Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/otyghyZKIRTh0i6MlrwsJ5Lj7PI.roa
File: otyghyZKIRTh0i6MlrwsJ5Lj7PI.roa (raw, json)
Hash identifier: krK2UBUeFw1uHvlkF5zmytK/WBMxQ0RmaBT+XDiFD2I=
Subject key identifier: A2:DC:A0:87:26:4A:21:14:E1:D2:2E:8C:96:BC:2C:27:92:E3:EC:F2
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 030037CC
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/otyghyZKIRTh0i6MlrwsJ5Lj7PI.roa
Signing time: Sat 01 Jan 2022 10:04:26 +0000
ROA not before: Sat 01 Jan 2022 10:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25795
IP address blocks: 185.139.32.0/23 maxlen: 24
2a07:12c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50345932 (0x30037cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jan 1 10:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2dca087264a2114e1d22e8c96bc2c2792e3ecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:d4:3c:a9:5f:39:6c:26:d9:e0:5f:39:7d:
c6:32:c2:37:a9:ba:27:25:2b:8a:06:85:6d:b8:2c:
4f:2b:a1:b3:be:b0:0f:95:c7:95:fb:15:15:af:ac:
c0:3b:50:06:bc:0f:5f:07:cd:55:c1:98:6e:55:78:
a3:c8:4e:ec:56:31:fc:5e:96:69:7f:77:5f:72:7c:
cf:dd:26:35:6d:9d:c8:28:69:4e:a0:2a:fd:cf:d7:
33:06:83:8f:8e:bf:fe:2e:01:bd:6a:9f:0b:bf:97:
51:34:57:16:88:d9:98:59:7a:fa:53:73:34:39:1c:
29:1b:8d:c3:49:2b:f1:6c:d3:e6:67:f9:63:56:42:
b3:2a:8c:b6:e5:10:e1:df:04:bb:a7:86:ff:96:43:
68:30:30:74:22:c0:f5:3b:a2:be:cc:1e:f4:1e:02:
3d:b8:f5:18:7a:f8:d7:61:2b:5c:85:4f:d9:35:09:
bb:98:7e:03:70:af:24:d2:b3:b0:6e:a7:a3:58:e7:
7a:bc:9a:2d:7a:2a:5c:f5:ce:89:fe:18:9e:ce:9c:
85:df:41:7b:c1:9a:21:77:81:91:93:2e:4e:6f:a3:
01:89:37:72:57:af:f9:81:82:62:1d:d4:93:85:e2:
73:6a:d6:63:36:2a:77:46:34:95:07:92:21:7b:c7:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DC:A0:87:26:4A:21:14:E1:D2:2E:8C:96:BC:2C:27:92:E3:EC:F2
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/otyghyZKIRTh0i6MlrwsJ5Lj7PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.32.0/23
IPv6:
2a07:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
97:98:45:85:6b:2b:08:de:59:1a:ba:1b:a7:6a:83:f9:f0:11:
66:4a:2a:d4:ed:4b:28:f7:e2:75:05:37:48:73:ec:b8:cb:77:
ad:f5:ab:7f:26:c5:ae:76:a7:90:dd:ca:db:f8:12:e1:47:b5:
a1:ca:6d:ea:c5:ab:e1:db:66:77:5e:a2:f4:3c:c2:09:09:d3:
61:c9:2e:b6:27:36:4d:3d:0b:b8:6a:8a:64:30:06:0b:0d:2b:
95:f2:aa:a2:33:13:e0:da:da:12:e4:18:88:57:1e:20:85:3e:
73:88:d1:5b:9b:80:fb:97:20:40:ef:97:99:89:d0:76:9d:c5:
70:9d:91:13:46:fd:70:aa:50:ee:44:89:ad:67:62:96:66:03:
2f:8b:0a:20:59:03:f0:88:92:43:18:97:0c:87:3f:32:e5:9a:
d5:02:29:d4:12:ca:f5:e7:62:1c:e2:c4:56:ee:0d:49:05:45:
36:10:0a:e8:d6:83:ce:df:56:d6:66:12:cc:0f:42:b2:96:0e:
69:80:77:b7:24:c5:5e:7e:72:32:6a:f2:b7:5d:4e:78:21:63:
73:e0:e7:04:c0:0e:33:b5:fc:ea:5d:2f:4a:1d:7d:a2:1a:c9:
7d:a1:0a:77:81:a7:85:b4:1f:fb:d1:ea:6f:b8:ab:79:f3:24:
e0:26:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org