Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Q-XET-XMhjSaiF27VoqFDDSf038.roa
File: Q-XET-XMhjSaiF27VoqFDDSf038.roa (raw, json)
Hash identifier: vIpJz/7DpvdBDhh7dEgAkkjykZPnMfC8ZIP9BClLrIE=
Subject key identifier: 43:E5:C4:4F:E5:CC:86:34:9A:88:5D:BB:56:8A:85:0C:34:9F:D3:7F
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 01833201DD6E1E9654F173EE02C64FD2BC8F
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Q-XET-XMhjSaiF27VoqFDDSf038.roa
Signing time: Mon 12 Sep 2022 14:02:06 +0000
ROA not before: Mon 12 Sep 2022 14:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25052
IP address blocks: 83.229.80.0/24 maxlen: 24
83.229.81.0/24 maxlen: 24
31.133.101.0/24 maxlen: 24
185.162.127.0/24 maxlen: 24
109.207.77.0/24 maxlen: 24
109.207.78.0/24 maxlen: 24
185.220.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:01:dd:6e:1e:96:54:f1:73:ee:02:c6:4f:d2:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Sep 12 14:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43e5c44fe5cc86349a885dbb568a850c349fd37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:9f:81:b5:ba:6d:f2:c2:b5:c5:78:26:fc:
fe:a4:1b:66:9f:a3:a2:62:89:58:c6:1f:3b:ac:45:
c6:e6:1f:31:34:86:b2:67:a9:fa:6a:a0:84:78:39:
11:fb:95:23:1e:df:55:12:0d:86:af:a0:2d:cb:b5:
8f:c2:c0:a4:90:9b:71:b0:b1:1f:b3:ab:de:0d:ee:
0f:d7:91:a2:58:cf:59:cf:de:a0:05:ed:3f:b3:d3:
3e:ef:e5:5e:d1:7e:96:a1:10:cd:10:ce:2e:95:63:
ee:3e:fe:cf:2b:e1:7a:5d:2d:d2:87:36:9f:b7:bd:
f3:ae:79:b4:e6:db:f1:c1:07:fe:70:44:b5:54:f9:
75:ea:8a:eb:d9:c1:70:f1:0f:df:4a:9b:e5:d0:b0:
ef:a8:71:a3:1d:39:4e:7e:31:ee:fc:ad:e9:6f:2d:
5d:0c:65:f0:83:1c:2d:61:e9:f5:8b:5b:52:76:bb:
29:e8:69:00:f0:fc:a1:f5:9c:09:35:53:12:79:f2:
38:61:70:64:df:e9:25:4a:32:23:f0:0b:54:21:65:
57:f7:e5:80:1b:c8:4b:0d:83:26:d0:44:7f:1f:49:
47:b3:cb:8f:17:b6:e8:e4:84:85:e1:6f:9f:cd:fa:
d0:d4:21:db:0b:04:3e:fe:56:1d:0c:79:59:77:ed:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:C4:4F:E5:CC:86:34:9A:88:5D:BB:56:8A:85:0C:34:9F:D3:7F
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Q-XET-XMhjSaiF27VoqFDDSf038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.101.0/24
83.229.80.0/23
109.207.77.0-109.207.78.255
185.162.127.0/24
185.220.206.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2a:af:d2:ab:50:dc:de:28:39:b9:49:4e:09:e1:56:50:bb:
07:a6:b6:f0:14:ea:a8:23:cf:32:fc:95:48:08:8f:42:7a:d5:
5a:0d:96:92:14:1a:19:e5:0f:69:44:2a:da:2f:43:93:db:cb:
72:f8:88:5d:91:d6:ad:91:6a:dd:7d:ca:75:29:54:78:02:7c:
e2:9b:3c:c7:98:c2:2b:08:09:0e:5b:1e:5e:38:87:d8:39:09:
7a:ea:d4:92:62:63:b3:77:54:5c:e3:cb:98:11:4a:7e:8a:3b:
09:41:f0:13:96:9f:2b:51:67:fb:9d:d7:b7:a6:84:a1:c2:98:
cc:bc:cd:2a:fa:cd:38:fe:69:91:28:a3:f2:57:dd:bd:2c:72:
4d:bc:d4:39:ce:2e:32:70:5b:5c:3a:45:12:8a:2d:c6:e1:09:
fc:fa:67:79:e0:cb:90:da:23:ad:79:85:52:23:39:2d:d5:c0:
c6:29:5a:07:15:d1:14:a2:90:7a:19:da:38:3a:02:eb:23:a4:
9d:3f:65:ea:b2:fa:a4:f0:26:36:f4:69:17:c0:be:5c:60:be:
f5:98:6f:63:35:fe:c1:22:d8:0a:29:bf:09:41:66:c0:08:fd:
9e:70:6b:20:ed:ba:97:38:94:7c:59:99:a7:39:51:e5:9b:f9:
05:29:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:25 2023 by rpki-client on console-ams.rpki-client.org