Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rXEbVWT7jsBBYTlYbKlORPBEeyU.roa
File: rXEbVWT7jsBBYTlYbKlORPBEeyU.roa (raw, json)
Hash identifier: zySpn0892F8TG4jijMI7GdqE81HiHBkYCU+/rXMyJAc=
Subject key identifier: AD:71:1B:55:64:FB:8E:C0:41:61:39:58:6C:A9:4E:44:F0:44:7B:25
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 1752D527
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rXEbVWT7jsBBYTlYbKlORPBEeyU.roa
Signing time: Sat 01 Jan 2022 16:03:55 +0000
ROA not before: Sat 01 Jan 2022 16:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57446
IP address blocks: 89.38.137.0/24 maxlen: 24
89.44.123.0/24 maxlen: 24
89.39.148.0/24 maxlen: 24
89.33.86.0/24 maxlen: 24
94.176.130.0/24 maxlen: 24
89.37.158.0/24 maxlen: 24
86.106.171.0/24 maxlen: 24
89.34.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391304487 (0x1752d527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad711b5564fb8ec0416139586ca94e44f0447b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:0a:70:a1:3e:cd:a7:17:ec:f7:95:5d:69:
dc:cd:9c:65:52:12:97:cd:52:e3:b9:ed:9b:28:a6:
9f:ac:33:f6:5d:4c:96:00:d8:73:2b:2a:0c:ab:f6:
8a:ee:cd:7b:74:9d:cd:1f:ec:60:50:5b:f8:b4:5e:
be:00:dc:31:3e:79:23:49:a7:38:82:e9:1f:b6:fd:
7f:6f:d2:b4:00:a2:89:b3:f1:83:65:00:d3:42:0a:
8f:97:03:a9:a5:48:20:77:50:f2:df:3a:d4:88:02:
d3:f2:a1:61:8d:8d:8f:52:37:02:d7:28:4b:41:6d:
4e:28:83:27:fd:35:fc:cc:45:fd:b3:d5:5d:46:70:
a0:6e:4d:69:e9:cd:f1:71:56:fd:a5:3c:1a:64:b1:
e4:16:24:50:6e:5f:8b:57:85:8e:56:ac:e7:93:90:
34:63:7a:d1:d6:95:94:96:4b:d2:ac:e6:98:38:9b:
7c:77:be:f2:b9:ae:f3:40:a2:37:b1:04:8f:5d:8b:
2f:01:6f:2c:aa:ec:81:f1:49:c1:6f:41:bb:04:df:
e5:4d:32:ae:e5:8f:c6:66:1b:4b:97:75:63:3e:75:
99:93:b0:3e:1b:0b:a6:a5:dd:02:83:98:c8:4b:c1:
8b:2a:b7:d1:57:03:bd:de:02:9a:bc:dc:5d:20:62:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:1B:55:64:FB:8E:C0:41:61:39:58:6C:A9:4E:44:F0:44:7B:25
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/rXEbVWT7jsBBYTlYbKlORPBEeyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.171.0/24
89.33.86.0/24
89.34.173.0/24
89.37.158.0/24
89.38.137.0/24
89.39.148.0/24
89.44.123.0/24
94.176.130.0/24
Signature Algorithm: sha256WithRSAEncryption
94:42:cd:a9:7c:ef:86:99:49:d5:79:8e:d1:1f:6d:d4:34:df:
4c:10:c3:66:f3:1b:88:0f:d4:6d:34:8e:3a:04:56:d7:68:ce:
7e:a7:54:fc:41:c3:b1:7b:b6:03:1d:81:a5:fd:f1:d6:dc:32:
