Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/Z9dLF85baegnGsABl44_JbjUg-o.roa
File: Z9dLF85baegnGsABl44_JbjUg-o.roa (raw, json)
Hash identifier: LXAML+oPQUwgezS5TXKMyQh0kRHk95EWGP2tql8TVu4=
Subject key identifier: 67:D7:4B:17:CE:5B:69:E8:27:1A:C0:01:97:8E:3F:25:B8:D4:83:EA
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 0FF89572
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/Z9dLF85baegnGsABl44_JbjUg-o.roa
Signing time: Sat 01 Jan 2022 16:04:10 +0000
ROA not before: Sat 01 Jan 2022 16:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35703
IP address blocks: 193.227.204.0/23 maxlen: 23
77.75.208.0/21 maxlen: 21
193.160.156.0/23 maxlen: 23
2a00:e48::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267949426 (0xff89572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jan 1 16:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67d74b17ce5b69e8271ac001978e3f25b8d483ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:89:02:05:cb:6d:df:dc:40:c0:1f:67:68:
44:96:d8:76:c9:1e:bf:b6:ec:54:e1:4f:dd:29:54:
54:fd:84:da:fb:e0:5b:8e:52:1b:13:65:39:ba:f4:
30:9b:c4:6d:32:44:15:ad:19:5f:dc:cb:71:04:5d:
26:1a:98:c7:de:c3:b6:0b:28:8b:fb:c2:8e:12:99:
b5:97:5f:01:52:c9:4a:7a:56:2a:b1:29:7e:91:54:
7e:5b:78:09:b0:9d:40:77:cc:6d:15:d1:bf:20:d9:
0e:43:ec:f9:47:67:54:79:f6:e7:a6:6e:fa:02:93:
ee:96:f0:ad:4b:10:e4:91:27:e3:cd:9f:2f:74:60:
fc:c1:a5:02:79:62:75:a8:cd:50:db:8e:de:7d:b3:
65:76:75:5c:64:0f:12:de:3b:10:7f:b9:ae:38:dd:
f0:ea:ce:cb:ce:87:3d:1a:99:57:0c:26:70:b0:1d:
09:d8:6f:5a:05:4b:d1:34:47:81:9a:6c:6b:11:5b:
f5:5e:8d:7a:d1:0a:05:f9:07:f7:3d:7c:76:9c:c7:
56:cd:72:7e:79:07:d3:ab:03:85:8a:a5:6f:d7:93:
da:d1:3c:d2:8c:75:f3:b2:f8:55:47:b3:36:8d:25:
57:78:40:a7:ad:7c:7a:f5:73:d1:e2:00:19:62:c8:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:4B:17:CE:5B:69:E8:27:1A:C0:01:97:8E:3F:25:B8:D4:83:EA
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/Z9dLF85baegnGsABl44_JbjUg-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.208.0/21
193.160.156.0/23
193.227.204.0/23
IPv6:
2a00:e48::/33
Signature Algorithm: sha256WithRSAEncryption
61:14:8a:8b:fc:90:2c:a8:20:ba:46:f9:c1:7d:29:7f:02:82:
af:cc:05:1b:f8:b7:f9:01:4b:5e:fa:c7:23:be:33:5c:b5:6b:
05:b7:8c:38:dd:cd:a2:d4:58:20:9c:ce:87:3f:0c:a6:86:1f:
c6:69:36:7c:8f:a5:8f:a1:c6:a9:fb:d5:36:5f:e5:31:6e:31:
5d:91:c9:30:97:da:19:c7:b1:fc:89:f5:26:37:31:24:a9:4e:
38:b4:8f:60:a1:9d:3e:4d:e5:4e:28:04:2d:18:26:36:93:11:
2f:7f:96:d5:63:1f:43:93:9b:bd:1d:82:bb:8a:43:12:f1:47:
9d:2b:4e:de:0a:03:11:34:92:ea:3a:24:69:dd:1e:09:42:84:
82:9b:32:7e:44:de:d4:b9:ee:fa:fd:8c:15:a1:5b:22:e9:f0:
2a:ab:f2:73:1a:41:fc:73:dc:47:64:35:2e:51:86:68:91:b5:
8e:bc:45:76:52:aa:3a:43:26:bc:d1:bf:1a:9b:c8:9d:23:b3:
03:40:e1:90:17:af:fa:f0:c8:b1:23:25:9b:08:30:f4:35:be:
94:b8:fe:82:cf:7f:b0:1b:3a:b1:e8:77:91:54:63:94:b7:44:
48:13:f1:19:b6:0e:73:b8:2c:ac:79:f9:ff:2e:78:6a:a5:d7:
25:f5:e7:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:27 2024 by rpki-client on console-ams.rpki-client.org