Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/J4RaPZ3WVX21ewQ0IqN2cx9yP5U.roa
File: J4RaPZ3WVX21ewQ0IqN2cx9yP5U.roa (raw, json)
Hash identifier: tYf2NKbHJCj+9fGYHaGr5ZoFsMI1yMBhu9eZzZwo2eQ=
Subject key identifier: 27:84:5A:3D:9D:D6:55:7D:B5:7B:04:34:22:A3:76:73:1F:72:3F:95
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 0182F56D102C69F41E6633E5D227A2B456CB
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/J4RaPZ3WVX21ewQ0IqN2cx9yP5U.roa
Signing time: Wed 31 Aug 2022 19:42:21 +0000
ROA not before: Wed 31 Aug 2022 19:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206892
IP address blocks: 95.140.32.0/24 maxlen: 24
185.199.28.0/22 maxlen: 24
95.140.38.0/23 maxlen: 24
45.95.44.0/22 maxlen: 24
194.39.44.0/22 maxlen: 24
185.161.72.0/22 maxlen: 24
94.199.179.0/24 maxlen: 24
2a07:c280::/32 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f5:6d:10:2c:69:f4:1e:66:33:e5:d2:27:a2:b4:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Aug 31 19:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27845a3d9dd6557db57b043422a376731f723f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:07:c9:76:96:ec:dc:03:0b:6a:a8:dd:0d:38:
11:16:b4:31:72:78:a3:de:49:4f:7b:9f:9b:96:74:
06:b1:15:d0:5b:99:c8:7c:ca:de:42:1b:63:3d:72:
1c:69:b9:23:f4:73:61:4f:d9:15:90:a0:54:52:82:
a9:52:61:bc:20:0a:37:eb:6e:0f:6a:60:d7:00:3e:
f6:d1:a0:7f:12:89:c0:32:22:16:4a:a4:a3:3a:dd:
c7:94:3f:3d:42:52:b2:9a:cc:e2:39:ec:83:82:46:
84:2d:5f:b2:44:92:de:bc:2b:0c:07:55:f9:36:74:
b3:d1:f4:42:3c:96:11:56:49:02:8c:6c:33:14:9e:
8b:93:75:66:3a:0a:1b:fa:09:67:d2:9f:8f:99:07:
93:70:9f:f2:08:1f:a2:58:9c:e9:55:a7:f0:18:94:
2a:63:ac:a1:b2:63:db:c8:b7:fb:8e:31:8a:25:f1:
89:0c:4c:e9:b4:5f:51:f9:ea:b4:60:fb:d1:50:d9:
bd:56:7f:21:d7:63:9f:c3:74:e1:36:b4:a8:20:be:
29:50:1e:97:4c:92:a7:26:17:d7:48:1f:7e:d1:db:
b9:47:38:ac:81:ea:ee:d5:7b:9e:f2:f3:dd:f0:d4:
57:6d:1e:6f:52:d7:f1:0e:46:e4:31:60:e7:94:ce:
a8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:84:5A:3D:9D:D6:55:7D:B5:7B:04:34:22:A3:76:73:1F:72:3F:95
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/J4RaPZ3WVX21ewQ0IqN2cx9yP5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.44.0/22
94.199.179.0/24
95.140.32.0/24
95.140.38.0/23
185.161.72.0/22
185.199.28.0/22
194.39.44.0/22
IPv6:
2a07:c280::/32
Signature Algorithm: sha256WithRSAEncryption
74:dd:3b:98:79:9a:d3:93:bf:5c:69:2c:45:df:37:e8:01:ff:
b2:16:59:9c:ed:28:2c:f7:ec:92:b9:a1:ed:aa:cd:76:7d:fe:
6a:fc:2d:ae:46:cf:51:67:bf:3e:72:43:f9:18:db:8e:f8:24:
86:d0:cd:e4:0c:a3:2f:90:3f:22:b8:20:33:62:6a:13:b1:aa:
4e:14:b3:2a:99:d0:5b:7e:c9:84:2f:90:11:77:67:ec:ca:c2:
a0:75:b6:76:a4:e5:cb:69:7d:6d:00:6b:30:71:f8:91:dd:c3:
5f:9f:76:ee:62:af:0b:3c:9b:86:30:ed:73:b6:ba:c4:ce:54:
3c:fc:4d:04:79:f5:e6:12:f0:82:82:95:38:c6:a3:0f:0b:f8:
6f:8a:fd:60:26:a5:8d:98:92:10:70:4e:37:6b:af:9b:25:f1:
98:fc:4d:f1:89:fb:44:10:8c:51:0e:cb:67:c6:94:4e:7c:9d:
c4:e4:93:81:af:fe:b8:31:be:57:fc:ff:2b:26:75:85:51:19:
df:0d:9e:37:a9:e1:4a:bf:fb:2c:8b:ad:49:3c:55:ca:c6:c7:
01:2e:85:0f:7c:1c:17:89:11:6a:e5:c7:74:3e:44:26:34:ae:
f4:ef:88:d2:20:a9:c5:a6:ec:48:72:20:db:1a:30:ed:18:a5:
07:86:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org