Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/jrRjSPKypRbq85NR2eUd84Aq_8g.roa
File: jrRjSPKypRbq85NR2eUd84Aq_8g.roa (raw, json)
Hash identifier: 0eAxesyXFdwKUiCNVgIAHeDqWujK/VlWNpkojAvxmGM=
Subject key identifier: 8E:B4:63:48:F2:B2:A5:16:EA:F3:93:51:D9:E5:1D:F3:80:2A:FF:C8
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: C7D665
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/jrRjSPKypRbq85NR2eUd84Aq_8g.roa
Signing time: Sat 01 Jan 2022 07:00:42 +0000
ROA not before: Sat 01 Jan 2022 07:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202987
IP address blocks: 185.127.125.0/24 maxlen: 24
185.127.124.0/24 maxlen: 24
185.127.127.0/24 maxlen: 24
185.127.126.0/24 maxlen: 24
193.27.233.0/24 maxlen: 24
193.27.232.0/24 maxlen: 24
193.27.234.0/24 maxlen: 24
193.27.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13096549 (0xc7d665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jan 1 07:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eb46348f2b2a516eaf39351d9e51df3802affc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:48:ce:51:b1:89:77:37:81:e0:97:64:22:
bd:4f:32:84:c4:d1:95:8b:9a:13:f7:f7:27:d8:8b:
5b:33:a1:3c:8a:0a:48:83:51:0a:b2:ad:51:ab:84:
3c:66:20:9b:97:51:06:ca:68:2d:0e:98:78:d5:35:
1b:f5:1d:9b:ea:fb:d5:29:09:56:26:5b:18:c9:01:
9e:0b:c0:cf:d3:5e:b7:ff:bb:55:dc:c9:d7:9e:0d:
52:b7:ba:c9:34:36:8e:1e:82:c9:14:35:ea:0f:54:
ac:82:e7:78:50:cf:40:e3:5d:50:30:99:ba:d5:c3:
e6:24:61:cc:97:44:a2:d0:b1:23:9f:83:81:3b:53:
e0:43:6c:68:91:77:67:7f:7f:66:b4:90:97:cf:f9:
e5:77:6e:f0:1b:58:ac:8e:2d:ea:36:d5:5e:0a:23:
12:72:68:d3:83:49:3f:8b:d4:03:d9:24:64:fd:33:
37:69:da:21:bf:59:11:f4:cd:3a:dc:54:b4:0b:28:
73:c8:b0:20:18:e1:73:ca:ce:da:2d:cd:a0:7e:34:
0b:6b:83:f3:b4:f3:b8:74:ea:da:22:cd:1c:43:16:
c0:ca:9f:45:89:c7:a0:0a:70:20:a6:5c:4b:81:0b:
15:02:7e:e8:12:1d:1b:59:ab:d0:da:e6:b0:20:d3:
92:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:63:48:F2:B2:A5:16:EA:F3:93:51:D9:E5:1D:F3:80:2A:FF:C8
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/jrRjSPKypRbq85NR2eUd84Aq_8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.124.0/22
193.27.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:d7:24:6d:29:a2:ce:79:1c:81:6d:2f:07:e9:c7:c4:3b:49:
5d:f0:8a:d7:d5:d3:38:00:d6:90:62:82:73:22:7c:68:c2:5c:
60:18:f2:3c:93:2d:52:98:63:6c:57:0f:76:1f:35:89:18:0e:
c2:35:76:b8:67:c2:e5:1f:a6:2d:de:77:7d:64:19:01:04:e9:
98:e6:7e:29:74:b6:0f:84:b4:4c:30:02:af:51:3f:95:9b:4a:
ef:11:64:7d:20:7b:78:77:63:1e:3b:45:3a:35:4a:b7:cb:42:
a8:6b:17:61:75:8a:e2:53:9b:da:20:63:d1:dc:b4:5b:1f:90:
f4:9e:bb:67:59:43:81:9c:32:9b:ad:9c:a9:12:55:0b:c3:52:
13:ea:58:22:7a:18:e5:aa:9d:d5:00:b9:5f:03:a1:49:9a:de:
89:49:2d:7c:97:f6:90:3b:d3:50:23:50:40:d8:4a:f9:6d:f8:
59:97:ba:2b:46:75:4c:94:9d:e0:c5:65:02:0e:07:b9:74:e3:
4f:ba:66:a2:87:b8:08:f8:1d:89:ef:99:ef:54:7c:0f:fb:f4:
2d:db:fe:80:55:a6:81:05:bf:ba:87:c9:01:95:b6:9c:d9:65:
4e:89:c1:ce:3f:83:e5:c0:60:50:e5:69:57:c9:64:4d:bb:36:
9e:21:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:16 2024 by rpki-client on console-fra.rpki-client.org