Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/CeNZbK58JngIzn1EQ6CO-mhgio8.roa
File: CeNZbK58JngIzn1EQ6CO-mhgio8.roa (raw, json)
Hash identifier: slw6u2Tl6xCkfajcbMyUGAw3xYEKSt0mkcik9LIk20c=
Subject key identifier: 09:E3:59:6C:AE:7C:26:78:08:CE:7D:44:43:A0:8E:FA:68:60:8A:8F
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 0184BD8885F0BF9DF0E1F196DB46DC046A69
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/CeNZbK58JngIzn1EQ6CO-mhgio8.roa
Signing time: Mon 28 Nov 2022 09:19:11 +0000
ROA not before: Mon 28 Nov 2022 09:19:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39326
IP address blocks: 80.71.0.0/19 maxlen: 24
194.0.77.0/24 maxlen: 24
194.0.78.0/23 maxlen: 24
46.17.56.0/21 maxlen: 24
195.90.121.0/24 maxlen: 24
80.71.27.0/24 maxlen: 24
195.90.120.0/23 maxlen: 24
93.89.80.0/20 maxlen: 24
185.75.28.0/22 maxlen: 24
185.75.30.0/24 maxlen: 24
217.196.224.0/19 maxlen: 24
77.75.104.0/21 maxlen: 24
89.248.16.0/20 maxlen: 24
37.46.200.0/21 maxlen: 24
195.238.232.0/24 maxlen: 24
2a01:348:62::/48 maxlen: 48
2a01:348::/32 maxlen: 32
2a01:348:fab::/48 maxlen: 48
2001:a08::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:88:85:f0:bf:9d:f0:e1:f1:96:db:46:dc:04:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Nov 28 09:19:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09e3596cae7c267808ce7d4443a08efa68608a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:a3:5e:5c:c7:c7:89:86:28:c1:69:f2:a3:
13:05:0a:d2:7d:b2:4e:82:26:0b:d3:44:be:3b:af:
e7:48:29:dd:8a:ff:fe:b8:56:27:9e:66:3e:f4:1b:
44:56:6d:d2:62:24:5b:60:fc:cf:7a:07:1d:2b:18:
fa:f2:71:31:77:9b:f7:ce:6e:ea:f5:35:c8:16:b0:
90:56:8b:04:80:b6:10:da:1c:16:76:8a:c7:ea:38:
4d:90:de:f8:b8:d1:bf:5f:b5:11:fd:2d:9b:e1:9b:
54:1c:c6:4b:fa:de:5b:e0:47:38:be:54:4a:8c:2a:
c7:7b:c8:fb:64:1a:e5:28:cb:c4:eb:cd:52:35:28:
e5:1d:70:6f:ed:35:73:09:55:c9:28:7b:92:28:10:
bb:85:a2:1d:bb:3d:68:98:e4:9f:65:f0:90:52:54:
a6:a5:63:04:9d:fe:22:1a:31:12:5a:ea:a0:fc:ed:
25:7c:7f:ec:21:04:d7:5f:88:65:e6:5f:dd:25:5e:
7f:ce:0e:f8:32:31:c4:11:70:40:ea:71:2c:d8:15:
a2:c6:c7:d8:76:10:f4:25:7c:a5:74:01:c3:71:66:
04:87:b4:c0:25:43:83:cc:cb:d6:7a:6d:d4:15:62:
4f:67:2b:d1:06:d9:51:26:7b:f3:0a:7e:f8:94:e9:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:59:6C:AE:7C:26:78:08:CE:7D:44:43:A0:8E:FA:68:60:8A:8F
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/CeNZbK58JngIzn1EQ6CO-mhgio8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.200.0/21
46.17.56.0/21
77.75.104.0/21
80.71.0.0/19
89.248.16.0/20
93.89.80.0/20
185.75.28.0/22
194.0.77.0-194.0.79.255
195.90.120.0/23
195.238.232.0/24
217.196.224.0/19
IPv6:
2001:a08::/32
2a01:348::/32
Signature Algorithm: sha256WithRSAEncryption
6a:8b:26:c0:77:c0:ae:88:be:6a:9e:85:44:00:f1:9e:18:05:
f4:64:bc:6d:51:c1:29:18:64:3f:1d:b5:1e:63:42:32:c2:a8:
69:60:00:5d:d2:7c:4b:4d:98:20:d2:24:2d:72:6f:8d:2d:2e:
2b:62:ac:d9:e8:95:a9:42:bf:2f:8b:91:a1:08:f0:53:e1:0b:
50:d5:1b:94:51:78:5a:b5:d4:90:26:e9:c6:71:6e:c9:d3:a2:
a2:62:1d:ef:dc:61:c5:d2:fc:6a:0f:a8:c4:cf:dd:4c:4d:bf:
1a:52:b9:5e:9c:29:b9:cc:0c:38:06:88:28:3a:4d:8e:8b:06:
f5:b8:10:34:c6:dc:a7:5b:47:8f:ae:20:3e:05:d1:cc:7c:3a:
3b:08:44:95:22:1c:71:d2:20:19:7a:f1:11:2e:a9:30:f0:13:
50:3d:9b:7d:f4:cd:6a:06:75:26:07:80:5a:b1:34:37:82:ec:
3e:e6:42:47:e8:b9:09:cf:23:a0:7e:ec:95:78:30:43:bc:2c:
6a:09:e2:a6:76:57:c1:c1:35:b8:8b:bf:f5:3c:b1:de:dc:58:
8a:b3:0e:c7:5a:97:f1:06:b6:72:02:70:11:d6:e8:b0:b3:ee:
94:4d:bb:34:bd:3d:cc:26:21:9b:19:da:54:42:63:59:c2:24:
48:86:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:53 2024 by rpki-client on console-ams.rpki-client.org