Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ubEthJQUqWmFftJQwDxbpiESsz8.roa
File: ubEthJQUqWmFftJQwDxbpiESsz8.roa (raw, json)
Hash identifier: SBQIFZ13DMIjk9jX41ukk0PvAFrnvbZQuhVStVUrly4=
Subject key identifier: B9:B1:2D:84:94:14:A9:69:85:7E:D2:50:C0:3C:5B:A6:21:12:B3:3F
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 0182114F0E724B9A8A839C4E6790570652B9
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ubEthJQUqWmFftJQwDxbpiESsz8.roa
Signing time: Mon 18 Jul 2022 12:36:09 +0000
ROA not before: Mon 18 Jul 2022 12:36:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35228
IP address blocks: 87.194.202.0/24 maxlen: 24
87.194.100.0/23 maxlen: 24
93.97.44.0/22 maxlen: 24
87.194.116.0/24 maxlen: 24
87.194.117.0/24 maxlen: 24
93.97.60.0/22 maxlen: 24
93.97.176.0/22 maxlen: 24
93.97.212.0/22 maxlen: 24
93.97.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:4f:0e:72:4b:9a:8a:83:9c:4e:67:90:57:06:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jul 18 12:36:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9b12d849414a969857ed250c03c5ba62112b33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:0c:ff:64:20:10:63:5e:8b:72:33:07:ff:
5c:39:37:4c:b1:f1:83:e6:3c:be:d5:f5:ae:65:a1:
c0:09:13:2d:52:0e:4e:f2:ca:9e:25:d4:7f:9f:af:
3c:90:40:12:37:f6:df:ff:d0:97:5d:ae:35:e6:e2:
2c:ec:94:02:8d:a3:84:ce:ff:89:27:59:4e:43:f5:
00:43:57:f4:54:05:9c:e8:2c:f2:40:dd:43:f5:e5:
d3:14:51:b0:53:96:d1:a2:31:d9:0e:81:d9:6d:76:
23:3c:86:5f:ce:d9:64:6f:fb:bb:2c:33:71:93:1b:
9e:85:38:f8:39:61:ec:69:70:87:ba:d0:75:ff:c9:
cc:2b:41:0e:5b:9a:70:1f:5c:b8:ef:62:0e:3e:f3:
2a:2b:e5:d0:44:ef:49:7b:8b:11:f3:a5:13:c5:0a:
23:ec:e2:49:98:36:9e:4c:8d:bf:54:f1:7a:3d:59:
ed:44:59:4d:9f:df:c0:ed:84:b4:3a:dc:f4:80:17:
46:17:96:78:08:7e:dd:d5:89:8a:f6:7e:16:5a:7a:
ec:72:cc:1e:b8:3c:42:66:24:0e:ca:49:e1:b3:b6:
1c:ab:56:13:9e:f3:07:2e:b7:e3:58:48:c0:ab:62:
56:01:5c:db:cc:f5:87:7f:c3:53:dd:af:6f:bb:71:
e1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:2D:84:94:14:A9:69:85:7E:D2:50:C0:3C:5B:A6:21:12:B3:3F
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ubEthJQUqWmFftJQwDxbpiESsz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.194.100.0/23
87.194.116.0/23
87.194.202.0/24
93.97.0.0/22
93.97.44.0/22
93.97.60.0/22
93.97.176.0/22
93.97.212.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d8:90:f3:47:4b:71:c7:aa:e4:07:22:0f:b4:e5:fe:3e:72:
a7:ff:9f:7e:72:af:6c:8f:cf:3d:0a:5f:62:7a:50:ce:d6:91:
11:5e:31:40:01:a5:82:19:98:ff:66:ba:e3:66:ab:52:1b:80:
c7:20:2f:ab:a6:41:ac:a3:9a:0c:15:33:df:eb:61:d5:21:ca:
d4:1c:9c:98:f6:aa:99:4f:bc:2a:1e:86:11:2a:4c:8f:16:cb:
af:a0:d6:d8:89:cf:0f:74:e5:3c:08:06:bf:42:8d:6c:0c:9b:
eb:c6:d2:94:25:9d:25:3b:6d:49:69:e9:96:da:65:28:f6:07:
52:0f:0f:9c:3d:f3:51:f6:58:cb:63:13:c9:ca:57:0a:00:78:
45:a7:06:4c:7c:21:e5:2d:03:c6:a4:3c:55:0b:18:4f:f5:b3:
a0:ca:9a:95:9b:fb:e0:43:9b:09:04:22:1f:5b:87:00:86:5e:
a1:cc:a2:89:e7:a3:b9:61:b7:48:5e:d6:46:78:d6:fc:ad:04:
1d:0b:97:a9:98:b6:c6:73:8c:a2:9e:f9:0e:8f:29:2e:0a:06:
37:a9:54:35:c4:fd:1b:99:89:98:12:18:d5:eb:0a:7b:c4:ac:
43:07:b6:4b:bd:2b:1b:bc:9e:47:0d:75:bb:0d:c5:f4:09:1a:
30:e2:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:05 2024 by rpki-client on console-fra.rpki-client.org