Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Xcn6KnUQOumsw0fNQ_OfuUF8BbE.roa
File: Xcn6KnUQOumsw0fNQ_OfuUF8BbE.roa (raw, json)
Hash identifier: HCJWmKcW3M0qFABIARaQd6/UEYM4zJ3Jczx6IQuFxf4=
Subject key identifier: 5D:C9:FA:2A:75:10:3A:E9:AC:C3:47:CD:43:F3:9F:B9:41:7C:05:B1
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 3579EB77
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Xcn6KnUQOumsw0fNQ_OfuUF8BbE.roa
Signing time: Thu 27 Jan 2022 13:52:11 +0000
ROA not before: Thu 27 Jan 2022 13:52:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29535
IP address blocks: 193.110.120.0/22 maxlen: 22
83.2.0.0/20 maxlen: 20
83.2.8.0/22 maxlen: 22
79.191.255.0/24 maxlen: 24
195.149.235.0/24 maxlen: 24
195.149.236.0/22 maxlen: 22
80.54.110.0/23 maxlen: 24
83.2.56.0/22 maxlen: 22
2a01:110f:5000::/40 maxlen: 40
2a01:110f:5000::/43 maxlen: 43
2a01:110f:5060::/43 maxlen: 43
2a01:110f:5040::/43 maxlen: 43
2a01:110f:50a0::/43 maxlen: 43
2a01:110f:5080::/43 maxlen: 43
2a01:110f:50e0::/43 maxlen: 43
2a01:110f:50c0::/43 maxlen: 43
2a01:110f:5020::/43 maxlen: 43
2a01:1101:5::/48 maxlen: 48
2001:7f8:27::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897182583 (0x3579eb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 27 13:52:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dc9fa2a75103ae9acc347cd43f39fb9417c05b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ef:65:1e:e5:97:8b:c3:ca:23:41:f3:70:be:
96:00:f0:18:49:4c:cc:aa:4a:3d:ad:e1:af:cd:20:
63:86:25:4f:79:9f:59:f0:52:ed:56:31:b9:82:d9:
9a:39:fe:c0:e1:24:58:2e:be:92:22:d9:b8:f6:1e:
93:e8:8c:b6:81:0f:6a:d2:0e:bb:17:90:5d:f3:03:
dc:0b:89:06:ea:28:6b:db:ce:32:69:cd:54:f0:6a:
f0:58:22:cf:d2:ce:1b:29:44:80:46:6a:e4:52:9b:
7f:13:67:0a:13:15:87:fe:00:52:af:61:17:ec:20:
ea:e6:ea:4a:cf:f1:36:58:fa:82:48:05:31:cd:83:
f3:f3:95:3d:c5:07:f2:e1:c5:7e:63:6f:11:9e:44:
21:a1:cf:ff:20:98:4f:2b:b0:92:1a:4c:f6:9e:bf:
8a:8b:18:96:3e:37:44:9e:f2:ca:3d:c3:06:d2:2a:
e8:e1:e1:ef:59:60:6e:d7:8c:b7:3a:02:7e:4b:74:
95:5a:42:b5:7b:3b:fa:25:9f:29:1a:85:7c:5f:19:
b7:7c:9f:bb:77:36:e9:59:a4:c1:a8:24:75:dc:e2:
76:ac:9b:54:b5:33:1a:b0:c8:e5:96:df:72:86:b5:
40:e9:bf:58:cb:25:cf:2a:37:b0:8e:f8:8e:cf:b8:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:FA:2A:75:10:3A:E9:AC:C3:47:CD:43:F3:9F:B9:41:7C:05:B1
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Xcn6KnUQOumsw0fNQ_OfuUF8BbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.191.255.0/24
80.54.110.0/23
83.2.0.0/20
83.2.56.0/22
193.110.120.0/22
195.149.235.0-195.149.239.255
IPv6:
2001:7f8:27::/48
2a01:1101:5::/48
2a01:110f:5000::/40
Signature Algorithm: sha256WithRSAEncryption
41:50:16:ec:cd:d5:66:ae:36:77:31:c5:42:67:6c:c3:36:5f:
45:2e:bc:42:67:fb:b0:f1:7f:41:14:62:d0:f8:5c:33:6b:ad:
6c:52:78:5f:85:c5:16:68:4c:32:17:61:9d:a3:cb:28:b2:fe:
e6:73:3c:bb:8e:72:3a:43:22:a9:96:32:92:f7:1d:67:64:91:
9e:57:96:e3:67:35:22:d7:6d:cf:78:ba:64:b1:26:e5:a9:56:
da:a2:7e:45:b6:23:19:1b:88:40:4e:fd:da:fa:c6:44:de:7b:
cf:c1:c3:da:c2:cf:63:c5:56:3a:a6:b7:06:1e:5a:7a:a1:c5:
88:38:e2:ae:7b:47:0f:21:f1:37:74:65:1a:1e:2c:6e:27:a4:
34:15:dc:a0:cc:34:21:49:ff:53:eb:08:4d:28:e2:33:95:8f:
0b:53:76:ec:27:fc:0e:40:39:5d:3a:f9:0f:41:61:ec:b0:55:
6d:94:74:59:36:f0:a4:92:be:c8:4d:54:2e:dc:0c:ff:24:05:
63:62:89:de:8f:5d:0a:bb:c2:4f:8b:38:97:49:48:d1:f2:e7:
82:58:95:0c:1a:16:f0:b6:07:7e:77:45:f2:fb:cd:45:ab:a2:
38:8e:09:3e:73:5c:a9:c7:4a:a9:e0:89:98:c5:f4:6c:56:5d:
39:92:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:16 2024 by rpki-client on console-ams.rpki-client.org