Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/U5JebueV2eucfnYynuLMnc_eeog.roa
File: U5JebueV2eucfnYynuLMnc_eeog.roa (raw, json)
Hash identifier: DZ9Pj1cH6dh4HTqBW9GF7MTfZeMbUBLoWp+1mfDhYig=
Subject key identifier: 53:92:5E:6E:E7:95:D9:EB:9C:7E:76:32:9E:E2:CC:9D:CF:DE:7A:88
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 1708F0A9
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/U5JebueV2eucfnYynuLMnc_eeog.roa
Signing time: Mon 28 Mar 2022 09:45:29 +0000
ROA not before: Mon 28 Mar 2022 09:45:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 20
85.132.144.0/20 maxlen: 24
81.19.0.0/20 maxlen: 20
95.129.96.0/21 maxlen: 21
2a02:e98::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386461865 (0x1708f0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Mar 28 09:45:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53925e6ee795d9eb9c7e76329ee2cc9dcfde7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:99:b4:75:74:df:aa:87:dc:c4:13:84:77:
e5:a2:a7:93:56:36:2d:b6:89:71:48:7d:5a:29:b2:
7e:2d:5d:1b:67:98:67:74:de:6f:01:c0:7b:24:22:
54:98:14:03:e3:2f:e6:41:10:f7:76:12:6c:71:31:
17:98:34:24:2c:01:67:a8:44:ed:e1:9c:23:37:36:
a8:33:df:e6:e8:f3:80:8c:a9:96:0e:04:e0:e7:94:
70:74:7b:cc:42:f6:c4:3b:fb:45:35:00:69:cf:6c:
cd:42:7d:c0:9f:d8:b5:dd:0b:d6:34:6d:70:c1:bc:
3a:68:bc:17:e3:db:a9:6f:f8:9d:9a:14:82:70:9c:
4d:46:84:86:0f:64:d4:5b:5a:28:1a:d1:56:d1:6f:
63:ba:60:bf:de:a6:17:e0:10:8d:24:9d:1a:67:24:
a0:69:31:55:b7:10:58:51:bd:02:8a:42:34:a8:77:
a8:1b:d8:63:e6:15:0d:81:c3:cd:09:84:f6:cb:a3:
93:68:dd:08:4f:9a:f1:62:04:04:f1:67:ee:04:76:
f4:66:a0:5c:c0:d8:97:a5:73:21:7f:7e:91:ea:9f:
c4:f8:32:93:92:b9:b1:96:35:c0:81:de:b0:86:0d:
90:12:45:6a:fa:4f:e3:c6:8b:44:bf:d3:28:ee:01:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:5E:6E:E7:95:D9:EB:9C:7E:76:32:9E:E2:CC:9D:CF:DE:7A:88
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/U5JebueV2eucfnYynuLMnc_eeog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
0d:9c:90:49:48:e4:90:5a:b4:34:c0:47:e0:6b:75:f3:e5:56:
14:d7:65:6c:38:4c:97:ba:3c:d4:f9:8f:78:8c:a0:42:1f:0f:
51:22:c1:83:43:48:87:12:09:39:da:2c:f7:8c:e3:fe:77:cf:
00:2e:e3:ba:15:ec:95:72:c3:b2:2c:81:fe:46:a3:6c:a8:8b:
9d:74:0d:59:57:17:58:d6:ae:6c:4c:1c:ea:8e:a2:20:ec:6b:
0a:73:55:17:a5:02:0b:64:a1:5e:00:56:24:e4:21:fb:9f:fb:
01:7b:c3:1d:17:45:37:9b:3d:2c:35:3e:58:4a:28:b1:ee:0e:
1a:bd:cc:12:bc:72:fb:35:df:ca:b9:5c:63:a2:06:c7:29:14:
71:12:34:85:eb:73:23:5f:7c:1d:23:53:43:05:ad:5b:12:87:
56:9c:bd:80:9a:19:95:88:dc:cc:a4:71:01:41:04:82:4a:46:
1b:7d:6a:cb:81:3c:78:e0:33:22:95:0f:e7:ec:66:1b:48:40:
59:c2:35:b8:62:72:bb:1c:4b:11:82:28:eb:63:d9:8c:57:d0:
a8:2d:32:89:52:45:82:cd:77:3e:19:b0:55:4a:36:b1:6d:5b:
11:a8:fb:3f:af:c6:dc:8f:1c:6a:d6:18:06:d0:a2:e6:63:64:
be:39:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org