Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/EWDzHwX3aQhrL_uQG_4qaWn0pcM.roa
File: EWDzHwX3aQhrL_uQG_4qaWn0pcM.roa (raw, json)
Hash identifier: rifxkQ449hudVE6j6+FLVU6b0PzyeEWDKURNTI7iPg0=
Subject key identifier: 11:60:F3:1F:05:F7:69:08:6B:2F:FB:90:1B:FE:2A:69:69:F4:A5:C3
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 05DD630C
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/EWDzHwX3aQhrL_uQG_4qaWn0pcM.roa
Signing time: Sat 01 Jan 2022 11:02:36 +0000
ROA not before: Sat 01 Jan 2022 11:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201071
IP address blocks: 217.147.125.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.121.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
92.249.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98394892 (0x5dd630c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 11:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1160f31f05f769086b2ffb901bfe2a6969f4a5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:30:e1:2f:93:0d:f5:21:70:47:cd:db:17:
3b:8d:68:79:57:bc:9c:07:e6:6e:0a:72:6d:09:d6:
a5:b8:72:a9:cc:e8:2a:3f:5f:06:4d:ab:4d:68:c9:
58:c0:99:8d:b0:11:ce:b7:d7:5f:13:2f:d5:a2:c9:
a4:5e:74:13:fc:8a:e0:ec:27:d0:bb:f8:3b:fa:0b:
19:cf:92:08:7a:51:f1:14:7e:e1:1a:76:4f:4b:3d:
49:b0:12:c6:6b:a2:df:da:a9:a6:e3:bd:ed:a4:25:
c7:45:fd:77:08:ec:b6:81:ef:2a:39:4f:73:a4:2c:
53:16:b0:68:6c:30:94:f3:3a:e1:e5:dc:f4:b4:46:
16:e8:1c:d7:86:5a:64:7e:17:09:85:0b:1a:fa:d2:
aa:68:0e:f0:de:0a:fb:48:44:30:0e:e3:fb:00:ea:
5b:78:e6:d6:6b:89:eb:53:89:b2:78:7e:b8:ae:95:
7a:34:a9:57:57:8c:a6:17:b6:f1:f5:58:59:fb:8f:
12:e9:20:c5:5c:d4:d5:2a:50:e6:cb:b5:e6:ec:4b:
2e:58:84:6f:dd:ed:e8:5a:28:8c:6f:f5:45:32:85:
41:22:72:3a:48:e4:7f:07:82:c5:60:9a:b1:7d:29:
b9:c9:b4:2c:e3:c5:a4:7a:6e:2d:a1:75:da:e1:8d:
05:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:F3:1F:05:F7:69:08:6B:2F:FB:90:1B:FE:2A:69:69:F4:A5:C3
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/EWDzHwX3aQhrL_uQG_4qaWn0pcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
217.147.121.0/24
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:75:da:a8:a6:9f:39:59:4c:e6:fe:90:54:22:e2:bc:e8:c1:
df:4a:e8:d6:2c:8c:b2:c4:43:fd:5c:ca:87:8f:f1:02:eb:aa:
92:fa:a3:d7:e8:33:44:0e:0a:1f:f0:1a:70:1f:49:41:78:0f:
b0:4d:c3:54:00:eb:76:95:8b:26:1b:ae:f1:70:52:82:a2:1b:
59:c9:7b:f6:31:38:a9:21:50:18:af:fe:3c:25:88:6d:14:59:
71:32:08:5b:01:b7:bd:86:ea:01:0c:03:bc:64:9d:33:41:f2:
9a:7f:96:ce:e6:9e:26:54:fa:20:32:a4:d0:37:74:ba:b3:f7:
5d:a2:81:d8:3a:98:93:4d:dd:81:72:04:b5:ec:24:7c:6d:71:
5a:80:f1:79:46:88:3f:fd:d8:9c:8a:1e:ef:7e:bd:19:7b:85:
4c:76:2d:23:91:09:f8:ad:73:53:b4:fb:05:fc:95:7a:f3:40:
33:86:87:97:61:f2:83:27:df:0a:4b:78:f4:cf:25:29:a0:5e:
50:78:62:bc:db:41:fe:e6:3e:53:a1:cb:9b:7c:cf:c1:e0:3d:
c8:70:1a:f8:9e:13:46:fc:35:bf:80:9d:c8:02:fe:24:c1:6f:
07:3f:6d:4f:69:7d:eb:ca:59:b1:cb:dd:70:c5:51:95:8b:8a:
99:19:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org