Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/J1oy62C1kx6bTrysLcTCeAWma50.roa
File: J1oy62C1kx6bTrysLcTCeAWma50.roa (raw, json)
Hash identifier: 25nglpgLDgq8892Csa6ULWlEgYNtldVoeNg++IFxZlc=
Subject key identifier: 27:5A:32:EB:60:B5:93:1E:9B:4E:BC:AC:2D:C4:C2:78:05:A6:6B:9D
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0183182EF8A6F4B9C072C77EC8C2BD8DE2BC
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/J1oy62C1kx6bTrysLcTCeAWma50.roa
Signing time: Wed 07 Sep 2022 13:41:14 +0000
ROA not before: Wed 07 Sep 2022 13:41:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 193.42.219.0/24 maxlen: 24
194.35.182.0/24 maxlen: 24
194.35.78.0/24 maxlen: 24
194.35.95.0/24 maxlen: 24
194.35.92.0/24 maxlen: 24
193.43.14.0/24 maxlen: 24
193.43.28.0/24 maxlen: 24
45.136.156.0/22 maxlen: 22
193.43.37.0/24 maxlen: 24
185.157.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:2e:f8:a6:f4:b9:c0:72:c7:7e:c8:c2:bd:8d:e2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Sep 7 13:41:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=275a32eb60b5931e9b4ebcac2dc4c27805a66b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:b4:b9:95:c4:e2:c0:aa:2e:ee:8b:8d:63:
fd:e4:7a:a0:ad:a2:4e:fe:d8:47:9c:5a:06:c1:b7:
65:6c:4e:e3:74:42:29:08:c5:fc:7f:06:1c:e1:ee:
e8:59:8e:a6:cd:53:49:8b:63:4d:1f:ca:1b:92:e5:
94:39:de:c2:ed:d6:09:8a:15:95:2b:8e:51:a5:1e:
2b:56:c9:70:9f:0e:f6:e5:13:9d:39:e5:3f:31:d6:
10:91:6a:51:41:d7:3d:9e:14:2c:48:69:81:da:75:
96:d3:b7:36:3d:c5:0e:05:66:fb:d4:03:f8:c6:5d:
0d:5a:7b:2b:20:56:31:8d:29:1b:28:78:13:9c:74:
53:00:e1:80:f0:36:33:bd:ea:d8:ca:e4:79:af:af:
de:ec:0a:1a:bf:fd:83:bb:55:5d:f9:41:4d:ce:7f:
c6:8e:f3:71:f9:8b:e2:32:4d:a8:8d:ca:3c:69:48:
8b:00:75:01:b3:8a:3b:20:a7:a6:1c:c0:81:3d:f7:
23:de:f5:f0:50:42:b2:fc:80:4c:9f:89:79:6d:78:
19:64:a1:4f:4a:34:1c:7d:e8:27:68:8d:29:5d:0c:
e7:93:b6:af:9d:26:25:8c:2b:34:1b:01:1a:60:d4:
95:ec:22:fc:4e:f7:ba:fc:10:70:be:3c:40:1d:12:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5A:32:EB:60:B5:93:1E:9B:4E:BC:AC:2D:C4:C2:78:05:A6:6B:9D
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/J1oy62C1kx6bTrysLcTCeAWma50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.156.0/22
185.157.168.0/22
193.42.219.0/24
193.43.14.0/24
193.43.28.0/24
193.43.37.0/24
194.35.78.0/24
194.35.92.0/24
194.35.95.0/24
194.35.182.0/24
Signature Algorithm: sha256WithRSAEncryption
80:78:d6:78:db:81:6d:18:7b:bf:fd:d1:14:b9:29:b3:13:b9:
82:11:81:98:a4:9e:ea:d4:78:56:e1:96:eb:22:b4:1c:43:36:
d2:6c:30:fa:1b:b3:14:33:16:04:b8:3f:41:86:26:fe:9b:3c:
7f:70:ec:bd:0a:d8:52:61:fa:76:65:3b:16:27:fc:e6:13:37:
3d:58:33:63:bb:d1:27:81:d4:9b:36:9b:b5:50:7c:98:d7:f5:
49:d6:df:77:2b:c3:a1:9c:58:f7:e6:ec:08:7c:6b:24:7d:9a:
40:5e:fd:1b:96:ac:d5:68:7f:37:80:1f:04:8b:59:a0:92:69:
70:ff:70:2d:08:9e:73:86:7a:13:88:09:74:3e:d2:54:95:a5:
78:f5:03:33:ae:c6:55:f5:3c:40:9c:1c:8d:dd:f9:bc:5a:9c:
78:7d:0e:86:01:31:4b:00:7b:6a:41:84:27:06:5d:d8:18:37:
db:b6:95:5b:5f:79:03:ea:1d:77:87:00:67:70:7c:4a:15:7d:
ec:38:92:69:92:b3:4c:00:3c:ce:eb:f0:75:cf:1d:e7:a8:d5:
d0:91:aa:47:6a:30:b0:da:fe:fc:59:fc:c2:e9:34:1b:d9:96:
ef:77:c6:3f:d0:8a:30:87:dc:dc:a2:99:bc:db:8d:56:4e:2a:
5f:6c:cc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:38 2024 by rpki-client on console-ams.rpki-client.org