Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I_jJuUHpnanOIdS_peDjf63jW1w.roa
File: I_jJuUHpnanOIdS_peDjf63jW1w.roa (raw, json)
Hash identifier: gEL+VVv3ykZBbsWHm5nsDUy0uaNvOkcems2olh2gwQg=
Subject key identifier: 23:F8:C9:B9:41:E9:9D:A9:CE:21:D4:BF:A5:E0:E3:7F:AD:E3:5B:5C
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 0183AD8C8EE2DAF7A42136F4EF103D6A3697
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I_jJuUHpnanOIdS_peDjf63jW1w.roa
Signing time: Thu 06 Oct 2022 13:46:53 +0000
ROA not before: Thu 06 Oct 2022 13:46:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34383
IP address blocks: 89.170.0.0/16 maxlen: 16
85.192.192.0/18 maxlen: 18
85.117.128.0/19 maxlen: 19
95.136.128.0/17 maxlen: 17
2a00:5e80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:8c:8e:e2:da:f7:a4:21:36:f4:ef:10:3d:6a:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Oct 6 13:46:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23f8c9b941e99da9ce21d4bfa5e0e37fade35b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1d:23:6e:0c:cf:65:20:35:53:7a:53:48:e4:
b9:63:c8:81:3e:2f:11:df:e4:0f:ea:d5:4b:ba:55:
c0:8a:32:85:1d:0d:e3:e1:50:28:82:b2:35:0f:2a:
f1:0f:a4:3f:46:77:fb:3b:de:c9:52:37:87:d9:26:
e2:36:00:b1:c4:af:52:a9:29:a3:a7:62:a7:71:89:
96:8e:c6:be:43:6e:cd:19:e8:ab:d5:08:9b:68:cf:
dc:c9:17:e5:8b:a1:d8:46:c1:bf:44:a4:02:a2:98:
18:cf:7a:43:e1:34:ac:ec:25:38:bd:c8:18:57:04:
2b:cc:65:fe:8d:0f:d3:6a:4f:61:58:b0:4b:63:be:
40:23:25:f7:38:a4:40:56:34:98:85:78:04:9b:1d:
7c:06:94:27:67:ae:4a:73:3d:b2:7f:5b:6a:0a:b3:
87:0b:a2:ad:b5:9f:b8:90:6a:2a:d8:06:cb:a0:cb:
10:82:e1:4a:c6:c4:56:f7:08:9e:24:aa:81:fb:fa:
1c:42:e2:2e:8d:ad:05:db:85:9f:eb:de:4f:91:ca:
65:0e:b4:53:e4:c7:28:bf:07:7c:8f:f5:9f:40:f4:
39:ae:55:03:6a:79:05:55:e7:9e:71:49:fd:20:11:
70:ff:22:d3:e8:0c:a5:b5:60:a5:f6:60:1c:f9:66:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:C9:B9:41:E9:9D:A9:CE:21:D4:BF:A5:E0:E3:7F:AD:E3:5B:5C
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/I_jJuUHpnanOIdS_peDjf63jW1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.128.0/19
85.192.192.0/18
89.170.0.0/16
95.136.128.0/17
IPv6:
2a00:5e80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:e1:91:a2:6e:c6:f2:b7:d6:1a:55:98:98:86:58:b0:7e:0b:
67:cc:2a:e7:ac:75:89:a5:ba:a0:65:8c:17:9c:2d:97:a2:59:
62:44:40:d5:88:f4:5e:6f:d5:71:c9:8f:19:c8:32:39:f0:71:
70:d9:0e:7e:f1:ab:4a:f6:72:92:d1:de:32:67:e1:da:31:05:
ed:27:8e:3e:f6:b6:37:99:99:d8:2d:3f:df:6d:6b:43:e2:fc:
79:f6:5e:95:22:95:49:e1:87:11:90:ae:ce:52:88:b8:16:74:
c5:dd:34:b3:04:14:7e:02:45:8d:10:3a:49:09:24:3e:d5:08:
9c:16:eb:03:dd:84:8e:71:b8:1b:94:1f:0f:d8:2d:27:8c:96:
d8:86:66:16:36:0f:8c:ec:c7:9c:ce:bc:f6:04:bc:d2:0b:95:
22:de:8d:02:db:c8:23:ef:e6:c5:96:c3:0f:01:a4:9a:8d:35:
5e:ef:a7:7a:d3:ae:ec:db:5e:e1:e5:d8:2b:26:b0:de:6f:a0:
76:0e:c0:12:c5:5b:63:bb:0b:31:dd:f9:d7:08:0e:ed:17:e4:
24:bf:90:01:e6:bb:62:56:16:79:74:16:99:46:53:e8:f4:f2:
d7:98:b9:9a:ab:d2:cd:ce:6a:7f:2d:b1:1f:b5:d2:6b:56:d2:
42:60:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org