Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/49TaYvi1n58CAec9_SR6qBDy7lY.roa
File: 49TaYvi1n58CAec9_SR6qBDy7lY.roa (raw, json)
Hash identifier: i/NwZeGzRZFDuBIW724Z85tkgtS/zY6U35ter1EAZqs=
Subject key identifier: E3:D4:DA:62:F8:B5:9F:9F:02:01:E7:3D:FD:24:7A:A8:10:F2:EE:56
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01849B5A5388A8872170BE2B8ED47AAA2D0E
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/49TaYvi1n58CAec9_SR6qBDy7lY.roa
Signing time: Mon 21 Nov 2022 18:01:38 +0000
ROA not before: Mon 21 Nov 2022 18:01:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211183
IP address blocks: 79.133.183.0/24 maxlen: 24
79.133.182.0/24 maxlen: 24
79.133.181.0/24 maxlen: 24
185.240.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:5a:53:88:a8:87:21:70:be:2b:8e:d4:7a:aa:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Nov 21 18:01:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d4da62f8b59f9f0201e73dfd247aa810f2ee56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:5e:6d:50:7d:e1:aa:02:7b:e7:79:13:c6:
f0:90:6a:e9:09:6b:cc:a5:45:3d:ec:44:a0:ef:5a:
78:dc:1a:eb:5d:7a:f1:96:87:ea:94:6b:4f:52:ee:
b9:f0:5f:27:bd:08:df:19:d9:5b:56:9d:98:5c:4e:
78:2a:02:10:d2:1c:5c:43:ff:9a:45:86:c3:27:b4:
e0:f1:67:c7:76:2c:d6:32:8b:6c:63:1f:84:53:00:
fe:98:48:4d:15:ab:45:18:ae:61:4f:1f:41:fa:7c:
2b:4e:9e:a0:2f:05:8e:26:77:d9:d3:fa:24:1a:0e:
1c:5c:95:05:df:5b:67:97:74:db:a9:5a:d7:60:48:
96:1f:fa:9f:ce:6f:de:71:c2:af:b0:fa:9c:84:93:
40:a4:dd:62:5a:93:80:2c:6e:93:15:e0:57:28:49:
36:64:7f:c0:22:3a:f9:00:1f:e7:1c:15:ee:ac:8a:
d4:3c:c7:4f:54:1d:e8:60:04:db:3f:8b:e3:2f:a9:
c0:2a:b4:a3:c8:21:22:b6:71:a3:e3:a5:14:6c:8e:
30:70:62:97:87:0b:b6:c8:d8:bd:26:d6:ea:6e:69:
5d:d1:3e:17:7a:e4:27:36:e2:22:69:8a:25:cd:4b:
ca:23:a5:4f:ee:5b:a6:32:9a:72:b7:0f:35:36:ad:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D4:DA:62:F8:B5:9F:9F:02:01:E7:3D:FD:24:7A:A8:10:F2:EE:56
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/49TaYvi1n58CAec9_SR6qBDy7lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.181.0-79.133.183.255
185.240.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e6:a6:41:9b:d7:dd:34:fa:b8:38:5a:f8:bb:92:e4:cc:56:
a4:63:66:cf:23:c9:b2:8d:64:54:7e:f2:06:79:79:87:d7:28:
53:b1:5b:57:ec:6f:fd:32:d1:05:3f:8b:47:ca:68:64:7a:6c:
f6:0c:d2:13:00:db:c8:fc:01:ac:c2:b4:84:12:c6:3e:78:be:
19:4c:b6:f3:fe:31:03:b6:c6:22:df:9c:4b:f8:65:b0:ba:16:
6f:70:51:7b:6c:11:4b:56:c1:f2:39:f6:72:66:94:29:8b:64:
a4:18:31:b4:66:87:9f:3c:c8:45:0c:cb:b2:4e:c7:3d:d1:16:
b9:54:72:89:25:7e:1c:08:cc:72:ae:82:56:10:7a:57:da:02:
17:e4:6f:f9:ef:a4:9b:46:14:76:42:df:14:8e:f5:ad:15:b2:
54:a7:74:23:25:94:41:5b:d3:0c:17:da:4c:72:38:79:6f:6e:
70:a4:08:9a:7f:09:dd:ad:cc:83:eb:11:1b:d1:31:a2:ce:80:
35:04:49:e6:3d:35:eb:f3:08:da:2d:71:a9:d3:6c:f4:7e:07:
f4:de:22:1a:8a:ff:e9:5d:d7:63:c7:2d:ee:d6:76:06:b3:45:
48:7f:56:cb:fd:d5:51:ff:80:cd:e8:d5:70:48:9e:84:ca:a0:
13:ef:0a:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org