Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cauHmVSGiMJlR7OsrS9ZFKRG1co.roa
File: cauHmVSGiMJlR7OsrS9ZFKRG1co.roa (raw, json)
Hash identifier: Ud1gft150YHZ98QSKdV252MUWUU/sTFwtcOdxoaPFVA=
Subject key identifier: 71:AB:87:99:54:86:88:C2:65:47:B3:AC:AD:2F:59:14:A4:46:D5:CA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 365DBFFC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cauHmVSGiMJlR7OsrS9ZFKRG1co.roa
Signing time: Sat 01 Jan 2022 13:57:20 +0000
ROA not before: Sat 01 Jan 2022 13:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39569
IP address blocks: 86.106.81.0/24 maxlen: 24
89.47.116.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.40.82.0/23 maxlen: 23
89.42.142.0/23 maxlen: 23
188.241.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912113660 (0x365dbffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 13:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71ab8799548688c26547b3acad2f5914a446d5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:ae:be:7d:d3:c3:89:30:01:6a:c3:9b:60:
37:d7:b2:fa:b0:1e:5c:55:80:e0:4d:20:0e:6e:4e:
c8:0c:b2:06:62:19:9c:c9:eb:47:57:3e:4b:9e:57:
45:cf:6b:1d:7b:48:df:60:50:2e:9c:9b:e1:c4:aa:
56:55:b1:5a:9a:b6:e2:35:a5:2f:99:22:6c:a0:3b:
9d:a0:67:ce:3b:27:ba:94:7f:60:c2:0b:2a:c3:11:
8f:63:02:a3:e0:f4:2e:4d:fa:c7:fc:de:81:b5:65:
4b:84:2f:87:7f:7d:40:b2:39:97:21:97:9d:87:2c:
3f:ae:94:aa:f7:f9:a7:e0:a0:99:ac:71:db:53:a1:
ab:92:fa:36:a1:a6:05:c7:38:45:cf:46:47:a4:6c:
74:b0:4b:4f:51:56:7c:a1:a1:0e:46:73:64:54:51:
1e:76:a1:0b:0a:5a:e3:d6:da:c5:76:09:35:83:f0:
9e:88:1b:44:9b:41:8a:5e:6f:8a:a4:84:63:4d:89:
e4:7b:ba:56:31:60:48:a0:90:60:6f:54:3e:68:e6:
29:6a:88:74:d7:ee:60:92:1b:2e:c1:86:51:04:f8:
e0:8b:aa:20:72:24:35:3f:c6:34:5f:60:90:b2:47:
26:51:de:3d:3f:2e:2b:04:59:c8:b2:dc:0f:15:22:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:87:99:54:86:88:C2:65:47:B3:AC:AD:2F:59:14:A4:46:D5:CA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cauHmVSGiMJlR7OsrS9ZFKRG1co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.40.82.0/23
89.42.142.0/23
89.47.116.0-89.47.118.255
188.241.3.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d2:18:f2:b0:b4:a0:e5:9c:a7:94:ce:14:19:c2:4c:2d:04:
56:d9:52:c8:0b:ae:a9:c7:f7:70:86:99:78:f4:f6:5c:94:8f:
6c:bc:9c:3f:75:6a:9d:ad:33:49:db:0c:1b:54:75:ef:39:18:
ae:c2:06:e0:5f:5d:3e:9d:03:e7:ec:02:ec:5e:3f:2d:94:23:
ff:3e:2e:c5:50:9a:6e:57:c4:b9:7b:d5:94:ec:41:81:f5:12:
2d:e9:83:1a:81:a1:d9:c4:fe:00:9c:a7:35:e2:eb:be:a2:02:
84:7b:e8:17:e8:f6:c3:37:a6:04:89:8d:41:14:63:cf:e4:96:
33:2a:41:1b:cc:49:db:29:79:7b:35:4b:99:cc:9f:b2:31:05:
06:0d:9b:96:71:b4:3a:46:79:60:8b:92:f9:9d:84:f7:cd:e9:
3b:30:d7:a7:29:20:b8:f8:83:c1:a9:53:60:7e:d1:24:7e:a3:
38:c0:95:6c:e2:4e:41:bc:0d:a1:ac:a7:c6:43:a1:6e:16:35:
34:c7:39:9c:00:c6:69:71:5b:77:d0:3b:2d:df:2b:a1:d5:0c:
17:83:4c:88:90:a6:56:ba:ff:13:f0:9d:85:a9:46:85:18:84:
26:22:af:1a:db:7f:76:79:09:8d:4e:bb:98:b9:86:78:af:43:
39:eb:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org