Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vwjZ5u9u1QKXC0UFvx-7K7TDtU4.roa
File: vwjZ5u9u1QKXC0UFvx-7K7TDtU4.roa (raw, json)
Hash identifier: DbcEdVkTbLnMmBNq1JKIhNFeosxizooxcsmmPYXBuOI=
Subject key identifier: BF:08:D9:E6:EF:6E:D5:02:97:0B:45:05:BF:1F:BB:2B:B4:C3:B5:4E
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 018392FF9C1808E91C5E28AEDF97DB203790
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vwjZ5u9u1QKXC0UFvx-7K7TDtU4.roa
Signing time: Sat 01 Oct 2022 10:02:48 +0000
ROA not before: Sat 01 Oct 2022 10:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 89.38.242.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
45.140.28.0/22 maxlen: 22
89.43.204.0/23 maxlen: 23
89.42.32.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.44.112.0/23 maxlen: 23
89.44.118.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.45.230.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:ff:9c:18:08:e9:1c:5e:28:ae:df:97:db:20:37:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Oct 1 10:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf08d9e6ef6ed502970b4505bf1fbb2bb4c3b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:08:e0:dc:cc:0b:36:8b:34:1a:8b:2c:6e:
70:43:bc:1a:98:d0:df:b4:36:8b:5a:54:46:af:0b:
cf:d2:51:9b:ad:f8:ef:9e:3c:4c:0c:74:fe:ff:ad:
b7:8f:da:e3:8a:28:f1:a1:3b:99:80:e5:d3:5f:95:
03:b9:be:41:74:e5:dd:82:49:45:b8:ec:21:cc:b4:
54:8d:aa:cf:42:e6:dc:51:f1:09:dd:0c:d7:cd:8e:
9c:a7:f0:68:7d:36:f6:c8:83:5b:45:88:d7:12:b8:
9b:d2:4d:db:ac:01:93:e5:12:65:91:fa:23:d1:85:
61:ca:5e:34:42:11:86:25:29:58:b9:26:bd:60:4f:
8d:96:8b:ed:b0:6f:54:35:ea:b3:25:f2:fb:5c:92:
7b:8f:6e:25:5f:c2:48:76:3c:1d:23:bd:d7:37:09:
a0:58:2b:60:23:45:d5:9b:d2:ea:8f:64:ff:93:af:
c9:e1:c4:25:e3:a2:a8:4a:09:4f:2f:d8:bf:87:ca:
4d:8d:96:31:9e:6e:b1:d7:8c:fa:5b:30:a2:d8:47:
99:b6:17:36:dd:ca:ae:c5:22:02:d2:f7:91:ad:af:
bd:d0:d8:44:62:fc:12:a4:80:6b:e9:d6:14:ce:21:
f1:49:af:a6:c7:01:4c:a3:22:b6:e2:f4:7b:a7:c7:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:D9:E6:EF:6E:D5:02:97:0B:45:05:BF:1F:BB:2B:B4:C3:B5:4E
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vwjZ5u9u1QKXC0UFvx-7K7TDtU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
89.33.204.0/23
89.33.234.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.35.58.0/23
89.35.156.0/23
89.35.176.0/23
89.37.30.0/23
89.38.242.0/23
89.39.186.0/23
89.40.128.0/23
89.42.32.0/23
89.43.204.0/23
89.44.112.0/23
89.44.118.0/23
89.44.202.0/23
89.45.230.0/23
89.46.44.0/23
Signature Algorithm: sha256WithRSAEncryption
36:7a:b7:ed:fd:c3:77:d4:7c:9a:15:fd:ad:e9:c1:2b:6d:7a:
70:b5:58:a5:86:9c:15:4f:94:85:f9:fd:5b:94:e4:29:88:ed:
02:f3:b6:21:90:1e:04:f7:ae:17:23:3b:a2:29:5a:d4:ad:82:
2b:b4:cf:5e:39:03:12:80:5e:9a:bf:80:e3:51:a3:e2:67:3e:
42:eb:a2:1e:12:0a:34:b3:e6:97:f1:59:b1:5a:5a:e1:75:a0:
a2:ef:42:1e:f5:1c:b7:3a:d4:7b:e6:4d:9e:31:3b:38:ac:16:
3b:e5:2e:ec:9a:5a:1c:ba:18:18:a4:35:8a:4b:77:4f:97:00:
98:21:7a:c8:ba:b5:4c:41:19:3b:67:61:02:16:49:19:6a:d7:
d4:d3:43:f6:25:19:09:55:c1:8c:f0:b6:1c:7d:f9:6b:5e:f3:
b6:92:1b:0c:ad:c3:8f:e7:2d:74:8b:a7:5d:0c:19:e8:53:b9:
e5:d1:0a:7c:3e:9b:7b:ad:6d:09:41:3b:7f:ec:67:b3:a5:a5:
e8:2c:0f:73:cd:b6:56:e5:d7:ce:9d:73:39:c1:35:56:b6:ef:
c7:58:fb:3d:3a:23:11:dc:d2:1c:78:11:14:2c:aa:65:da:dc:
31:c9:3d:2e:e5:13:e2:ec:7a:cf:d0:46:31:74:3a:d9:c2:1a:
b3:ea:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:24 2024 by rpki-client on console-ams.rpki-client.org