Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/COJOwycmCxZv_lMzeGpNducg17A.roa
File: COJOwycmCxZv_lMzeGpNducg17A.roa (raw, json)
Hash identifier: PoKjOeXTQSqKwE40jpotxEYKzmuza2dN14ByxsDef6M=
Subject key identifier: 08:E2:4E:C3:27:26:0B:16:6F:FE:53:33:78:6A:4D:76:E7:20:D7:B0
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 0184ECAD08157FF404A00E7E8C345A9F7672
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/COJOwycmCxZv_lMzeGpNducg17A.roa
Signing time: Wed 07 Dec 2022 13:01:13 +0000
ROA not before: Wed 07 Dec 2022 13:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204213
IP address blocks: 89.39.208.0/24 maxlen: 24
217.144.105.0/24 maxlen: 24
217.144.104.0/24 maxlen: 24
185.94.96.0/24 maxlen: 24
185.94.98.0/24 maxlen: 24
185.94.97.0/24 maxlen: 24
185.94.99.0/24 maxlen: 24
89.32.251.0/24 maxlen: 24
89.32.249.0/24 maxlen: 24
89.32.248.0/24 maxlen: 24
89.32.250.0/24 maxlen: 24
89.42.209.0/24 maxlen: 24
89.42.211.0/24 maxlen: 24
89.42.210.0/24 maxlen: 24
89.45.89.0/24 maxlen: 24
188.212.22.0/24 maxlen: 24
89.42.208.0/24 maxlen: 24
217.144.106.0/24 maxlen: 24
217.144.107.0/24 maxlen: 24
86.106.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:ad:08:15:7f:f4:04:a0:0e:7e:8c:34:5a:9f:76:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Dec 7 13:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e24ec327260b166ffe5333786a4d76e720d7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:f9:1c:68:b6:16:ee:1b:d7:f0:13:30:38:
c7:f1:6a:cb:cc:c1:67:d6:db:07:2b:96:b9:e7:c1:
b4:d2:1a:cd:0b:99:3c:9a:e3:f8:de:b7:b9:69:51:
62:d6:2a:74:3a:f0:2d:eb:f1:b6:7a:f8:42:c8:4c:
15:eb:bb:4b:38:a3:d6:dc:fc:d1:fb:91:59:f7:61:
4a:c9:96:fd:7f:b6:7b:cd:d7:f4:c3:9e:9e:cb:7f:
0c:ae:67:c9:4e:f0:de:9f:d7:a7:e2:3e:00:c6:14:
cd:b5:65:60:72:e2:79:48:72:0b:af:59:99:75:77:
d9:74:42:66:05:10:2c:bc:12:b6:67:20:67:f7:25:
ba:40:6c:a0:72:72:31:6f:f9:5f:42:bb:b0:14:f8:
38:66:47:b5:0c:e9:12:16:16:72:f9:65:34:05:4c:
08:83:7b:41:db:f0:9a:ca:ca:76:4b:9c:c8:d7:85:
88:57:d7:cf:f8:f8:a0:c2:16:cb:a4:e4:85:c8:a9:
fb:3e:8f:39:e2:14:92:5c:92:cb:0e:22:dc:e8:f7:
1f:35:f4:88:71:92:af:f1:a1:16:81:6e:9c:4e:94:
c0:d7:45:84:aa:2f:57:29:9b:fd:c3:29:c4:e2:5f:
d7:bc:a1:aa:7e:bf:03:a0:f0:65:90:7e:63:90:22:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:4E:C3:27:26:0B:16:6F:FE:53:33:78:6A:4D:76:E7:20:D7:B0
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/COJOwycmCxZv_lMzeGpNducg17A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.142.0/24
89.32.248.0/22
89.39.208.0/24
89.42.208.0/22
89.45.89.0/24
185.94.96.0/22
188.212.22.0/24
217.144.104.0/22
Signature Algorithm: sha256WithRSAEncryption
10:ae:b6:5b:74:af:ac:ed:d0:24:68:aa:4a:ae:ae:32:55:d2:
eb:e3:67:79:d1:dd:f5:ee:1b:1b:11:9f:94:ec:32:aa:60:f1:
d7:c5:d1:af:07:2c:f6:40:14:51:88:6b:94:22:17:c0:f4:af:
60:17:6f:45:62:2f:00:f9:81:ac:62:62:f5:7f:5d:bf:a4:f1:
42:e5:9a:4c:b2:e0:46:13:a3:23:7c:08:59:de:21:1e:68:f5:
01:61:71:9c:f6:56:3e:81:01:59:1f:33:c5:e2:bb:f2:5a:22:
e5:78:ca:02:ca:0a:4b:5f:41:3c:b0:9e:33:51:d3:94:35:96:
f8:8d:27:b2:21:ec:73:8d:9d:64:a2:f6:10:98:3f:3a:8c:51:
09:99:1b:d3:96:4d:84:91:58:6f:45:58:62:f3:dc:fc:c7:21:
99:58:0b:db:1f:66:cf:92:b4:be:50:cd:c4:b8:44:03:a5:77:
33:dd:8e:aa:d1:c7:f9:b9:8b:ba:bc:96:72:5d:a3:d9:2c:5a:
79:a8:15:11:90:b0:b6:ca:ef:7f:42:6a:2b:2c:33:51:c9:42:
cd:47:9a:c5:a1:71:51:99:67:6b:ce:9b:a3:6c:4d:b8:04:f7:
dc:a9:be:5c:f3:58:9e:eb:44:35:dd:2f:e3:82:30:3b:41:d8:
0e:59:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:38 2024 by rpki-client on console-ams.rpki-client.org