Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/P8cBHdpT3L8fMz6Hw7mBXACsCtU.roa
File: P8cBHdpT3L8fMz6Hw7mBXACsCtU.roa (raw, json)
Hash identifier: Cj5vSC3jnV1Lez3+R56r2my6Se20tgu7hbYawZqpJu0=
Subject key identifier: 3F:C7:01:1D:DA:53:DC:BF:1F:33:3E:87:C3:B9:81:5C:00:AC:0A:D5
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01855833B7007F5E254593F507B5404EC33E
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/P8cBHdpT3L8fMz6Hw7mBXACsCtU.roa
Signing time: Wed 28 Dec 2022 10:07:42 +0000
ROA not before: Wed 28 Dec 2022 10:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51490
IP address blocks: 89.36.139.0/24 maxlen: 24
89.36.38.0/24 maxlen: 24
2a05:7b85::/32 maxlen: 32
2a05:7b87::/32 maxlen: 32
2a05:7b81::/32 maxlen: 32
2a05:76c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:33:b7:00:7f:5e:25:45:93:f5:07:b5:40:4e:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Dec 28 10:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fc7011dda53dcbf1f333e87c3b9815c00ac0ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:2f:75:0c:75:20:a6:95:6e:79:c4:54:06:
ea:b7:39:90:3a:77:52:75:d6:c7:92:16:01:82:a9:
df:57:87:c8:46:fc:75:ef:e4:65:04:b7:a2:12:f6:
45:d4:c3:6f:6b:79:45:c7:31:d0:52:32:74:1e:59:
a2:5b:d0:6d:b8:27:7a:5a:7c:64:b8:32:37:4a:2e:
36:b5:8a:87:c9:e8:d6:5b:36:35:79:96:ce:a2:6e:
2d:22:d1:71:39:63:0e:68:94:8a:16:1f:c6:e0:df:
c6:57:6f:d2:02:53:8b:34:ea:79:45:81:cd:23:99:
4f:65:7d:b2:5f:0a:a0:6c:45:34:00:62:80:18:81:
ba:29:56:55:1f:8b:50:b4:9e:bd:79:c0:6a:91:5d:
14:d3:2b:0e:48:cd:72:a0:23:04:54:38:47:5b:2e:
43:67:69:f9:09:8d:d8:c6:61:cb:92:b0:a3:ec:26:
71:0d:53:68:7f:ed:fb:97:30:9b:66:2f:df:75:8d:
07:e5:c5:c0:4c:a8:0d:08:19:e1:91:a0:5a:7f:a4:
0c:3a:f2:99:16:12:93:17:3f:32:40:43:29:76:a3:
ad:4b:72:fe:c1:5f:0a:43:ae:a3:a5:9c:61:f9:b3:
12:fb:1b:f7:b9:93:48:bf:7b:1d:ed:03:b6:0a:b5:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:01:1D:DA:53:DC:BF:1F:33:3E:87:C3:B9:81:5C:00:AC:0A:D5
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/P8cBHdpT3L8fMz6Hw7mBXACsCtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.38.0/24
89.36.139.0/24
IPv6:
2a05:76c0::/29
2a05:7b81::/32
2a05:7b85::/32
2a05:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
55:7d:b6:73:ee:1f:9a:66:35:b9:ef:db:09:95:23:1e:95:03:
62:e5:4b:1e:d6:52:1e:d1:6e:3c:ad:88:c3:7b:ac:99:cb:6e:
75:9a:23:57:20:04:23:f9:e6:0e:16:5b:3d:4a:0a:8b:75:34:
84:21:0c:ed:a5:8f:aa:9a:da:9a:57:96:3e:17:e1:c5:62:79:
6d:28:fb:9b:38:e9:f0:2e:f1:52:93:ec:0a:22:bf:0a:3a:ed:
cf:f0:a5:5d:c6:d1:82:64:ed:53:2d:2a:f3:48:33:a9:95:8f:
e7:93:f5:c4:21:ae:96:7e:80:2f:a2:45:b5:2c:f3:ef:1f:80:
8b:c8:df:cd:e4:df:9c:5d:a7:fc:58:a2:93:87:4d:eb:6b:72:
9c:8c:70:3f:cd:0c:f4:35:05:de:f2:03:f7:81:23:71:65:70:
e8:4e:82:a6:4a:7c:ca:dd:69:db:83:86:68:6f:74:31:96:5d:
4d:3c:db:85:43:9f:27:8b:f7:2e:b6:9e:2a:02:7b:a0:68:c7:
e6:f3:cd:50:bd:03:f9:9f:6a:a4:2c:b4:a5:fe:3e:f7:01:fa:
8f:75:81:8c:a6:e2:06:37:e8:6f:de:e1:ea:35:0a:0b:68:58:
2e:33:87:66:03:9c:94:2d:c2:5d:82:c5:28:3c:a0:a4:38:7f:
6a:bb:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:57 2024 by rpki-client on console-fra.rpki-client.org