Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EpBTsez--DHyPkc8W1_cbon-Iy8.roa
File: EpBTsez--DHyPkc8W1_cbon-Iy8.roa (raw, json)
Hash identifier: WSQMvPswqnvjcyj7u/lGIAamRo8zT2Pb0vn8j1TtQrA=
Subject key identifier: 12:90:53:B1:EC:FE:F8:31:F2:3E:47:3C:5B:5F:DC:6E:89:FE:23:2F
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0183BD3700048A9A740DD0FDE55069393404
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EpBTsez--DHyPkc8W1_cbon-Iy8.roa
Signing time: Sun 09 Oct 2022 14:47:21 +0000
ROA not before: Sun 09 Oct 2022 14:47:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33911
IP address blocks: 89.35.158.0/24 maxlen: 24
89.34.24.0/23 maxlen: 23
89.41.176.0/23 maxlen: 23
188.214.88.0/24 maxlen: 24
89.41.182.0/24 maxlen: 24
77.81.181.0/24 maxlen: 24
89.41.183.0/24 maxlen: 24
2001:4d18:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bd:37:00:04:8a:9a:74:0d:d0:fd:e5:50:69:39:34:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Oct 9 14:47:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=129053b1ecfef831f23e473c5b5fdc6e89fe232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a2:05:5d:b7:20:11:9e:09:d8:54:25:c3:f7:
35:7d:b4:93:d4:95:f5:14:37:9d:a2:02:5f:5b:e8:
3d:3d:cd:33:20:49:72:2e:43:43:52:ed:c6:77:01:
ac:65:10:4a:83:04:88:9c:5d:ac:f2:66:70:0f:b1:
84:d9:0c:f6:29:96:25:10:76:7e:0d:65:d2:e7:da:
5b:6f:1e:2b:96:04:50:c3:4d:7c:28:23:66:34:cd:
92:7a:49:3d:59:d1:33:6a:d4:20:70:aa:2b:58:fb:
e5:e5:92:03:6c:17:7d:b2:87:4a:2c:7c:a9:14:dc:
39:81:4f:06:04:19:e3:a1:72:33:22:c5:1e:f1:13:
8f:83:e3:27:24:c2:34:73:b7:a2:38:d0:fb:40:87:
fc:04:1d:ae:a8:2a:0d:d8:4d:1b:15:04:fb:ce:87:
f1:4f:a4:e6:1c:4e:ec:ff:50:33:a9:a2:85:9c:46:
db:13:b1:f2:cb:f4:40:3b:2d:0d:b4:8f:09:be:e4:
59:2b:f5:04:95:b0:b9:c5:70:17:95:d3:00:f3:17:
b4:e3:aa:c1:7d:4f:60:7e:26:25:55:fa:7f:af:9a:
fb:6b:99:28:57:c1:28:34:42:ed:a2:e3:7e:99:9a:
b0:71:a1:5e:63:48:b2:2d:7c:ed:47:b4:12:fd:1b:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:53:B1:EC:FE:F8:31:F2:3E:47:3C:5B:5F:DC:6E:89:FE:23:2F
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/EpBTsez--DHyPkc8W1_cbon-Iy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.181.0/24
89.34.24.0/23
89.35.158.0/24
89.41.176.0/23
89.41.182.0/23
188.214.88.0/24
IPv6:
2001:4d18:2::/48
Signature Algorithm: sha256WithRSAEncryption
27:8a:21:d1:44:78:3a:30:ae:ac:ff:b9:84:86:3b:35:45:03:
bc:16:3f:d7:75:8a:9d:8f:d1:a0:8e:cd:32:c6:69:65:34:ae:
32:ab:05:44:b0:09:7f:30:66:e0:be:63:4c:83:c2:92:3c:a4:
c7:1e:e5:8c:0a:f9:45:f9:2e:f4:0e:88:3f:ec:fd:eb:1d:f9:
37:3e:39:ce:dc:2e:b7:ef:7a:4c:d1:1d:b1:29:7e:be:68:75:
8f:b3:3a:b1:37:d1:7f:6d:e7:e8:23:bd:53:17:aa:73:a9:ec:
2e:f3:8f:65:75:63:bf:af:38:a6:d5:33:c4:02:5b:ea:91:bf:
ed:93:11:bf:55:f6:1f:c8:af:4b:c8:1e:98:66:84:03:52:a1:
8d:f9:2e:82:cd:c3:63:a5:8b:8b:8f:04:2c:60:aa:62:f7:d2:
ac:80:46:43:1b:9a:7d:f0:40:be:3e:88:ea:51:05:3c:1a:da:
36:24:ab:40:41:dc:55:39:00:35:7c:1d:03:04:bc:0e:d9:33:
35:17:1f:1d:0e:0c:c8:01:9e:d2:55:f8:e8:e3:2b:3d:49:59:
c2:be:94:eb:e6:90:47:15:09:09:02:21:1c:83:80:1d:8f:e1:
9d:ea:f7:03:06:75:b4:4a:f1:de:59:be:fc:b7:a9:8e:38:a2:
19:77:9b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:49 2024 by rpki-client on console-ams.rpki-client.org