Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/lUzFbbuAo1_6nviWKQ7-wgyIzXw.roa
File: lUzFbbuAo1_6nviWKQ7-wgyIzXw.roa (raw, json)
Hash identifier: 2Pl7cEeBgEGzK1rS45RF0R/hIXQMbDyNz7chvUo0bHE=
Subject key identifier: 95:4C:C5:6D:BB:80:A3:5F:FA:9E:F8:96:29:0E:FE:C2:0C:88:CD:7C
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 095A1C9F
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/lUzFbbuAo1_6nviWKQ7-wgyIzXw.roa
Signing time: Sat 01 Jan 2022 16:10:53 +0000
ROA not before: Sat 01 Jan 2022 16:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39761
IP address blocks: 84.246.160.0/21 maxlen: 24
81.90.240.0/20 maxlen: 24
2a00:1268::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156900511 (0x95a1c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jan 1 16:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=954cc56dbb80a35ffa9ef896290efec20c88cd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:66:f0:33:4a:ad:1f:bb:37:25:34:2a:eb:
f9:67:f6:50:d1:02:1f:96:ef:db:b0:64:9c:3c:25:
5b:78:d8:eb:82:f5:ca:fb:65:de:50:c2:6e:42:3e:
83:fc:a8:1a:85:b6:4a:52:1f:93:79:81:0b:1a:51:
82:ea:90:ab:10:5f:a1:69:f8:d8:ce:88:3d:4e:d1:
f6:bb:b5:80:7b:f7:5d:9e:26:18:8c:be:40:e1:c8:
9a:52:36:1f:ce:e9:ad:46:11:66:b0:30:b9:32:48:
23:ce:07:ee:a9:a9:12:c0:6f:33:cd:88:69:c6:d7:
c9:a3:91:c0:4a:76:a1:8d:4b:3a:dd:9d:85:67:0b:
49:b8:b3:90:3d:4c:6f:75:bf:00:2a:23:0e:0e:de:
56:28:df:f6:61:1b:1a:05:d1:dd:1c:31:83:73:d8:
15:e7:22:03:fb:0a:08:8a:71:1e:f4:5f:81:08:70:
57:99:34:c7:fd:46:7e:4d:15:65:f2:8f:c5:cb:0e:
42:6e:d5:bb:74:21:24:e9:78:d8:ee:eb:33:28:a7:
17:89:e4:ca:49:d3:e1:a7:ef:78:62:5a:a0:85:f6:
50:57:69:8f:ec:4b:2f:83:e8:3e:54:40:f8:d5:70:
6d:3a:94:f3:9a:69:fa:4c:9d:75:77:5e:b7:b4:c9:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:C5:6D:BB:80:A3:5F:FA:9E:F8:96:29:0E:FE:C2:0C:88:CD:7C
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/lUzFbbuAo1_6nviWKQ7-wgyIzXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.240.0/20
84.246.160.0/21
IPv6:
2a00:1268::/32
Signature Algorithm: sha256WithRSAEncryption
6e:0c:1e:d4:5b:1e:09:56:9f:af:f9:2c:05:fd:01:64:ab:db:
66:73:c2:ca:93:a8:b2:45:39:e1:f4:d3:68:15:14:46:77:58:
11:6a:4b:73:a5:6e:68:2f:dc:ab:05:b1:22:0e:77:0c:db:8e:
f5:cc:0e:12:aa:33:b5:b6:eb:31:b8:5a:dc:64:73:c6:b8:45:
42:fd:a9:09:c1:d2:47:42:54:71:73:af:9e:59:8f:78:c2:51:
54:83:9e:cd:ee:d2:e0:f9:8c:6d:78:81:bf:24:51:a5:7b:e9:
0e:f8:5f:16:8e:2b:58:d4:0e:69:13:da:25:56:a8:a6:1b:2e:
34:26:a5:0b:fd:1d:70:a2:ce:be:9e:c6:97:0f:06:10:b8:c2:
2a:e7:f3:37:ac:07:91:48:e3:e0:74:63:03:4a:16:5b:9c:6c:
d8:82:43:2c:b4:f7:90:e7:17:2f:b4:d3:13:6f:6f:3d:f3:86:
88:7f:70:42:6b:6f:9b:b9:3d:f4:1d:4e:02:62:6d:27:6d:6a:
40:0d:f9:a2:7a:89:1d:4f:24:c4:9c:74:06:c0:de:7b:af:e8:
e3:4b:ab:8a:0a:03:09:67:8c:26:0e:c8:48:40:17:41:99:7f:
f0:c3:05:b2:32:b0:c0:ab:8d:28:be:fa:ae:6e:c3:0a:ac:a6:
8a:87:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:20 2024 by rpki-client on console-fra.rpki-client.org