Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/90OW-ZczUMO6Wo_b2Ut3DmbODI4.roa
File: 90OW-ZczUMO6Wo_b2Ut3DmbODI4.roa (raw, json)
Hash identifier: HFGzSc7b0Mi1CzB+TQJJR542exaVG6sKHDMf3OHnbDM=
Subject key identifier: F7:43:96:F9:97:33:50:C3:BA:5A:8F:DB:D9:4B:77:0E:66:CE:0C:8E
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 0DC74A33
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/90OW-ZczUMO6Wo_b2Ut3DmbODI4.roa
Signing time: Sat 01 Jan 2022 08:53:13 +0000
ROA not before: Sat 01 Jan 2022 08:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8657
IP address blocks: 185.96.172.0/22 maxlen: 22
195.8.0.0/19 maxlen: 24
217.168.112.0/21 maxlen: 24
2001:15d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231164467 (0xdc74a33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Jan 1 08:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f74396f9973350c3ba5a8fdbd94b770e66ce0c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:72:88:b6:e4:12:e2:62:9e:14:fd:74:74:
85:8c:11:61:01:65:34:d9:d2:b8:57:9e:b2:c3:8e:
bd:86:c9:76:bb:19:79:32:f9:76:75:40:ef:09:40:
8d:ae:4c:35:5b:c0:c8:d2:94:c2:70:36:7d:8f:f0:
cf:02:68:46:fa:22:67:95:80:01:f0:12:30:99:b7:
42:aa:f6:6f:7f:42:74:1d:e5:50:e3:8a:fd:cb:17:
58:9a:fc:35:72:69:65:cc:6c:64:c1:0d:c4:69:8f:
a5:36:3c:c1:f5:0a:f3:59:f7:2a:4e:d5:01:c1:b5:
89:cd:33:70:b6:5a:1a:3c:a5:f0:2c:f8:89:f4:9a:
95:d2:09:af:ec:54:a4:c0:a7:8f:02:cb:2a:5b:9c:
10:11:b4:14:d1:a3:45:98:03:29:2f:88:21:2d:9e:
9f:a7:40:c2:ff:32:23:82:fc:7b:f6:03:0a:7c:79:
0f:19:65:c6:22:25:0a:c0:f3:44:9c:77:a4:75:78:
92:a1:bd:b4:9d:1d:69:a6:fb:6e:26:16:65:ce:b5:
ed:e4:f3:80:60:ec:39:80:b4:01:c0:81:33:5f:58:
5e:a6:1a:73:17:0d:c8:9c:46:8f:3f:60:5d:cf:9b:
87:6a:05:4e:e5:e4:38:5d:57:8f:c0:3b:2b:a3:5c:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:96:F9:97:33:50:C3:BA:5A:8F:DB:D9:4B:77:0E:66:CE:0C:8E
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/90OW-ZczUMO6Wo_b2Ut3DmbODI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.172.0/22
195.8.0.0/19
217.168.112.0/21
IPv6:
2001:15d8::/32
Signature Algorithm: sha256WithRSAEncryption
3c:45:31:bc:5d:d4:3b:eb:8c:39:5f:77:09:e4:bf:9a:d6:27:
f3:4b:45:9d:d7:ca:16:c6:d2:67:de:cf:4c:4d:3e:16:53:46:
71:09:cd:23:95:b7:bc:f6:bf:a5:a1:f3:7f:7c:19:e9:c2:54:
9b:e3:cf:59:08:2e:e0:af:6e:00:79:b1:70:dd:a2:c8:ec:38:
2f:89:4a:17:1a:13:e4:95:ca:92:e3:96:93:96:93:58:b8:41:
44:16:c8:d6:82:b6:fb:67:76:54:73:69:74:a8:d5:dc:40:54:
67:25:ea:2a:66:5f:8b:0f:3c:2b:c5:13:90:2b:5c:32:29:48:
39:7e:83:4d:85:45:5d:58:8e:cd:04:38:52:e6:80:c5:02:77:
bb:fa:66:8b:6c:0d:a8:39:09:d8:db:f0:cb:6b:7b:dd:26:43:
16:f3:17:f4:2f:52:7b:9c:22:b9:1f:54:75:71:58:78:ae:c6:
43:dd:f6:6a:7d:e8:e4:ad:0a:53:f9:43:7d:04:e6:04:f7:ce:
53:c6:9e:d8:ef:62:98:dd:11:b0:e0:d6:82:94:dd:6e:2e:51:
e9:af:8b:3d:17:18:9e:00:39:19:da:b7:4a:60:d8:75:49:d4:
f1:b4:69:49:c4:1c:37:5d:11:c5:07:6e:f9:94:bf:49:2e:26:
27:90:cf:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:36 2024 by rpki-client on console-fra.rpki-client.org