Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/g-5OplHJi2WlQOjSfGIxAJSz1pI.roa
File: g-5OplHJi2WlQOjSfGIxAJSz1pI.roa (raw, json)
Hash identifier: DOdOEjwi8MzgL6VoCI/GFQ3pa1o2L8twdWa0eB1vRcM=
Subject key identifier: 83:EE:4E:A6:51:C9:8B:65:A5:40:E8:D2:7C:62:31:00:94:B3:D6:92
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01850B08551249D23ABA93D0C97335FF1E19
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/g-5OplHJi2WlQOjSfGIxAJSz1pI.roa
Signing time: Tue 13 Dec 2022 10:29:33 +0000
ROA not before: Tue 13 Dec 2022 10:29:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50352
IP address blocks: 185.94.82.0/24 maxlen: 24
185.94.80.0/23 maxlen: 23
193.42.157.0/24 maxlen: 24
2a05:bf81::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:08:55:12:49:d2:3a:ba:93:d0:c9:73:35:ff:1e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Dec 13 10:29:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83ee4ea651c98b65a540e8d27c62310094b3d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:0b:88:ff:5e:de:a7:2e:c2:90:4b:de:77:
4a:bc:a1:bd:71:bc:30:bf:1c:23:3e:b1:26:6b:94:
8a:dc:f5:20:0f:3d:cb:db:d7:6b:b9:3e:99:76:8e:
47:5a:40:29:62:25:d5:e4:90:30:05:02:02:28:14:
a7:10:f1:38:99:9b:39:11:23:26:15:82:f6:49:78:
c7:fc:ab:bc:07:29:97:f8:49:6f:f8:81:c0:0b:2d:
33:05:ff:2d:57:31:ac:d4:83:52:37:9e:42:a0:de:
ef:ce:87:1a:2b:b5:ab:f4:bb:62:4f:7f:5c:7c:72:
26:b8:33:c5:bb:13:6c:68:ae:d3:dd:15:00:b7:5e:
ed:a4:83:b9:08:8b:9a:a6:0a:fa:07:88:68:26:a9:
28:c5:33:46:6a:05:9a:a9:29:bd:9e:7c:fa:de:6c:
60:bf:58:9e:06:a0:9a:46:c9:fc:17:a3:ee:41:e5:
f8:19:ac:b2:2e:21:ad:6f:2f:a1:48:7a:7a:81:ad:
fc:26:33:89:02:30:3b:28:19:bd:c1:f7:76:9d:bb:
7f:da:b7:eb:3b:7c:29:5d:69:52:b2:03:06:98:3f:
79:96:41:15:f6:64:ba:ba:92:98:5d:27:07:c0:29:
d0:56:60:16:18:c5:5f:bc:31:30:cb:0a:d6:60:11:
88:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EE:4E:A6:51:C9:8B:65:A5:40:E8:D2:7C:62:31:00:94:B3:D6:92
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/g-5OplHJi2WlQOjSfGIxAJSz1pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.80.0-185.94.82.255
193.42.157.0/24
IPv6:
2a05:bf81::/32
Signature Algorithm: sha256WithRSAEncryption
84:a0:99:d8:e3:cf:87:78:e9:81:4e:62:c4:20:cc:b3:63:1e:
a6:7a:6d:ba:f2:a1:fa:42:bd:fe:a2:de:e4:7f:b2:8a:f0:06:
f2:eb:a5:e1:80:ca:fc:2e:f0:29:46:73:3e:89:5e:35:b7:8a:
a6:69:f6:39:05:3b:9e:07:88:fe:82:87:0b:10:52:fc:a9:75:
61:bd:9d:9f:38:b2:3d:76:64:ca:a1:c0:0c:58:14:27:f4:72:
2d:04:c9:af:46:cc:74:9d:0b:90:54:68:35:7d:7e:0a:89:c2:
cd:9f:d2:54:43:9b:36:70:03:88:20:9f:34:ca:fd:85:46:57:
cc:d7:f7:6a:9d:0e:9f:f9:02:80:6a:5a:db:8e:5e:e9:5d:c2:
52:5d:9d:ae:5c:c2:b3:dc:0b:8b:82:d8:cc:39:15:fe:ec:d5:
79:6e:2b:c1:e6:52:97:e0:aa:e2:9d:f3:f5:17:36:96:f9:6c:
35:18:e5:a9:f4:bd:08:b4:5a:ec:48:54:a7:76:9c:d9:1c:e8:
6c:f9:cd:a4:71:17:b7:0a:c0:d1:bc:7c:b3:11:80:6b:79:ed:
e2:68:95:40:b7:79:3c:0d:7b:09:5f:ac:ba:cb:2e:f7:ca:33:
cf:b1:6f:86:a2:90:1a:2c:0f:67:fe:2d:24:64:ea:7d:d1:59:
65:38:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org