Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/JiD4KajhGlTZNg-PsHM-R1iMng8.roa
File: JiD4KajhGlTZNg-PsHM-R1iMng8.roa (raw, json)
Hash identifier: zYo0Rw4gp6DIDKxNjkygWt4Wq4qv2uQUDdegiEuQaco=
Subject key identifier: 26:20:F8:29:A8:E1:1A:54:D9:36:0F:8F:B0:73:3E:47:58:8C:9E:0F
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 387CB66D
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/JiD4KajhGlTZNg-PsHM-R1iMng8.roa
Signing time: Sat 01 Jan 2022 16:10:56 +0000
ROA not before: Sat 01 Jan 2022 16:10:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 217.196.16.0/20 maxlen: 20
77.245.96.0/20 maxlen: 20
93.185.64.0/20 maxlen: 20
95.141.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947697261 (0x387cb66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 16:10:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2620f829a8e11a54d9360f8fb0733e47588c9e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:26:b4:db:4d:02:63:f1:67:76:a8:5d:43:
f3:15:df:bd:6b:dd:3a:98:74:d2:7c:14:05:0f:12:
11:44:3b:1e:70:32:af:5e:17:cc:6c:0a:51:33:bd:
c1:27:44:bd:19:a2:28:1b:4d:b2:15:a1:6e:b4:d9:
bd:6b:18:26:0e:ac:c1:2f:fd:57:4e:c8:3b:98:c1:
01:a5:67:4d:7a:75:f8:32:27:4d:4f:b1:33:65:f0:
c0:c5:31:21:9c:37:59:c8:64:25:2c:c9:56:88:ee:
d3:67:c7:b4:5b:3d:15:ac:91:dc:1b:37:02:c9:49:
7a:d9:11:47:0e:ee:d7:54:c9:06:a7:ca:60:a1:a5:
4b:c9:78:3b:0c:c5:41:d6:49:e0:1d:d0:64:a9:bd:
99:12:36:3d:dd:99:b6:a1:7e:4a:7e:ad:f5:4b:d6:
16:b8:e8:4a:66:6a:84:5b:4b:0f:56:5c:8a:09:bc:
0a:5a:72:ce:50:e0:3b:05:ce:cb:91:6c:ea:ae:f8:
31:cd:ec:0a:0e:cd:b6:90:b6:3e:c0:6e:5f:74:ad:
4a:85:fb:81:5a:b4:be:ec:51:ca:70:58:d6:1b:ab:
76:e9:94:19:b2:ca:d2:f6:ba:f2:fb:df:23:2f:7e:
a3:83:c8:94:f9:e0:c8:fd:7a:b5:d8:ed:dd:c9:a2:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:F8:29:A8:E1:1A:54:D9:36:0F:8F:B0:73:3E:47:58:8C:9E:0F
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/JiD4KajhGlTZNg-PsHM-R1iMng8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.96.0/20
93.185.64.0/20
95.141.128.0/20
217.196.16.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:83:17:45:ad:15:7f:6a:50:32:3b:0e:9f:e4:bc:e5:41:d9:
cc:fc:b3:b9:11:c3:c0:f6:cb:23:25:64:8f:2e:09:ab:b2:1f:
57:45:bd:9d:fe:20:aa:da:19:73:27:53:29:9c:59:20:0c:81:
a7:1c:38:9d:ac:47:03:b4:93:eb:85:33:2f:8d:29:a6:9e:3b:
e1:b0:0a:07:21:b7:10:af:f0:62:23:7f:1b:0f:6f:17:dd:b7:
20:e3:9c:b3:5c:49:01:b1:69:a4:15:ab:d4:74:f1:62:d3:68:
95:8b:92:2a:fe:6d:2a:7a:63:e6:5f:26:e8:98:f4:33:87:23:
d0:1e:2e:c0:17:f3:75:e0:ed:9f:be:5d:e9:7d:66:4f:0f:d9:
a5:21:38:e6:4a:7a:80:53:a1:fe:a7:db:3f:b7:08:ba:c3:8f:
8e:53:72:12:0f:18:78:22:79:df:c1:78:e9:33:50:05:b8:14:
21:fc:a9:32:cb:0e:42:7a:d4:8b:01:f2:c6:c9:f5:34:95:3d:
88:02:67:a9:01:c8:e3:a1:36:c4:5b:af:96:f3:eb:a3:fa:67:
f5:24:f0:0e:60:84:d0:85:85:6b:6e:28:cf:df:b0:53:fe:97:
b2:67:13:bb:0c:11:e9:b1:7a:33:48:a0:cc:88:5e:be:7f:20:
19:36:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org