Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/GeuvQ1oybXlJRoDKCUprvoes-dY.roa
File: GeuvQ1oybXlJRoDKCUprvoes-dY.roa (raw, json)
Hash identifier: f/F1ppAtKyF0KqJtTy7PbQcZ9iy7x/J1HdMBoI87jcQ=
Subject key identifier: 19:EB:AF:43:5A:32:6D:79:49:46:80:CA:09:4A:6B:BE:87:AC:F9:D6
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 0181FD3A5ED33D571A49F0CAE31821F52A9C
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/GeuvQ1oybXlJRoDKCUprvoes-dY.roa
Signing time: Thu 14 Jul 2022 15:01:09 +0000
ROA not before: Thu 14 Jul 2022 15:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39878
IP address blocks: 185.196.240.0/22 maxlen: 22
185.87.238.0/23 maxlen: 23
185.87.237.0/24 maxlen: 24
91.135.160.0/20 maxlen: 20
185.33.8.0/22 maxlen: 22
2a04:40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:3a:5e:d3:3d:57:1a:49:f0:ca:e3:18:21:f5:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jul 14 15:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ebaf435a326d79494680ca094a6bbe87acf9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:0f:2d:a3:9b:7a:c9:4a:94:ce:9e:29:c7:
a0:34:e6:cd:27:d4:2e:93:b1:ca:e3:e6:62:ea:5c:
28:45:48:45:6f:c4:97:e4:c1:92:fe:69:6a:58:d4:
96:39:e0:08:5a:76:9e:52:00:62:b3:8a:17:76:e5:
0a:cd:42:6f:3c:25:e4:2b:40:7f:25:6a:09:78:91:
26:0f:c0:93:4a:35:1d:4e:bb:31:78:a4:c1:04:23:
8a:85:55:08:cf:f4:f0:4e:f4:d1:3e:31:93:cd:6b:
3f:bb:7c:4a:00:ac:b7:8c:d5:23:6a:b8:11:c1:ea:
ba:cd:7e:6b:0b:72:88:41:a4:95:59:52:87:2b:4b:
60:45:da:60:ab:22:33:16:af:be:27:4a:a7:bb:76:
b7:d2:eb:eb:f5:37:65:11:09:22:0b:a0:d0:aa:28:
90:6b:45:30:14:0b:4b:ea:99:51:a8:13:05:4a:fa:
d2:9c:da:c2:91:cd:6c:ce:86:2b:e7:4a:67:ab:9c:
42:65:66:87:db:96:ad:41:a6:cf:fd:76:1d:d1:48:
b1:95:a2:af:a7:bc:c2:c7:a3:86:84:cc:99:5e:26:
6d:91:36:fb:35:b7:ad:48:2c:56:24:9f:cc:d3:b0:
ef:97:43:33:15:f3:a9:d1:a7:78:99:50:15:be:51:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:AF:43:5A:32:6D:79:49:46:80:CA:09:4A:6B:BE:87:AC:F9:D6
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/GeuvQ1oybXlJRoDKCUprvoes-dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.160.0/20
185.33.8.0/22
185.87.237.0-185.87.239.255
185.196.240.0/22
IPv6:
2a04:40::/29
Signature Algorithm: sha256WithRSAEncryption
72:4a:99:35:29:0a:79:cc:58:88:5b:b6:83:71:8b:29:33:e0:
8c:c7:24:a9:c3:6d:bf:4d:65:f9:6c:5e:5f:7d:88:78:0d:8c:
4a:64:8f:7b:9b:1e:47:9a:bb:99:08:a0:1f:d7:b5:dc:b1:37:
e6:8f:d0:c0:51:ca:81:ac:38:8e:34:f9:eb:d6:8d:43:d2:6b:
67:9f:5f:d3:2d:fd:62:78:f9:22:e4:50:18:e3:eb:f2:72:50:
58:c3:d7:0a:48:e9:57:8e:0c:79:e7:10:6d:3c:52:51:39:67:
6f:aa:d0:aa:2b:c5:14:0e:8c:22:fd:95:62:20:3b:c9:c2:81:
d7:4a:22:09:4f:a0:28:5b:ea:f7:12:ff:49:9f:23:1e:c2:74:
11:71:1c:7f:6e:21:f9:93:f7:39:66:35:16:75:56:85:0d:c2:
48:31:6e:51:0b:da:50:15:2a:7c:d5:5d:7f:a8:2a:99:3a:f6:
94:1a:f4:d8:01:f0:56:eb:aa:61:84:f5:dc:04:43:0b:2c:7d:
69:18:b7:f4:ed:a1:cf:46:de:25:e4:cd:d1:fa:66:9e:77:06:
7f:c6:e9:5b:b3:b9:37:b2:e4:8d:79:f4:04:84:0e:63:c0:f2:
51:ec:85:ea:a6:7e:ec:5b:21:e8:17:8a:21:10:6a:51:70:da:
98:04:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:11 2024 by rpki-client on console-ams.rpki-client.org