Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/jDzyXrdNeSdHloNOiCD0bHhyTrg.roa
File: jDzyXrdNeSdHloNOiCD0bHhyTrg.roa (raw, json)
Hash identifier: QyvTz9wBDQyMtEqgvFJ6xdzCmWynn20Gayy8CVAR1Hc=
Subject key identifier: 8C:3C:F2:5E:B7:4D:79:27:47:96:83:4E:88:20:F4:6C:78:72:4E:B8
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 06BBB732
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/jDzyXrdNeSdHloNOiCD0bHhyTrg.roa
Signing time: Sat 01 Jan 2022 09:01:06 +0000
ROA not before: Sat 01 Jan 2022 09:01:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12605
IP address blocks: 212.33.32.0/19 maxlen: 19
90.146.0.0/17 maxlen: 17
90.146.0.0/16 maxlen: 16
185.196.156.0/22 maxlen: 22
81.10.128.0/17 maxlen: 17
90.146.128.0/17 maxlen: 17
212.241.64.0/18 maxlen: 18
86.56.128.0/17 maxlen: 17
2a00:cf8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112965426 (0x6bbb732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jan 1 09:01:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c3cf25eb74d79274796834e8820f46c78724eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:87:62:59:85:b0:62:bd:cf:32:03:b5:45:
5f:48:32:05:32:18:71:36:5e:88:cd:6d:6a:e2:70:
80:2c:c6:65:af:f1:54:1f:53:b7:05:6b:ca:92:9d:
5d:63:25:f9:7d:bf:e5:9f:d5:e1:53:89:64:9a:1f:
07:0d:df:72:fe:b6:aa:bc:9b:d7:15:8d:f3:1b:3f:
fb:22:1b:97:d0:60:fa:4c:8a:49:c9:b4:4f:ea:31:
e1:52:e1:a8:f6:d8:3b:ce:43:21:28:fd:9d:fb:ac:
69:09:71:c7:6b:9c:95:2a:cb:60:0c:19:de:58:e4:
21:eb:bc:0b:e2:e2:06:64:8f:a2:57:0f:79:1f:71:
d5:bf:03:2a:a0:b5:85:73:c8:51:e9:28:49:12:3a:
4b:fe:e9:ba:1d:57:02:80:17:50:a3:f0:25:da:de:
c6:e0:d9:bd:4e:98:26:3a:2c:0f:5c:19:55:a1:57:
89:3d:8a:1a:8f:02:b6:40:e6:1d:07:f3:24:b6:2e:
6d:8a:99:c6:33:7f:8e:20:6c:ba:df:00:20:6b:8f:
06:c5:3d:07:af:d2:22:dc:16:95:8c:b8:f7:03:ef:
d9:4f:3c:a1:d7:92:43:0a:03:4e:ad:8c:3f:8d:7b:
af:96:0a:c4:7e:1f:de:51:3d:54:c2:d7:5e:5a:8d:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3C:F2:5E:B7:4D:79:27:47:96:83:4E:88:20:F4:6C:78:72:4E:B8
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/jDzyXrdNeSdHloNOiCD0bHhyTrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.10.128.0/17
86.56.128.0/17
90.146.0.0/16
185.196.156.0/22
212.33.32.0/19
212.241.64.0/18
IPv6:
2a00:cf8::/32
Signature Algorithm: sha256WithRSAEncryption
c2:cc:d1:74:63:95:54:ce:b0:fa:73:c4:4e:47:b3:55:3e:40:
0a:9e:69:ad:46:4c:e5:a8:db:fa:02:b8:66:d1:55:e5:3b:d5:
12:22:3d:65:fd:aa:be:14:ce:16:16:19:0e:e2:34:a5:bb:02:
a5:16:a7:3c:6a:b6:0b:67:59:cf:b8:83:16:62:9d:c4:e1:39:
e3:91:02:c4:89:47:24:3e:c9:78:08:d1:2e:ed:96:40:85:4c:
34:c3:0f:b6:2c:b4:93:dd:b1:76:ad:ab:5b:47:db:08:c2:e3:
17:4c:62:b7:88:ac:24:19:b8:3f:76:5e:5b:fd:12:6f:c7:4e:
4d:4c:e1:7d:96:e5:87:c7:4b:7e:27:3d:8b:b3:69:d5:ca:16:
02:13:ec:88:a6:7f:bb:43:b4:6f:ff:4b:1a:b7:5f:25:a9:8c:
82:a6:19:12:82:52:fe:5c:6e:11:75:cc:44:5b:e0:49:30:f9:
d1:70:4f:b3:d4:30:14:a7:19:9a:58:53:bb:3d:24:c8:56:98:
66:2a:57:c9:24:ae:f4:60:6e:f9:7f:fc:5f:fb:c6:d5:bd:81:
23:de:3a:d9:4a:17:2a:41:8a:98:a0:98:13:9d:09:a1:92:ce:
56:d0:cd:34:08:a9:a3:b4:5d:49:d0:4b:d0:79:7c:1e:55:1e:
84:96:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:03 2024 by rpki-client on console-fra.rpki-client.org