Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q-9hDdNsU-nwuvCy_w7o_QizNuc.roa
File: q-9hDdNsU-nwuvCy_w7o_QizNuc.roa (raw, json)
Hash identifier: Lulxh9EjeeIPGAnFcJEV+ADTkk7euojGHEPihEjIEEg=
Subject key identifier: AB:EF:61:0D:D3:6C:53:E9:F0:BA:F0:B2:FF:0E:E8:FD:08:B3:36:E7
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0182584B905591D8000D01C85F158528FC07
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q-9hDdNsU-nwuvCy_w7o_QizNuc.roa
Signing time: Mon 01 Aug 2022 07:25:23 +0000
ROA not before: Mon 01 Aug 2022 07:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39543
IP address blocks: 89.33.12.0/23 maxlen: 23
188.241.240.0/23 maxlen: 23
188.241.240.0/24 maxlen: 24
188.241.241.0/24 maxlen: 24
193.19.192.0/24 maxlen: 24
193.19.192.0/22 maxlen: 24
93.113.176.0/21 maxlen: 21
93.113.181.0/24 maxlen: 24
93.113.204.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
89.40.67.0/24 maxlen: 24
89.43.140.0/22 maxlen: 22
89.42.80.0/21 maxlen: 21
89.42.88.0/21 maxlen: 21
89.35.158.0/24 maxlen: 24
89.45.164.0/24 maxlen: 24
89.39.111.0/24 maxlen: 24
89.46.2.0/23 maxlen: 23
89.46.2.0/24 maxlen: 24
89.46.4.0/24 maxlen: 24
89.46.3.0/24 maxlen: 24
89.46.0.0/23 maxlen: 23
195.28.2.0/23 maxlen: 23
89.34.224.0/21 maxlen: 21
89.34.224.0/22 maxlen: 22
89.34.228.0/23 maxlen: 23
89.34.230.0/23 maxlen: 23
89.47.96.0/24 maxlen: 24
89.47.96.0/20 maxlen: 20
89.47.97.0/24 maxlen: 24
89.47.98.0/24 maxlen: 24
89.47.99.0/24 maxlen: 24
89.47.101.0/24 maxlen: 24
93.114.194.0/24 maxlen: 24
89.47.100.0/24 maxlen: 24
89.47.103.0/24 maxlen: 24
89.47.102.0/24 maxlen: 24
89.47.104.0/24 maxlen: 24
89.47.105.0/24 maxlen: 24
89.47.106.0/24 maxlen: 24
89.47.108.0/24 maxlen: 24
89.47.107.0/24 maxlen: 24
89.47.110.0/24 maxlen: 24
89.47.109.0/24 maxlen: 24
89.47.111.0/24 maxlen: 24
89.47.112.0/20 maxlen: 20
89.47.113.0/24 maxlen: 24
89.47.115.0/24 maxlen: 24
89.47.114.0/24 maxlen: 24
89.47.118.0/24 maxlen: 24
89.47.119.0/24 maxlen: 24
89.37.196.0/23 maxlen: 23
89.34.27.0/24 maxlen: 24
2001:4d18::/32 maxlen: 32
2001:4d18::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:4b:90:55:91:d8:00:0d:01:c8:5f:15:85:28:fc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 1 07:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abef610dd36c53e9f0baf0b2ff0ee8fd08b336e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:b4:94:2f:c2:19:c0:3c:2e:a0:aa:db:c3:
c8:3b:b3:f1:d2:b9:4d:50:dc:9e:bc:67:e8:73:d9:
9a:85:93:7b:b1:20:86:70:16:a5:5d:72:4c:f3:d6:
27:67:9d:1e:dd:b2:ad:59:86:6a:51:a7:76:31:93:
a4:d9:b3:82:82:e3:7c:45:ab:90:d1:8d:bd:67:a6:
a6:bc:d7:34:f9:fd:b8:4a:7c:a9:52:7d:88:09:43:
3b:a0:56:5c:42:91:a1:cb:be:8a:41:ef:85:90:2b:
b1:c4:59:72:5b:74:17:17:d0:06:67:12:71:ff:a0:
e2:7b:68:e5:5d:4a:ab:31:55:a7:c4:4f:a1:0f:85:
0e:b9:1b:cb:72:f4:a6:25:27:6d:f1:00:95:5a:7b:
54:68:c1:10:b1:9e:15:eb:a8:d1:3e:6b:06:18:b7:
1d:50:6b:d0:02:b0:a6:cb:54:1f:2e:4a:4f:27:b7:
60:b6:e3:89:88:17:ec:b4:15:d8:51:cb:d7:75:65:
a1:fd:7c:78:28:c2:9a:4b:91:81:c3:12:77:aa:f2:
dc:aa:47:1f:81:c5:b9:2e:29:34:be:9e:66:12:b2:
a7:ca:b5:bb:2c:40:59:8e:97:bc:e2:f8:f7:92:39:
ed:d7:36:d0:71:59:ed:ee:4d:94:34:5f:19:ba:68:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:61:0D:D3:6C:53:E9:F0:BA:F0:B2:FF:0E:E8:FD:08:B3:36:E7
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/q-9hDdNsU-nwuvCy_w7o_QizNuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.12.0/23
89.34.27.0/24
89.34.224.0/21
89.35.158.0/24
89.37.196.0/23
89.39.111.0/24
89.40.67.0/24
89.42.80.0/20
89.43.140.0/22
89.45.164.0/24
89.46.0.0-89.46.4.255
89.47.96.0/19
93.113.176.0/21
93.113.204.0/24
93.114.79.0/24
93.114.194.0/24
188.241.240.0/23
193.19.192.0/22
195.28.2.0/23
IPv6:
2001:4d18::/32
Signature Algorithm: sha256WithRSAEncryption
09:55:66:1b:a8:12:cc:3d:60:a5:3d:09:c3:48:9d:e6:e7:9b:
c7:06:68:5f:6e:26:d1:88:54:c2:b6:f4:a0:7e:ac:62:20:c4:
4d:a5:2f:41:04:99:4c:72:0e:5c:36:ed:22:0e:02:05:89:f2:
e7:32:d1:57:5f:56:73:fa:ae:58:78:67:68:4c:c0:88:24:54:
33:e4:28:db:4b:d7:1b:a2:47:35:91:6a:59:87:0a:69:c2:20:
97:78:3e:42:b4:80:69:13:0b:fe:d4:34:72:16:aa:02:53:2c:
e3:5a:b5:e7:4d:79:f6:f2:3c:b3:52:98:98:f5:47:a5:52:31:
26:3a:2b:3f:18:d3:fb:9f:f1:5f:e6:cb:f6:61:ad:7d:3f:1e:
b5:7e:7c:b7:96:6c:5c:36:1e:7b:93:e9:1d:0f:dd:34:c3:d2:
05:bb:a9:ad:16:49:10:ae:4a:02:d7:79:d0:f8:8f:bd:7f:7f:
f4:06:43:24:ad:14:43:4b:6b:7a:b5:24:0d:20:12:01:cf:4c:
8e:01:f5:6a:40:8b:07:f8:a8:3b:0f:fd:c7:e0:30:09:2f:c7:
14:ab:72:3f:10:ea:a5:77:ac:2c:7b:0b:92:77:77:9e:66:08:
3e:e5:1b:d5:f8:6e:b7:24:85:16:dd:a2:64:14:8b:f1:66:a5:
81:31:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org