Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/9z95YgzVOt_u5S_MMW-iAyPdCvU.roa
File: 9z95YgzVOt_u5S_MMW-iAyPdCvU.roa (raw, json)
Hash identifier: rJKFQ41Ylon47JA1bbKID+Q0FIppq2G+jact3UYmrhs=
Subject key identifier: F7:3F:79:62:0C:D5:3A:DF:EE:E5:2F:CC:31:6F:A2:03:23:DD:0A:F5
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 02F7420A
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/9z95YgzVOt_u5S_MMW-iAyPdCvU.roa
Signing time: Sat 01 Jan 2022 05:02:16 +0000
ROA not before: Sat 01 Jan 2022 05:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58243
IP address blocks: 185.84.120.0/22 maxlen: 22
193.163.169.0/24 maxlen: 24
45.14.96.0/22 maxlen: 22
2a03:70e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49758730 (0x2f7420a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jan 1 05:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f73f79620cd53adfeee52fcc316fa20323dd0af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:8a:86:d2:11:ab:ed:e6:4f:5c:b7:49:2c:
2b:33:8f:ab:9a:57:7b:56:32:13:f0:42:a6:d3:9e:
9c:31:ce:ea:7c:3e:6f:49:99:72:98:af:8f:c0:3b:
8a:a3:e7:df:e1:80:7d:f2:4f:48:08:d5:21:77:b1:
77:77:3c:aa:56:ab:e0:b5:09:c6:55:cd:c8:2d:b5:
0f:df:f9:03:70:aa:72:3a:23:e1:9d:34:d6:58:0f:
47:9c:a7:df:0a:c9:6f:d1:63:4f:73:be:59:58:26:
54:c7:3b:e7:66:44:b4:46:41:e1:66:2e:be:e4:7c:
1b:14:19:28:de:3e:1d:0f:fc:bb:32:e2:80:87:b8:
6e:58:d6:64:4e:2d:10:10:a5:bc:7e:46:71:ce:c1:
03:c8:d6:fc:41:19:61:33:f7:cc:3d:5f:fe:a7:24:
c2:25:51:e8:6f:3a:f6:02:73:d8:eb:35:c0:71:68:
30:5c:13:b2:f1:ce:58:95:62:bd:1f:4e:cf:15:68:
90:c8:4f:4e:20:c9:62:b3:4e:75:f3:ed:20:85:61:
b1:cc:de:3b:81:62:fd:c0:b1:9d:7b:e3:a3:be:0a:
f5:a6:34:66:bb:e5:ed:93:b7:e3:4a:67:8c:60:2b:
1e:67:0a:3f:da:c9:3e:3a:18:ae:ef:95:59:14:4e:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:79:62:0C:D5:3A:DF:EE:E5:2F:CC:31:6F:A2:03:23:DD:0A:F5
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/9z95YgzVOt_u5S_MMW-iAyPdCvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.96.0/22
185.84.120.0/22
193.163.169.0/24
IPv6:
2a03:70e0::/32
Signature Algorithm: sha256WithRSAEncryption
82:18:43:53:a1:9e:46:b6:f2:cc:9a:46:74:89:e7:bf:b1:9e:
41:53:72:b1:3b:aa:97:7d:50:82:4e:74:53:5a:9c:2a:00:6c:
22:0d:ff:fc:99:24:e8:f9:8d:8c:6f:a0:63:91:68:22:a1:37:
4c:b7:1a:87:6d:63:d8:e9:2b:a6:1c:25:a5:0c:ed:98:65:7e:
25:7e:96:11:2d:eb:f3:6c:88:8f:9a:e9:96:65:0e:38:83:63:
4d:bf:e3:19:c8:36:db:6b:10:a1:79:a5:91:84:cb:dc:9c:c7:
fd:0f:81:7b:70:32:5d:81:b8:f0:d9:4a:c1:0e:67:d7:3b:27:
17:cd:a4:b6:6b:3b:5b:7d:96:8a:d3:1b:ea:52:aa:e4:57:f7:
8c:cc:3b:ad:25:97:54:d6:e0:79:90:9f:74:93:aa:c0:90:15:
5a:c5:7a:ea:6f:d5:e8:c5:f5:02:33:8b:c9:2b:31:f3:40:a7:
e4:76:85:f5:5a:50:5b:10:37:20:6e:05:1a:05:33:01:71:20:
c4:e5:af:81:ef:59:ad:a3:2d:3d:26:a8:6d:e2:14:0c:4a:3a:
e0:df:e9:f8:05:1b:85:58:8d:8c:a3:c5:7e:2e:15:7e:3d:73:
32:88:8c:3d:d3:cc:d1:2a:6a:ee:db:06:6e:ba:ac:bc:f9:b6:
3d:51:db:e1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org