Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/By_FZha5K9uQPvT8LYoxuwB08Nk.roa
File: By_FZha5K9uQPvT8LYoxuwB08Nk.roa (raw, json)
Hash identifier: gBopQT7Ge/uruG3xUrNI6XiDfRBYye7pXlHA8/Bbq5Q=
Subject key identifier: 07:2F:C5:66:16:B9:2B:DB:90:3E:F4:FC:2D:8A:31:BB:00:74:F0:D9
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 0621E503
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/By_FZha5K9uQPvT8LYoxuwB08Nk.roa
Signing time: Mon 28 Feb 2022 09:39:25 +0000
ROA not before: Mon 28 Feb 2022 09:39:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49601
IP address blocks: 185.189.124.0/22 maxlen: 22
185.189.125.0/24 maxlen: 24
185.189.124.0/24 maxlen: 24
185.189.126.0/24 maxlen: 24
185.189.127.0/24 maxlen: 24
91.229.56.0/24 maxlen: 24
91.229.185.0/24 maxlen: 24
91.229.182.0/24 maxlen: 24
91.229.210.0/24 maxlen: 24
185.226.62.0/24 maxlen: 24
185.226.60.0/22 maxlen: 22
185.226.63.0/24 maxlen: 24
185.226.60.0/24 maxlen: 24
185.226.61.0/24 maxlen: 24
185.252.96.0/24 maxlen: 24
185.252.97.0/24 maxlen: 24
185.252.98.0/24 maxlen: 24
185.252.96.0/22 maxlen: 22
185.252.99.0/24 maxlen: 24
2a0c:3e00::/29 maxlen: 29
2a0b:e680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102884611 (0x621e503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Feb 28 09:39:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=072fc56616b92bdb903ef4fc2d8a31bb0074f0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:59:91:ed:4d:42:c8:aa:e0:ef:b8:bd:69:
d8:a2:99:6a:a5:f8:33:b6:4b:95:af:c3:cd:4f:12:
48:d7:d0:29:7d:03:a8:68:f9:55:74:bb:5c:2c:fc:
79:65:66:d7:f3:4c:b5:c1:c8:20:b7:0d:8a:96:e2:
0b:38:6b:56:a3:db:a9:e0:32:3a:c8:e8:c7:f1:71:
cd:85:76:34:d3:e2:f7:34:bd:a7:5a:08:58:96:60:
f0:f4:0d:8d:95:78:83:47:d7:da:b6:1d:bb:25:7c:
49:51:38:f0:89:bc:5a:0e:ae:ba:6b:99:2e:64:3a:
b7:26:0a:1a:d8:91:c8:03:15:2c:7f:84:bd:03:f6:
18:4c:09:21:6d:11:49:ae:86:50:fe:84:ab:09:80:
90:29:03:f3:20:7d:d2:f6:34:66:c6:d2:f0:88:72:
45:39:c2:8f:5e:d4:9e:a6:00:53:1f:6e:03:e3:11:
df:97:7d:ee:ee:d9:ce:b9:fb:48:9a:b1:33:15:3c:
0a:7e:d5:d3:3a:1b:e4:59:07:fa:91:1f:30:3c:62:
28:fa:6a:9d:9a:d9:59:9d:9b:5f:d9:d3:c7:d5:de:
69:38:73:14:34:8f:af:b8:ae:bc:8c:d7:d9:6a:ca:
c2:b7:71:0b:eb:84:9d:8e:ed:4d:c5:dd:fe:b6:79:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:C5:66:16:B9:2B:DB:90:3E:F4:FC:2D:8A:31:BB:00:74:F0:D9
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/By_FZha5K9uQPvT8LYoxuwB08Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.56.0/24
91.229.182.0/24
91.229.185.0/24
91.229.210.0/24
185.189.124.0/22
185.226.60.0/22
185.252.96.0/22
IPv6:
2a0b:e680::/29
2a0c:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
09:25:28:d7:37:56:01:18:d6:b2:57:03:54:8e:c6:48:74:54:
44:a2:02:16:f1:28:96:9e:5f:cc:1e:36:04:66:b5:e6:cf:38:
05:0c:1f:fa:63:aa:32:0d:e9:27:8b:49:ce:6f:01:d0:1d:e1:
2d:65:fd:81:09:56:f3:9a:8e:b7:1c:90:b5:66:53:e6:2c:bf:
9d:e7:6c:75:20:be:1e:1f:9a:8b:25:0c:c3:1b:96:4f:ab:e8:
e7:32:77:3c:85:d9:06:2c:4b:76:8f:76:ff:64:29:bd:57:eb:
f8:c5:85:c7:d1:08:ca:bb:8e:df:4b:62:88:c1:50:c3:0b:93:
08:1b:c1:f8:02:17:e0:fd:0f:19:b2:e6:e1:4a:33:e7:17:5d:
69:55:b4:d1:ba:bf:23:3e:da:e4:9a:de:63:12:dc:f6:97:42:
55:6b:20:2d:4c:50:1d:bd:bc:c1:06:aa:28:79:2f:fe:0b:e4:
f1:79:21:3c:8c:17:fe:ef:b0:4f:4d:08:5f:0d:fd:7e:41:7e:
15:80:5c:4d:40:d4:6b:82:18:aa:da:a1:28:e7:7b:20:30:7b:
f3:8c:04:b4:64:87:ab:38:a4:ab:12:30:ff:36:ea:67:13:9b:
83:24:f3:78:73:00:15:ca:01:a9:1a:65:05:a2:25:6d:d4:21:
3f:a6:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org