Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/L6uaA2YUpemDavLDFEyQaXFMO0M.roa
File: L6uaA2YUpemDavLDFEyQaXFMO0M.roa (raw, json)
Hash identifier: 7dGWEGmrYJWcWlN+H4IISjWTX4hmtpRoexqjDSp7x/M=
Subject key identifier: 2F:AB:9A:03:66:14:A5:E9:83:6A:F2:C3:14:4C:90:69:71:4C:3B:43
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 3606EA87
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/L6uaA2YUpemDavLDFEyQaXFMO0M.roa
Signing time: Sat 01 Jan 2022 05:53:36 +0000
ROA not before: Sat 01 Jan 2022 05:53:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29141
IP address blocks: 93.89.24.0/24 maxlen: 24
37.247.112.0/24 maxlen: 24
37.247.118.0/24 maxlen: 24
37.247.113.0/24 maxlen: 24
37.247.115.0/24 maxlen: 24
37.247.114.0/24 maxlen: 24
185.7.82.0/24 maxlen: 24
185.7.83.0/24 maxlen: 24
2a03:402::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906422919 (0x3606ea87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 05:53:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fab9a036614a5e9836af2c3144c9069714c3b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:9d:96:27:5c:dd:3d:ea:fa:e5:68:86:6a:
b8:36:3d:cd:5a:eb:80:d8:90:cf:69:1f:1b:e1:e3:
f2:b8:3f:02:e6:00:ff:59:97:39:72:c6:43:cd:84:
f6:59:d9:5b:31:af:ca:10:c8:17:23:af:72:5a:5f:
ed:6b:b9:61:60:d7:30:fc:76:85:bd:39:84:42:f8:
5c:cb:8a:c2:05:5c:2e:ab:6e:77:13:e6:71:e1:7f:
b0:b6:31:8d:a3:a8:ff:a4:05:3e:80:27:b4:e7:89:
bf:93:f7:4f:9b:79:52:6d:e9:59:77:df:1c:37:07:
ab:7a:22:4d:44:5d:e6:de:67:4b:27:22:43:57:3c:
ad:8a:44:02:66:df:21:eb:77:fc:0a:d1:33:49:cf:
53:d3:a7:10:2a:e8:0c:2c:c4:df:28:c7:dd:00:5a:
0a:e5:27:dc:f3:d3:1d:8f:3c:82:19:ee:20:03:71:
4f:4b:e5:f4:e0:b7:77:b6:72:50:65:b6:21:4e:3d:
48:ff:ca:3d:ef:a7:6c:01:ec:ae:12:51:0c:67:8f:
6a:33:fe:ba:e4:34:00:fa:67:5f:c8:6b:06:2c:33:
9b:09:94:84:9e:6a:4e:ca:6e:9b:b6:d5:56:55:aa:
13:c4:a9:c4:bd:c9:aa:d6:7a:dd:ec:7a:ea:79:d3:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AB:9A:03:66:14:A5:E9:83:6A:F2:C3:14:4C:90:69:71:4C:3B:43
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/L6uaA2YUpemDavLDFEyQaXFMO0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.112.0/22
37.247.118.0/24
93.89.24.0/24
185.7.82.0/23
IPv6:
2a03:402::/32
Signature Algorithm: sha256WithRSAEncryption
e5:7b:02:03:08:b9:18:08:c3:27:07:48:83:71:47:c3:2d:ff:
65:1a:8b:5f:f8:fc:66:6e:3e:61:27:6b:78:90:75:06:82:16:
ea:a0:c0:06:05:ee:6b:ed:72:6f:9d:68:d6:c9:f6:9b:64:11:
98:de:3f:86:1e:9a:24:31:34:b0:ac:23:85:66:1d:1f:55:c1:
03:9b:73:4f:ae:44:b3:45:fe:89:b7:cd:9b:b3:e1:b3:24:a4:
fd:34:fb:2d:0d:54:c2:87:e1:16:67:b1:fa:c9:3d:2e:3c:03:
81:81:4a:43:9f:cf:ea:6b:8d:b9:ed:ff:8d:4a:c0:db:a8:d9:
ed:94:69:71:3b:cb:52:1c:ce:cf:80:b0:1c:6e:67:3b:a5:c3:
90:4e:8f:d5:83:08:37:b9:8c:4e:63:27:05:14:56:57:f1:01:
d5:9c:6b:a8:04:51:86:9a:9c:4a:e8:d4:e4:71:21:fa:aa:9e:
a1:c6:bf:95:99:f5:c7:e4:55:43:7e:a8:55:de:51:a8:54:ca:
ec:6f:47:35:13:fe:3b:36:e0:86:c6:a3:9b:55:74:95:24:b9:
e9:7f:05:23:c0:c7:d4:7c:dc:4e:89:d9:b6:41:31:de:15:0a:
02:58:78:3e:d5:9f:32:0f:76:3a:95:6f:69:4b:8c:8d:43:74:
e5:45:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org