Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/9h-G72CA_OsOJuUDiMuhmXzm7ZQ.roa
File: 9h-G72CA_OsOJuUDiMuhmXzm7ZQ.roa (raw, json)
Hash identifier: Q8r7Uh4P9tJDhWT8u0GWsH69Ta2q1S0ApQ+Jxllo+XY=
Subject key identifier: F6:1F:86:EF:60:80:FC:EB:0E:26:E5:03:88:CB:A1:99:7C:E6:ED:94
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 0830C2B2
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/9h-G72CA_OsOJuUDiMuhmXzm7ZQ.roa
Signing time: Wed 08 Jun 2022 09:06:02 +0000
ROA not before: Wed 08 Jun 2022 09:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29399
IP address blocks: 185.212.216.0/22 maxlen: 27
185.49.128.0/22 maxlen: 27
178.250.88.0/21 maxlen: 27
195.149.85.0/24 maxlen: 27
170.84.252.0/23 maxlen: 27
195.137.222.0/23 maxlen: 27
2a03:5d00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137413298 (0x830c2b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jun 8 09:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f61f86ef6080fceb0e26e50388cba1997ce6ed94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:4c:91:27:e2:af:a7:b7:41:6f:ba:fd:2e:
cf:4c:53:93:ba:31:51:fb:b9:0f:fc:82:37:51:28:
c0:a2:db:66:ec:06:8d:5c:ce:e3:83:05:7c:bc:28:
85:13:e8:7e:39:15:51:a2:df:06:bf:70:68:14:56:
ec:4e:d1:eb:de:27:b8:0b:ea:17:55:16:0f:d4:e5:
6d:76:28:0c:52:5d:d6:f8:e4:ee:04:51:73:ed:69:
16:40:62:27:96:9d:ee:9e:25:08:82:84:fd:82:08:
0c:44:18:62:09:fb:a3:84:fe:0c:0d:9c:0f:93:f0:
43:54:3d:0f:89:9e:82:31:fa:03:9e:0a:a0:5a:a3:
b3:1f:f6:a9:e4:25:84:9d:b0:78:50:d2:75:93:b9:
2e:15:64:38:49:57:06:eb:d7:e0:bc:58:15:0b:10:
43:b7:dd:36:d7:18:f0:db:44:9c:3b:bf:25:08:99:
98:f9:c5:3c:b4:71:e3:13:b7:67:a8:4e:ed:5b:7a:
3f:f1:70:ab:4d:f9:45:3d:a6:73:a7:81:dd:d2:43:
5f:06:c5:b9:f7:23:7c:4e:20:8e:74:87:d8:92:fa:
ba:35:11:65:e8:8a:b4:ec:bc:f8:89:65:e6:50:84:
ad:9b:cd:ab:16:2a:ff:19:e5:a3:8b:23:db:5a:a9:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:86:EF:60:80:FC:EB:0E:26:E5:03:88:CB:A1:99:7C:E6:ED:94
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/9h-G72CA_OsOJuUDiMuhmXzm7ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.252.0/23
178.250.88.0/21
185.49.128.0/22
185.212.216.0/22
195.137.222.0/23
195.149.85.0/24
IPv6:
2a03:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
9d:c1:49:5d:74:65:06:ea:c2:0b:fd:d8:d1:39:58:ec:6a:a0:
1f:16:c3:8f:ed:1c:ee:4a:85:a3:1a:37:9d:d6:9d:5f:df:de:
9c:83:a4:9e:0f:ab:77:4d:16:c0:4e:4c:da:6a:f4:2d:a3:13:
1f:2d:ad:bd:fa:8b:9c:41:cc:9d:ac:d3:3f:44:b8:62:c8:6d:
77:54:cb:8f:db:07:d0:0d:0e:96:50:af:70:96:dc:20:cc:fa:
de:48:bf:a2:b1:64:02:29:8f:35:9b:fd:5c:3e:a4:ae:98:1b:
9a:fb:4b:0c:f1:1f:a5:33:06:1f:ad:8f:38:b2:60:e2:67:6f:
82:3a:06:e0:7e:82:2b:56:00:62:41:e2:d3:8b:9b:58:45:39:
2a:95:d9:71:f1:30:76:f8:f4:24:84:d9:76:93:a2:f1:02:b9:
22:e3:a0:ac:98:90:db:2c:e4:5e:07:05:72:46:37:48:4b:68:
f3:77:27:d4:cc:01:be:3f:ef:03:18:ab:6f:73:32:ee:6a:ce:
29:ca:6a:5e:e9:30:59:68:4d:7a:9a:90:06:0b:6d:33:f1:e1:
b0:43:2f:06:2b:30:c1:76:bb:ce:db:67:55:e7:9b:b0:2b:1a:
35:07:22:20:93:92:ff:97:e0:31:26:5a:bc:f9:95:03:51:d7:
25:6d:bd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org