Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/i_R288xku8URg4rJ_YtYF7bLmyQ.roa
File: i_R288xku8URg4rJ_YtYF7bLmyQ.roa (raw, json)
Hash identifier: Ww0j/MpTJfnPGWbg1rzeV4JsUD/fKrEwwyur2JpPAqs=
Subject key identifier: 8B:F4:76:F3:CC:64:BB:C5:11:83:8A:C9:FD:8B:58:17:B6:CB:9B:24
Certificate issuer: /CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Certificate serial: 37E7724A
Authority key identifier: 7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/i_R288xku8URg4rJ_YtYF7bLmyQ.roa
Signing time: Tue 22 Mar 2022 08:15:40 +0000
ROA not before: Tue 22 Mar 2022 08:15:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24592
IP address blocks: 185.86.32.0/22 maxlen: 22
212.92.32.0/19 maxlen: 19
212.92.39.0/24 maxlen: 24
217.13.112.0/20 maxlen: 20
212.92.55.0/24 maxlen: 24
217.13.125.0/24 maxlen: 24
217.13.124.0/24 maxlen: 24
212.92.60.0/22 maxlen: 22
89.45.36.0/22 maxlen: 22
2a02:23c8:ff00::/40 maxlen: 40
2a02:23c8::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937914954 (0x37e7724a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ae62148b30b66bd0a3da3897ecfbfd9af4f431e
Validity
Not Before: Mar 22 08:15:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bf476f3cc64bbc511838ac9fd8b5817b6cb9b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:00:56:2b:cc:7a:50:03:d9:c4:c7:a4:3f:b2:
8e:18:2d:66:77:a1:f5:82:04:6d:6c:87:75:19:dc:
56:8a:df:49:62:80:9b:a9:09:84:12:1d:92:5b:50:
17:f3:99:e1:69:17:0b:4c:c7:36:ef:8b:a1:a2:6d:
75:f8:62:6f:7a:64:df:d3:6b:92:b9:a4:03:8f:70:
ff:d7:aa:79:b6:44:f9:2e:cb:06:da:5e:55:80:a7:
35:de:bf:80:00:f6:9d:d9:21:15:59:eb:57:49:23:
54:58:11:77:3f:49:74:f2:f4:c7:06:bc:7b:55:0f:
5e:7d:ec:4e:2e:58:9e:9b:70:48:be:cb:36:6e:6b:
8b:58:6f:0b:66:33:9f:50:60:8c:0a:8b:ff:0a:7d:
84:e2:86:e0:d7:e8:01:f7:f1:ee:75:76:11:a2:db:
97:fe:24:d2:53:bc:4e:65:7a:80:fe:7a:d0:d8:69:
c9:44:68:77:85:ab:17:26:6c:26:be:c1:79:51:39:
71:80:1c:77:15:a3:bc:f4:5d:57:f8:9c:d5:06:a3:
7d:34:c8:85:76:e2:b6:f7:42:54:2a:84:b6:49:94:
89:2b:fd:7f:98:da:45:85:0a:84:d6:0e:c7:14:27:
64:de:75:c7:fb:3d:60:44:99:35:c7:cd:ed:a6:27:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:76:F3:CC:64:BB:C5:11:83:8A:C9:FD:8B:58:17:B6:CB:9B:24
X509v3 Authority Key Identifier:
keyid:7A:E6:21:48:B3:0B:66:BD:0A:3D:A3:89:7E:CF:BF:D9:AF:4F:43:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euYhSLMLZr0KPaOJfs-_2a9PQx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/i_R288xku8URg4rJ_YtYF7bLmyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/31f27a-b57b-4780-84d0-271bd72cdf69/1/euYhSLMLZr0KPaOJfs-_2a9PQx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.36.0/22
185.86.32.0/22
212.92.32.0/19
217.13.112.0/20
IPv6:
2a02:23c8::/40
2a02:23c8:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
21:07:23:9e:f4:ee:15:a4:5c:9a:dc:49:0a:88:4b:1b:c9:3f:
8b:ea:c0:4c:a0:3e:9b:04:c3:7d:34:7b:88:aa:f9:49:6a:6e:
3e:bc:3e:4f:59:c5:92:77:4c:b5:cf:fb:ce:74:eb:7b:aa:4b:
0d:48:a9:60:bd:71:75:e1:15:96:07:a8:aa:60:d7:9f:14:54:
64:3b:84:1a:74:69:48:5e:4a:4d:b9:43:1b:da:e0:78:35:7e:
ce:c4:e2:c9:49:d2:2f:e9:ff:7b:84:fd:ea:a0:5f:69:f8:f6:
55:03:15:67:85:92:e0:be:21:aa:7a:23:32:53:29:bd:2e:3b:
12:ec:49:ff:78:65:03:f9:42:4b:e2:ce:59:55:2a:64:42:0b:
67:67:e2:68:a0:89:d5:84:0c:6e:ba:a5:2a:ae:dc:40:00:9b:
a1:68:dd:a5:3c:90:42:58:6c:a4:ef:c8:95:68:fa:93:86:c4:
dc:48:f9:fd:4b:ed:57:67:29:f5:88:4c:88:ea:2c:7b:2e:8b:
fb:d0:26:13:80:42:e9:f2:09:8b:15:f1:a2:23:d7:b4:5f:d5:
ec:41:71:63:a2:29:97:3c:ef:29:bc:0f:d4:40:76:85:3e:48:
c2:76:f7:d4:40:ba:a0:41:0c:d6:80:46:4a:c0:bd:5a:1f:fa:
b1:de:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org