c3:4c:d3:f3:35:bf:dd:
2b:95:c2:13:40:b4:ff:92:a3:2f:23:cb:90:d0:87:
c1:99:d0:ad:b4:ba:09:7b:23:e2:05:3d:10:8c:4a:
6b:2c:e2:cd:ab:46:d2:9f:72:79:89:cf:db:81:82:
2a:2d:80:ee:58:07:4c:90:42:73:b4:62:11:b2:ca:
24:ab:45:6a:db:a3:e3:9e:2d:db:8a:e7:bd:c9:e9:
39:c4:dc:ba:6d:a3:d0:ed:b3:11:47:0e:e6:bd:b4:
e2:03:c5:e3:76:da:2d:b1:c9:e8:41:2f:2c:ad:3c:
1f:d4:eb:cf:99:96:72:a7:f6:a7:bc:86:ce:bd:22:
2b:82:f4:50:1c:b4:90:32:ac:1f:56:83:98:69:f0:
7e:31:ef:ee:8e:72:ce:ec:d5:a3:57:2c:49:40:ea:
33:bc:62:ba:e3:16:20:f1:3b:40:f4:84:c0:42:62:
32:2e:99:14:cc:09:22:93:2c:59:39:14:a7:8a:55:
fd:1e:70:2f:37:81:37:cc:2b:ac:28:8f:bd:98:21:
fd:45:39:36:20:f9:3f:84:f1:cc:f0:91:fe:fe:a2:
5a:6c:2b:f1:d5:20:11:ea:b3:1b:2d:f5:00:37:f4:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:4B:39:EB:8A:30:D9:FD:BB:13:85:DC:94:17:14:6A:0C:14:99
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/_CtLOeuKMNn9uxOF3JQXFGoMFJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/24
94.228.98.0/24
94.228.100.0/24
94.228.104.0/23
94.228.108.0/24
94.228.110.0/24
149.126.64.0/22
149.126.70.0/24
185.251.53.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
39:73:5a:80:33:44:32:91:dd:8c:f1:29:be:ab:7f:d0:7a:2a:
53:ca:aa:f6:35:94:7a:89:dd:91:fc:80:6a:ac:3a:da:d3:0e:
da:21:fe:9b:13:86:85:26:a7:6d:d3:65:e9:58:5d:63:e2:53:
6e:7a:4d:9f:5a:97:24:72:59:f3:cc:63:e6:30:75:a7:fc:bd:
2a:f7:96:67:b9:69:fb:2f:97:a1:11:9b:93:95:c5:ce:b2:67:
84:9d:4e:00:f3:7f:01:4b:87:23:36:1d:d7:e3:ad:50:17:96:
7d:71:3f:a7:fc:13:82:29:13:85:ae:87:76:9b:0f:df:55:77:
bb:21:f7:c7:0a:31:f4:bb:81:3b:f8:49:38:e9:2f:d0:2a:17:
ef:1a:5a:0b:ca:ad:ba:4b:9b:b9:1a:f4:23:a5:bb:3a:51:eb:
53:9a:b3:0f:11:00:b9:9a:46:12:d9:f8:9e:44:78:e7:5a:c3:
98:3a:bd:7a:50:ed:a9:3a:5d:7d:fd:8c:35:48:26:d0:1c:cb:
a3:6d:78:c2:9f:ed:4f:0c:d8:fd:ee:7c:e5:b9:ce:4f:d7:4f:
9b:14:a5:28:37:03:89:f8:d2:d9:ed:48:72:0a:63:4d:83:3a:
98:d8:58:e4:b3:e3:e4:f9:e4:9f:9c:41:f4:c4:ea:6e:76:eb:
c9:fa:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org