Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/feYxQi0wor8q9d6lyRhdrW1QVw0.roa
File: feYxQi0wor8q9d6lyRhdrW1QVw0.roa (raw, json)
Hash identifier: gbxRqLFzIK1hr+KkQ0gibdH7WbvEMsD1lnD+t8KxQ6Q=
Subject key identifier: 7D:E6:31:42:2D:30:A2:BF:2A:F5:DE:A5:C9:18:5D:AD:6D:50:57:0D
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 05806ADC
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/feYxQi0wor8q9d6lyRhdrW1QVw0.roa
Signing time: Sat 01 Jan 2022 09:55:39 +0000
ROA not before: Sat 01 Jan 2022 09:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12611
IP address blocks: 91.106.120.0/21 maxlen: 24
46.227.96.0/21 maxlen: 24
88.133.232.0/21 maxlen: 24
80.209.192.0/19 maxlen: 24
95.130.160.0/21 maxlen: 24
212.77.160.0/19 maxlen: 24
185.119.92.0/22 maxlen: 24
88.133.176.0/20 maxlen: 24
81.27.160.0/20 maxlen: 24
217.74.0.0/21 maxlen: 24
5.149.224.0/20 maxlen: 24
130.185.0.0/18 maxlen: 24
2001:16e0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92302044 (0x5806adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Jan 1 09:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7de631422d30a2bf2af5dea5c9185dad6d50570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:99:1e:90:26:c8:2f:c9:aa:04:8b:d8:23:42:
f5:7f:3b:d5:f6:66:c4:cf:e3:00:34:6e:32:62:97:
4e:2a:bb:cf:c3:c5:bf:b5:d0:06:d9:d0:e0:63:87:
91:5b:33:81:d4:35:e3:1a:c9:33:10:d4:30:e3:42:
cf:20:e8:d5:4d:02:13:1a:a9:9e:e7:3b:0b:93:61:
26:58:0d:6b:f1:22:fe:d5:90:02:f2:61:4c:74:b2:
19:e3:12:ff:a9:b8:9c:6f:60:00:72:99:2c:f5:d5:
84:c3:24:fa:4d:e1:25:16:77:a1:ee:cf:52:a2:6d:
0b:0f:02:9d:ab:2d:dc:f0:c2:61:33:d3:eb:90:5f:
8d:50:90:65:7b:ab:1a:be:57:da:d2:b7:d8:bd:bb:
e4:fd:22:34:83:f0:94:22:35:e9:05:2c:6c:21:9b:
ab:87:66:09:09:c8:66:85:46:30:85:d7:8c:2b:28:
aa:19:71:ad:1e:86:34:3b:d5:b8:96:05:8f:ee:da:
d6:b8:65:c6:ae:82:fc:e1:df:22:7b:81:90:0c:37:
88:89:bf:26:18:e2:73:1f:30:d2:e4:f2:56:69:95:
56:46:e0:f9:ce:ca:d8:09:25:4a:9d:5a:de:33:71:
b5:87:ab:42:50:75:e8:c1:a1:05:5e:6a:63:1f:63:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E6:31:42:2D:30:A2:BF:2A:F5:DE:A5:C9:18:5D:AD:6D:50:57:0D
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/feYxQi0wor8q9d6lyRhdrW1QVw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.224.0/20
46.227.96.0/21
80.209.192.0/19
81.27.160.0/20
88.133.176.0/20
88.133.232.0/21
91.106.120.0/21
95.130.160.0/21
130.185.0.0/18
185.119.92.0/22
212.77.160.0/19
217.74.0.0/21
IPv6:
2001:16e0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:3f:ee:87:9a:7c:fe:2e:b9:f1:52:aa:84:5e:53:bd:2e:a9:
80:10:2e:a9:1d:66:2e:28:fa:c7:90:9a:7b:11:99:ad:4f:3c:
59:61:7a:26:60:c6:3f:94:3a:1a:23:13:1c:a9:f0:61:95:b5:
d8:32:91:2f:38:67:6f:d4:80:75:c8:13:0b:77:14:0c:6e:67:
dd:69:7c:6b:e3:6b:88:9d:a0:cc:df:20:31:4f:1f:50:79:38:
41:ee:0d:6a:03:01:57:67:69:e9:c3:9f:f7:9b:f2:f1:4b:10:
bc:e7:1b:ce:73:f0:3e:0e:e4:8f:fb:59:11:b7:f6:27:49:e8:
87:07:87:7d:4c:87:81:a5:47:38:a6:29:de:f0:50:2d:c8:55:
60:46:06:ea:79:91:c6:3b:6e:ab:bd:a1:a2:31:23:b4:6a:6d:
45:4f:5e:a2:23:be:4d:f3:f8:fb:69:6f:da:c1:bd:c4:f8:14:
f1:da:09:a1:70:f9:16:29:b0:37:26:77:12:4e:af:ea:7c:20:
12:98:c2:a0:39:62:92:af:c6:d6:a4:cd:92:92:87:02:b6:87:
46:d4:73:fb:22:bf:b1:c8:22:2c:3c:79:8e:0b:0b:ae:25:37:
ef:be:21:f1:3e:ea:bf:68:ce:38:1a:3d:cf:3c:5f:46:a5:aa:
07:95:b2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:50 2024 by rpki-client on console-ams.rpki-client.org