Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/_XLqoiLVxR52kyVksCblaoGopjk.roa
File: _XLqoiLVxR52kyVksCblaoGopjk.roa (raw, json)
Hash identifier: xXh2vg1i55sHBhIsWV2smXNzR2hYjsr44Nh7gd3bKhQ=
Subject key identifier: FD:72:EA:A2:22:D5:C5:1E:76:93:25:64:B0:26:E5:6A:81:A8:A6:39
Certificate issuer: /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial: 0184569C2815DDA76344095E7C6B042EF83B
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/_XLqoiLVxR52kyVksCblaoGopjk.roa
Signing time: Tue 08 Nov 2022 09:39:45 +0000
ROA not before: Tue 08 Nov 2022 09:39:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39571
IP address blocks: 89.235.64.0/22 maxlen: 22
89.235.64.0/24 maxlen: 24
89.235.67.0/24 maxlen: 24
89.235.65.0/24 maxlen: 24
89.235.66.0/24 maxlen: 24
185.135.28.0/24 maxlen: 24
185.135.31.0/24 maxlen: 24
185.135.28.0/22 maxlen: 22
185.135.29.0/24 maxlen: 24
185.135.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:9c:28:15:dd:a7:63:44:09:5e:7c:6b:04:2e:f8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Validity
Not Before: Nov 8 09:39:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd72eaa222d5c51e76932564b026e56a81a8a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:50:51:10:d9:f1:e5:2a:31:16:d1:ac:5e:
0d:e6:1a:65:70:8f:7b:31:70:78:7b:2e:75:b9:45:
62:a0:1e:2e:90:ff:df:fb:d5:8e:87:91:84:5f:00:
d0:35:f8:40:0a:0a:73:86:47:a9:19:52:fc:ad:03:
64:b6:cc:ca:92:e9:8a:8b:f9:ed:76:f1:78:68:3a:
69:78:99:33:80:ac:2c:32:86:c3:39:f1:5c:0f:2c:
27:d2:64:ec:f7:08:3f:df:96:ec:49:29:7b:b6:d3:
f4:1e:db:72:3c:16:f9:e1:63:fc:f1:37:1d:bc:1b:
9d:84:71:21:1a:e0:f0:aa:47:48:8b:15:29:18:19:
f3:77:27:a5:02:f7:49:bb:59:80:1a:53:e4:59:2f:
09:86:f8:da:33:b3:95:86:23:b4:35:a0:4c:b6:f0:
f5:18:a5:93:7a:f9:7b:94:e3:c1:1b:e3:c3:ef:55:
03:87:7e:46:0c:9e:cb:89:8d:37:21:60:4d:49:19:
7f:05:32:04:d0:67:fa:16:5e:bb:c6:65:fd:96:3c:
89:71:5c:86:c2:37:a0:1a:5b:7b:b0:2c:dd:56:ec:
6a:b8:cd:9d:eb:d8:38:b3:4d:4a:5f:70:ab:87:e2:
8a:f8:3d:45:c3:fc:74:6e:e6:bb:07:e0:c8:52:82:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:EA:A2:22:D5:C5:1E:76:93:25:64:B0:26:E5:6A:81:A8:A6:39
X509v3 Authority Key Identifier:
keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/_XLqoiLVxR52kyVksCblaoGopjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.235.64.0/22
185.135.28.0/22
Signature Algorithm: sha256WithRSAEncryption
04:eb:28:64:01:0e:bb:78:2d:9d:c4:66:3f:51:eb:ba:a0:8a:
8a:73:92:48:61:92:b9:ad:f8:20:b8:e8:68:f4:15:93:a3:21:
58:45:b1:5c:aa:da:24:e2:56:cb:cc:8d:6d:cb:44:37:eb:7d:
1c:cf:bd:dc:3c:42:82:12:fa:f7:f5:d1:ce:62:ab:99:21:63:
55:5c:c5:65:fb:06:fb:da:75:0f:e2:ae:7d:e4:cc:d5:dd:59:
a8:97:ea:28:cf:27:c5:c3:e8:26:d7:e1:33:26:80:5a:9c:eb:
32:97:46:5b:3b:d9:00:91:07:53:f7:57:d5:49:15:f4:e7:02:
41:d7:f3:e2:8e:4e:72:d8:41:a5:67:94:ae:03:28:1e:24:72:
ee:45:66:9b:ad:72:3e:85:57:24:c0:f7:ef:a7:bc:f5:8e:f0:
8a:e3:7c:1c:10:45:1c:1c:6d:c2:75:b8:d3:f6:dd:93:c0:a4:
b2:8f:46:34:81:2f:d8:62:0c:1b:dd:72:fd:5f:e9:38:9a:40:
27:a1:ee:0e:25:8d:ea:38:03:29:ab:96:92:e5:6b:d5:87:01:
e0:e5:f1:3c:7d:5f:43:c9:32:5f:a7:7c:76:a8:64:17:29:df:
b4:bc:b0:91:e0:3e:bb:89:fa:c0:c2:e2:e5:55:a6:79:25:b3:
47:4e:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:09 2024 by rpki-client on console-fra.rpki-client.org