Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/j-bCy-smB8ZT6aJwHEtJbsqf5jk.roa
File: j-bCy-smB8ZT6aJwHEtJbsqf5jk.roa (raw, json)
Hash identifier: D8iPdunAvrMl429m6YNIV2rG/suPH5eTSrPADBzLoUQ=
Subject key identifier: 8F:E6:C2:CB:EB:26:07:C6:53:E9:A2:70:1C:4B:49:6E:CA:9F:E6:39
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 14BC6D14
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/j-bCy-smB8ZT6aJwHEtJbsqf5jk.roa
Signing time: Sat 01 Jan 2022 07:58:19 +0000
ROA not before: Sat 01 Jan 2022 07:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201246
IP address blocks: 188.114.120.0/24 maxlen: 24
188.114.121.0/24 maxlen: 24
185.80.19.0/24 maxlen: 24
2a05:7980::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347893012 (0x14bc6d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jan 1 07:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fe6c2cbeb2607c653e9a2701c4b496eca9fe639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:33:66:4c:83:d9:16:8b:39:ba:60:dd:19:
cb:97:16:33:19:7e:5b:71:7f:92:4f:af:4f:55:6d:
62:7d:48:5c:c4:ca:74:11:5b:3e:35:95:15:89:01:
0e:61:b5:a7:6d:a6:b5:93:65:3b:52:5b:9f:4f:d4:
d5:67:d9:3e:21:13:23:c0:d2:eb:79:a2:29:30:39:
eb:9e:61:51:96:ec:e6:9d:e3:5d:75:3a:98:96:bd:
fd:e6:82:5c:41:1e:d4:12:b4:aa:9f:68:29:57:36:
91:79:3e:de:2f:30:2a:42:b8:c8:14:fc:d3:13:0a:
05:1b:a0:da:7d:25:ae:44:c3:53:d0:ab:6f:11:01:
62:67:b5:62:25:29:72:47:2c:bf:03:7a:fd:df:7c:
53:c2:46:54:5d:19:d0:c5:4f:56:f8:06:ab:79:75:
12:dd:db:a3:66:3a:70:04:b9:47:47:b4:be:ee:be:
ff:7a:a7:4c:90:9e:46:16:b8:9d:d3:a9:73:8d:77:
d0:a6:10:d1:e8:7d:ad:c2:49:ea:f2:23:ca:98:17:
39:ed:6f:18:4b:48:c1:6f:89:a0:13:5b:10:95:de:
85:5a:c9:5d:7c:6c:01:3b:15:9b:c6:9d:a1:f5:c2:
f8:44:56:cb:4b:0f:86:45:4e:46:38:1e:2b:a8:27:
5a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:C2:CB:EB:26:07:C6:53:E9:A2:70:1C:4B:49:6E:CA:9F:E6:39
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/j-bCy-smB8ZT6aJwHEtJbsqf5jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.19.0/24
188.114.120.0/23
IPv6:
2a05:7980::/29
Signature Algorithm: sha256WithRSAEncryption
38:ea:fe:2a:4f:08:4b:54:a4:26:6c:75:ba:a6:f8:3d:88:e7:
3f:0f:f2:f5:8a:8a:ea:97:a0:58:ca:a3:03:6e:b7:42:e2:1e:
6e:65:17:bf:6a:fd:72:89:95:1a:09:9f:7c:fb:e0:e1:f6:ae:
b6:f4:a2:0e:2b:80:24:1e:2c:64:8c:bd:4f:90:e0:2b:81:c6:
45:d8:eb:93:3e:a8:2f:5a:80:eb:54:a7:43:90:bf:6c:29:31:
4f:54:3e:74:71:71:01:b8:d7:72:0f:a8:0e:bf:50:0e:10:ea:
77:5f:5f:96:87:bf:63:f4:f8:6e:d6:91:c6:df:ed:3f:d8:9a:
17:05:d5:3c:92:67:52:c8:b8:be:fb:8c:ee:43:42:88:1f:65:
32:25:e7:1c:e8:d9:2b:31:2a:83:93:66:01:4c:83:01:fa:a8:
26:32:56:45:5c:82:fd:63:0d:e2:89:70:88:2a:fa:61:98:38:
a3:29:b6:36:de:6b:ab:1d:f3:2d:1f:6d:21:26:d8:64:a9:0f:
af:51:ee:b0:30:bf:ba:6d:1d:e2:c3:6f:fd:b4:20:07:69:d0:
6c:c7:0a:b2:6e:df:a3:d8:42:82:37:19:98:88:52:9f:d4:58:
7e:76:a4:46:a7:30:6e:90:e2:f1:b2:fd:69:da:06:6d:e9:81:
db:26:6f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:10 2024 by rpki-client on console-fra.rpki-client.org