33:9a:31:2c:27:a6:a5:7c:81:3f:c9:16:8a:30:3c:a2:1e:a6:
e9:77:b1:1e:72:90:92:23:20:a3:1e:da:86:bc:25:f6:0e:c4:
08:83:d3:8e:f8:7d:b6:b7:b9:60:9c:2e:fe:f2:f0:d3:cd:33:
0f:ea:fb:98:68:1c:4f:a9:f6:df:7f:9b:1c:f2:c1:88:b4:73:
59:b2:48:83:b7:63:4a:42:2d:50:d1:51:56:d1:c4:35:7b:7e:
74:b3:96:23:ba:63:f0:70:cb:e8:a2:10:6a:e0:b8:f4:5b:a9:
53:d1:ad:c7:32:fd:1b:9f:be:5c:da:34:9e:cf:14:dc:7f:9d:
da:36:57:53:6a:65:23:3f:bd:c9:1d:6b:ff:65:8d:b0:28:01:
2e:f0:d0:e2:7a:62:77:a1:57:b7:88:7e:56:c9:1d:17:c0:1e:
56:56:70:87:14:f4:23:da:1f:31:bc:05:33:a6:d4:18:1d:c7:
4e:26:c9:3c:54:b8:0c:ad:3e:ba:c2:e7:5d:3e:62:d4:a6:a2:
ae:ac:42:ac
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEF1LVJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGYxMzJkZjEzZTRiZTUzZDgyNTBjOGM0ODQyMDI2NGVlZjZjMTRjMB4XDTIyMDEw
MTE2MDM1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQ3MTFiNTU2NGZi
OGVjMDQxNjEzOTU4NmNhOTRlNDRmMDQ0N2IyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOS9CnChPs2nF+z3lV1p3M2cZVISl81S47ntmyimn6wz9l1M
lgDYcysqDKv2iu7Ne3SdzR/sYFBb+LRevgDcMT55I0mnOILpH7b9f2/StACiibPx
g2UA00IKj5cDqaVIIHdQ8t861IgC0/KhYY2Nj1I3AtcoS0FtTiiDJ/01/MxF/bPV
XUZwoG5NaenN8XFW/aU8GmSx5BYkUG5fi1eFjlas55OQNGN60daVlJZL0qzmmDib
fHe+8rmu80CiN7EEj12LLwFvLKrsgfFJwW9BuwTf5U0yruWPxmYbS5d1Yz51mZOw
PhsLpqXdAoOYyEvBiyq30VcDvd4CmrzcXSBiYHcCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBStcRtVZPuOwEFhOVhsqU5E8ER7JTAfBgNVHSMEGDAWgBR98TLfE+S+U9gl
DIxIQgJk7vbBTDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZmRXkzeFBrdmxQWUpReU1TRUlDWk83MndVdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8x
L3JYRWJWV1Q3anNCQllUbFliS2xPUlBCRWV5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YzM3NDk3LTYzNzYtNDYxZS05M2M2LTk3Nzg2NzRlZGM5Ny8xL2ZmRXkzeFBrdmxQ
WUpReU1TRUlDWk83MndVdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAFZqqwMEAFkhVgMEAFkirQMEAFkl
ngMEAFkmiQMEAFknlAMEAFksewMEAF6wgjANBgkqhkiG9w0BAQsFAAOCAQEAlELN
qXzvhplJ1XmO0R9t1DTfTBDDZvMbiA/UbTSOOgRW12jOfqdU/EHDsXu2Ax2Bpf3x
1twyM5oxLCempXyBP8kWijA8oh6m6XexHnKQkiMgox7ahrwl9g7ECIPTjvh9tre5
YJwu/vLw080zD+r7mGgcT6n233+bHPLBiLRzWbJIg7djSkItUNFRVtHENXt+dLOW
I7pj8HDL6KIQauC49FupU9GtxzL9G5++XNo0ns8U3H+d2jZXU2plIz+9yR1r/2WN
sCgBLvDQ4npid6FXt4h+VskdF8AeVlZwhxT0I9ofMbwFM6bUGB3HTibJPFS4DK0+
usLnXT5i1KairqxCrA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:58 2025 by rpki-client