Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/Q_9QeX1-ytN0SoyxyKwGPb3EWBQ.roa
File: Q_9QeX1-ytN0SoyxyKwGPb3EWBQ.roa (raw, json)
Hash identifier: mEOOfk5HcQ7UZUfsDfVUQhAb/Rqs/o4GG2nuPzkfvoo=
Subject key identifier: 43:FF:50:79:7D:7E:CA:D3:74:4A:8C:B1:C8:AC:06:3D:BD:C4:58:14
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 01849B2352B2CFB0BA6656E56A94A43FF72B
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/Q_9QeX1-ytN0SoyxyKwGPb3EWBQ.roa
Signing time: Mon 21 Nov 2022 17:01:34 +0000
ROA not before: Mon 21 Nov 2022 17:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13280
IP address blocks: 89.204.240.0/20 maxlen: 24
95.83.196.0/22 maxlen: 24
95.83.196.0/23 maxlen: 24
89.204.160.0/20 maxlen: 24
95.83.229.0/24 maxlen: 24
92.251.240.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:23:52:b2:cf:b0:ba:66:56:e5:6a:94:a4:3f:f7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Nov 21 17:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43ff50797d7ecad3744a8cb1c8ac063dbdc45814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:eb:52:8f:c5:09:3a:92:cd:6d:39:d4:8d:
16:1c:18:7e:bf:c2:0c:25:ed:23:7c:d7:dc:fb:a6:
53:c6:02:0c:10:4e:fc:71:a7:9c:bf:86:a9:ae:b4:
03:7f:be:e5:ed:04:2f:71:c6:e1:51:b3:ab:6d:d1:
ee:93:65:67:39:95:eb:54:a9:a3:86:86:2d:3e:ca:
52:63:31:3c:e1:91:7f:68:92:44:d3:86:33:44:03:
05:e9:20:4c:ca:a5:64:f3:5b:ff:d2:81:3e:c1:d5:
36:2a:ae:73:f4:e8:d0:90:ae:5b:e4:ca:ad:8c:a5:
95:3e:94:e1:74:6f:c1:6b:94:b2:d9:ae:c5:b4:9a:
a9:09:1f:34:ab:b3:e7:4f:80:41:b0:f8:28:2b:f0:
21:55:61:e3:44:4b:05:f0:dd:b7:07:64:36:38:23:
50:19:3c:ad:bb:b0:6a:35:0b:13:d0:c0:d4:f2:b6:
95:95:2a:60:73:be:6b:d6:47:39:13:8f:9a:cb:32:
2b:e2:23:ea:dc:aa:2c:e3:ea:f5:d1:c1:bf:35:fa:
57:14:17:16:30:25:26:e0:5e:70:29:3a:3e:58:d6:
19:54:4d:a0:aa:f2:95:9a:49:3e:9d:06:ec:14:10:
3b:84:81:38:07:cf:a5:61:4c:b4:5c:f4:b2:47:3a:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:50:79:7D:7E:CA:D3:74:4A:8C:B1:C8:AC:06:3D:BD:C4:58:14
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/Q_9QeX1-ytN0SoyxyKwGPb3EWBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.204.160.0/20
89.204.240.0/20
92.251.240.0/21
95.83.196.0/22
95.83.229.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a2:7e:a6:1d:6b:36:6c:71:e7:aa:14:6f:16:5b:d0:5e:eb:
7e:3c:5b:b6:e0:74:63:cb:a3:5f:38:42:f0:97:10:37:55:9d:
1a:c5:e5:b3:90:7c:fb:45:72:d4:d5:84:99:a9:1c:d4:d8:17:
51:03:d3:f1:66:f4:40:7d:c8:d2:2c:5e:4b:ec:88:46:aa:54:
5f:1c:77:7d:6e:36:9b:0c:39:ee:ce:48:79:66:c2:9e:ac:7c:
fd:c2:ee:9e:96:b2:09:19:bd:13:ac:a7:b9:f9:a8:43:e4:39:
34:61:3f:6c:4f:03:63:08:b8:d1:c4:32:2f:b1:24:53:97:f9:
d1:6e:e2:65:35:7e:2f:6d:6d:f6:09:01:e9:18:fc:4a:7a:33:
f0:3c:b4:9f:98:12:55:ca:3b:7b:c0:46:98:b0:dd:bc:00:46:
42:72:b1:88:21:14:f9:54:6e:c5:4f:1d:56:32:b0:84:d9:02:
28:b8:f1:4c:bd:be:41:39:5d:8b:83:8f:f9:4c:73:2d:2a:79:
af:87:9e:7c:94:a6:59:8f:9c:c8:70:12:5e:47:81:10:34:c2:
fe:02:9a:9b:9f:3a:30:03:47:a5:ce:cd:40:ca:9a:90:c3:90:
34:d4:43:01:2f:e4:83:96:60:04:04:a0:63:b0:3c:79:46:ef:
18:aa:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:16 2023 by rpki-client on console-ams.rpki-client.org