Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/jDjsvJdG5_KOqKs9b7hpbr--OtM.roa
File: jDjsvJdG5_KOqKs9b7hpbr--OtM.roa (raw, json)
Hash identifier: EessRsoA9y+Xu1oM0ZRYjYjuUbLazFy1Zf1Kl5plEXI=
Subject key identifier: 8C:38:EC:BC:97:46:E7:F2:8E:A8:AB:3D:6F:B8:69:6E:BF:BE:3A:D3
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 1A053BDD
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/jDjsvJdG5_KOqKs9b7hpbr--OtM.roa
Signing time: Wed 16 Mar 2022 10:03:25 +0000
ROA not before: Wed 16 Mar 2022 10:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16839
IP address blocks: 138.12.128.0/17 maxlen: 24
37.98.232.0/21 maxlen: 24
148.139.104.0/24 maxlen: 24
163.120.128.0/17 maxlen: 24
2a04:37c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436550621 (0x1a053bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Mar 16 10:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c38ecbc9746e7f28ea8ab3d6fb8696ebfbe3ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:ac:36:3f:36:61:f2:a1:20:83:9a:dd:f7:
b0:a6:db:b9:b6:1e:0e:06:72:fb:5c:07:41:05:d5:
a8:31:8c:ae:d3:b8:61:aa:07:d5:2d:60:b2:d7:77:
cd:48:fa:47:2e:76:78:83:40:16:98:bf:0f:f9:5b:
b7:72:57:46:6c:46:1d:72:72:71:98:d0:7b:e1:de:
93:17:e6:79:11:7e:7f:02:6e:a1:fe:a2:ba:d7:e5:
06:c1:80:95:78:66:13:6c:d6:b0:0d:6c:b4:cb:e7:
26:09:f2:6d:6f:38:74:04:81:12:21:98:83:3f:f9:
f8:61:e0:67:51:93:38:d4:61:25:8f:67:2d:aa:be:
2e:ac:ff:5e:ba:cd:b6:3f:f7:ea:21:0b:8e:77:ab:
5f:0b:db:44:62:b2:8e:08:0d:f9:81:70:68:e9:5f:
1e:cb:c2:71:62:5b:6d:7a:23:49:68:63:5c:1b:7e:
61:7b:92:6c:4d:d2:53:77:78:df:e0:b0:37:a1:f1:
bb:1d:ba:10:24:28:70:b1:c5:be:25:5d:3a:d3:fc:
18:dc:bb:d1:eb:47:18:98:60:08:83:92:45:87:d7:
53:12:55:46:bb:6d:75:ba:14:d2:13:8d:5d:e6:a3:
4e:dc:db:cc:b9:48:62:d0:cc:78:11:50:8f:e7:05:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:EC:BC:97:46:E7:F2:8E:A8:AB:3D:6F:B8:69:6E:BF:BE:3A:D3
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/jDjsvJdG5_KOqKs9b7hpbr--OtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.104.0/24
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:72:0c:4f:c2:77:9e:9e:43:72:b1:b3:ed:0a:96:7e:e0:09:
09:aa:a3:43:07:fe:4b:df:6a:55:9c:9e:e0:ef:b4:a8:8c:3a:
61:7f:1a:48:b3:ad:a1:d7:70:a9:da:08:d0:48:e8:c2:1f:fe:
54:19:90:2d:9d:b6:81:8f:32:e1:d6:4a:28:c8:30:cf:b7:a5:
81:63:70:e7:5d:57:ba:b2:b6:c3:af:5c:61:fd:cd:03:85:15:
14:69:64:6a:c7:e1:c4:d1:36:89:a4:bc:05:ac:d2:56:24:e0:
dc:e1:c4:92:d7:0b:38:9c:30:55:50:f6:77:4f:8a:be:29:4b:
cc:6b:7a:1a:9d:c0:ec:78:df:34:7d:59:01:2c:b9:0d:ee:e8:
62:c9:a7:6d:16:ab:5b:7e:bb:3e:cc:e3:fa:73:e6:3a:60:01:
a7:da:54:8b:6f:c7:93:7a:4c:3f:48:d1:28:81:7c:85:b4:87:
3f:42:e9:6f:8f:f9:79:87:08:1d:e1:36:8c:d3:6b:f6:c1:30:
0a:ac:d5:00:c2:d2:90:ec:95:9a:dd:b9:0a:e1:c3:91:43:2a:
8a:0a:67:a7:6f:71:07:7c:13:e7:63:4d:88:48:ee:15:98:86:
29:85:af:b8:26:b7:ff:af:87:98:1d:89:6b:4a:f6:f0:e1:b0:
0d:0f:86:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:25 2023 by rpki-client on console-fra.rpki-client.org