Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/bO-gVzspfVYivdzE2m_ItXCYhZQ.roa
File: bO-gVzspfVYivdzE2m_ItXCYhZQ.roa (raw, json)
Hash identifier: 9YwotQmsFhDHZxRYsy/50PgP6CmTjyXYsNFIN0yI5OY=
Subject key identifier: 6C:EF:A0:57:3B:29:7D:56:22:BD:DC:C4:DA:6F:C8:B5:70:98:85:94
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 088F92BB
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/bO-gVzspfVYivdzE2m_ItXCYhZQ.roa
Signing time: Sat 01 Jan 2022 14:06:46 +0000
ROA not before: Sat 01 Jan 2022 14:06:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62129
IP address blocks: 185.55.204.0/22 maxlen: 24
45.11.100.0/22 maxlen: 24
5.134.88.0/21 maxlen: 24
2a04:d5c0::/29 maxlen: 29
2a0e:8d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143626939 (0x88f92bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Jan 1 14:06:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cefa0573b297d5622bddcc4da6fc8b570988594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:b5:fa:67:ad:e5:de:37:e8:0f:63:97:3e:
ba:bc:4a:6a:6d:42:1d:34:c4:8c:08:23:05:04:38:
57:10:75:89:bd:69:78:5a:e3:43:bc:c9:5b:e9:0a:
9e:97:ee:f9:02:50:c0:37:dd:4c:6a:af:5a:70:fa:
86:8c:9a:93:a0:a3:bd:83:72:f8:8f:19:e9:ad:d3:
a0:8e:60:9a:63:cd:4d:b9:78:02:52:23:d5:ab:f9:
c3:0d:22:6b:ad:65:ff:b2:17:20:b6:f0:69:86:e7:
79:df:21:2f:68:8a:f6:f7:8f:97:1c:88:f4:c9:0b:
f7:6d:d6:11:e0:97:08:09:8a:39:0e:26:ab:5a:9d:
c2:71:97:e0:fc:bc:8f:70:b9:86:d5:29:6e:8c:59:
39:e2:e5:c2:8e:54:dc:7f:f5:aa:a4:56:9d:29:8b:
c8:ea:36:dd:02:f3:09:c3:c0:18:36:67:9a:ca:51:
df:99:6c:a9:53:1e:28:e5:e1:16:f5:95:ae:83:d7:
a2:6a:6e:f3:b2:0b:a2:e8:72:f4:28:53:f3:0e:a1:
ff:e5:6e:a4:ec:5e:59:46:e4:aa:0b:26:b3:5c:09:
56:eb:bc:b6:3d:5a:8f:38:c7:71:ef:63:ed:3f:c6:
63:94:51:76:9c:36:3c:fb:65:d5:3a:a6:98:23:24:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:A0:57:3B:29:7D:56:22:BD:DC:C4:DA:6F:C8:B5:70:98:85:94
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/bO-gVzspfVYivdzE2m_ItXCYhZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.88.0/21
45.11.100.0/22
185.55.204.0/22
IPv6:
2a04:d5c0::/29
2a0e:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
75:f3:78:b7:a7:26:03:56:e8:e9:a5:db:22:11:af:4a:27:dd:
25:c5:53:2b:6b:7a:52:27:a1:aa:cc:29:89:1f:dd:4b:6c:e5:
b8:96:77:2a:2f:d7:dd:87:73:c5:29:63:54:43:d6:d6:72:c8:
72:31:1d:b1:92:eb:fc:17:ac:48:cd:bd:af:06:2f:97:ce:87:
c0:81:47:5a:9e:11:5f:95:fe:2d:56:e9:31:a0:85:99:6f:9c:
e1:82:a1:61:76:06:db:53:24:a7:62:48:54:32:90:c9:ed:9a:
90:d7:dd:83:b5:cc:be:8a:97:f3:e3:7e:a6:9a:8b:f0:42:17:
dc:83:e7:18:e4:98:83:e5:ce:f1:d7:5a:31:e5:fd:aa:a8:fb:
4d:2c:20:1f:01:0c:ad:b6:bc:eb:eb:34:e1:ac:b7:3a:64:c6:
77:d9:da:53:87:83:ef:c7:4d:27:5d:6b:10:b0:0e:15:63:05:
13:d6:2c:09:4e:80:8b:52:92:bb:3f:0d:ab:19:7a:59:09:6a:
da:af:d9:e3:3a:c6:77:70:dd:ba:14:03:31:e8:5a:95:ae:e0:
46:5d:f7:31:a3:02:b6:5f:a7:b5:56:5a:df:6a:65:70:82:c8:
c5:0c:07:d8:e3:c9:65:c6:2a:5f:5b:62:dd:7a:06:4f:14:dd:
27:10:18:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org