Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/xybINrgkLim3xJISYxQtxH1si6E.roa
File: xybINrgkLim3xJISYxQtxH1si6E.roa (raw, json)
Hash identifier: LkLDvKSy0kmZRgZdYLCGLUF4cINN94sj+n2+taFhb1A=
Subject key identifier: C7:26:C8:36:B8:24:2E:29:B7:C4:92:12:63:14:2D:C4:7D:6C:8B:A1
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 01836F63B351341825117BC7EE7DCB993791
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/xybINrgkLim3xJISYxQtxH1si6E.roa
Signing time: Sat 24 Sep 2022 12:05:48 +0000
ROA not before: Sat 24 Sep 2022 12:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49635
IP address blocks: 217.71.200.0/21 maxlen: 24
27.0.172.0/22 maxlen: 24
161.22.40.0/21 maxlen: 24
93.189.88.0/21 maxlen: 24
46.183.112.0/21 maxlen: 24
185.254.204.0/22 maxlen: 24
80.240.126.0/23 maxlen: 24
85.208.20.0/22 maxlen: 24
185.166.212.0/22 maxlen: 24
103.23.60.0/23 maxlen: 24
185.253.152.0/22 maxlen: 24
79.143.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6f:63:b3:51:34:18:25:11:7b:c7:ee:7d:cb:99:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Sep 24 12:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c726c836b8242e29b7c4921263142dc47d6c8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:5b:99:1a:d8:3e:e3:b9:16:94:bf:be:ac:
32:fd:67:5b:c0:99:27:13:e4:60:f1:0c:a5:79:75:
23:f4:64:c4:89:96:8f:b5:79:2b:7b:38:9d:83:0e:
f4:51:ac:9b:8a:37:12:51:5c:e0:48:d9:9a:15:94:
f9:c6:eb:0c:6c:6b:da:e3:60:a8:00:68:63:a9:b3:
88:45:68:42:65:87:5d:fa:43:2b:8d:41:61:74:bd:
14:c0:af:67:50:3c:7d:c6:28:43:bf:bc:80:9a:2e:
cf:48:3e:56:63:fb:f9:be:9f:08:73:06:1a:f1:60:
1d:95:0a:5a:0d:c9:f1:10:72:43:51:23:6b:a9:7a:
3a:40:93:13:b9:f3:9b:9e:e7:a5:b1:37:89:c4:66:
61:2e:b2:ab:56:4a:e5:d8:e0:b8:34:e5:ad:27:99:
ba:b8:eb:c3:37:55:78:d1:00:b3:6d:71:1a:51:a3:
2c:db:fd:28:79:ce:76:33:c4:15:9b:83:d8:68:b0:
99:2f:07:61:35:9e:b9:d8:9b:33:9b:ed:aa:51:57:
b5:d3:2e:a8:18:dd:96:14:c7:2b:32:a3:fa:0f:8c:
aa:66:64:d6:70:fd:e4:33:4d:df:64:1c:18:a6:f4:
ce:39:6b:99:4d:03:4b:b3:33:9e:3b:5c:7e:85:b4:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:C8:36:B8:24:2E:29:B7:C4:92:12:63:14:2D:C4:7D:6C:8B:A1
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/xybINrgkLim3xJISYxQtxH1si6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.172.0/22
46.183.112.0/21
79.143.88.0/21
80.240.126.0/23
85.208.20.0/22
93.189.88.0/21
103.23.60.0/23
161.22.40.0/21
185.166.212.0/22
185.253.152.0/22
185.254.204.0/22
217.71.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:55:67:b3:22:00:13:42:ed:26:96:51:cf:2e:51:c1:bf:01:
fd:7e:a8:92:53:ae:e0:b6:cc:68:95:44:24:a1:f4:eb:21:1c:
dc:8e:f2:c7:44:4b:bb:c2:0a:27:3a:46:ee:95:5d:71:20:c4:
2a:23:e8:11:25:f5:9c:64:de:e1:0a:e0:27:cf:64:29:72:74:
eb:8f:d9:88:15:af:79:e5:df:12:29:fc:28:01:22:3e:da:24:
e7:de:b6:85:fa:ed:9f:49:1f:f3:d0:82:9d:69:21:93:d1:16:
be:17:e7:fc:d4:9c:49:f4:47:e6:9a:86:78:15:a9:ca:5c:74:
b3:6f:94:a8:a2:b4:79:00:88:d7:a1:97:21:4c:89:a8:dc:b9:
59:91:6f:95:bd:9f:f8:61:6e:44:d7:ce:15:08:91:4d:07:35:
0c:d8:46:bd:50:c8:50:b3:f6:4c:23:74:66:4c:42:b3:7d:d7:
2b:d5:78:21:b0:2e:f7:50:17:f0:78:d2:22:bc:8e:9d:b1:b8:
e0:a9:d0:ff:06:76:15:03:5f:e5:e0:a2:ba:2b:1a:a7:ef:78:
07:cf:77:22:0e:76:fa:a5:74:33:35:3d:ad:60:36:74:05:5b:
06:7e:88:3b:47:96:56:4e:2d:e1:0b:47:50:3b:0f:1e:a6:a8:
2a:f0:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:24 2024 by rpki-client on console-ams.rpki-client.org