Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/29LPU8wk80EbA2BjVe2xH4pm8og.roa
File: 29LPU8wk80EbA2BjVe2xH4pm8og.roa (raw, json)
Hash identifier: jyCgQNT6TxsYLc/zBGHSDOHR082NTpN840h8n4pOOiA=
Subject key identifier: DB:D2:CF:53:CC:24:F3:41:1B:03:60:63:55:ED:B1:1F:8A:66:F2:88
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 01823F2FA482B2607C3D7BBF1C4990143EA0
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/29LPU8wk80EbA2BjVe2xH4pm8og.roa
Signing time: Wed 27 Jul 2022 10:24:23 +0000
ROA not before: Wed 27 Jul 2022 10:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5420
IP address blocks: 192.40.73.0/24 maxlen: 24
192.40.76.0/24 maxlen: 24
192.40.77.0/24 maxlen: 24
192.40.78.0/24 maxlen: 24
192.40.72.0/24 maxlen: 24
192.40.75.0/24 maxlen: 24
2001:67c:21a4::/48 maxlen: 48
2a06:f040::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3f:2f:a4:82:b2:60:7c:3d:7b:bf:1c:49:90:14:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jul 27 10:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbd2cf53cc24f3411b03606355edb11f8a66f288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:36:af:4a:49:35:47:d2:df:43:65:fd:4c:
0c:b1:20:2b:46:1c:1a:29:53:b3:c2:eb:48:77:f3:
b6:28:a0:4b:28:be:0b:58:d0:76:7a:4b:63:32:f7:
2e:b2:72:54:5b:c4:16:43:c0:5b:a3:88:2c:19:09:
5e:9b:8c:02:22:dc:e6:75:27:21:18:5a:92:76:61:
76:cc:94:02:28:ad:0d:21:92:3c:0e:f1:84:4b:36:
37:55:8e:11:86:62:72:aa:18:6f:38:d0:81:cd:e0:
12:ec:d8:31:a7:97:c9:89:c8:c3:7a:ed:c7:a1:19:
5a:2b:b7:35:a5:eb:6a:c2:5b:03:f0:29:23:48:4d:
70:d7:05:6b:9d:47:55:71:6e:b8:75:e3:3d:ee:ba:
98:c9:5e:01:5d:20:87:e6:4b:b5:ca:78:74:67:5d:
32:da:1b:78:c4:d9:21:2b:59:2d:ab:58:87:59:7e:
0e:a8:9b:21:b6:e6:46:fb:de:48:69:b0:ff:76:7d:
38:24:23:be:74:64:81:a3:c7:fd:3f:1d:e1:f9:4a:
83:d3:72:26:fb:bb:cd:63:88:8b:1c:58:df:9b:90:
20:21:9e:b2:10:c7:2b:73:4b:90:06:2f:cd:3e:08:
3f:ad:74:40:e9:3d:d8:14:ee:bf:53:6a:f4:e6:95:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D2:CF:53:CC:24:F3:41:1B:03:60:63:55:ED:B1:1F:8A:66:F2:88
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/29LPU8wk80EbA2BjVe2xH4pm8og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.72.0/23
192.40.75.0-192.40.78.255
IPv6:
2001:67c:21a4::/48
2a06:f040::/32
Signature Algorithm: sha256WithRSAEncryption
c9:5f:7b:cb:32:65:8e:35:6d:1f:87:09:7b:99:cc:8a:d3:1f:
58:7f:46:a2:64:a8:56:84:99:ba:68:76:8d:95:df:c1:32:47:
e0:df:0d:e5:e3:0e:cd:b5:77:16:be:3a:49:5d:19:fc:43:70:
86:d2:e2:04:6c:e9:7c:eb:a2:bd:58:3f:5b:70:a4:aa:d0:94:
0a:28:19:1b:4f:75:a8:93:83:14:04:0d:24:06:46:f6:d1:3a:
f5:ee:db:de:59:c0:86:27:05:a2:ec:f8:ca:8d:16:86:7f:00:
87:c5:b1:14:96:e5:0c:2b:4f:a4:b8:a8:50:42:bf:9e:33:c2:
48:33:e9:7b:b7:0b:e8:37:23:9c:bc:a9:e2:49:44:5f:c3:ad:
1e:90:21:9f:39:33:7c:f5:93:52:0b:f1:8c:ad:3e:0c:74:1a:
ab:6a:6e:dc:ba:bb:b1:cb:03:75:ff:0f:cd:53:e5:27:1a:54:
30:5d:30:61:98:80:9c:7e:d2:58:7d:91:b0:9e:00:b3:af:c9:
1e:9a:ec:52:61:01:f4:d0:48:44:aa:a6:45:9b:d1:95:86:eb:
7e:11:9a:09:6b:ed:f5:17:f6:00:35:9d:2b:d0:0c:f4:e3:54:
7e:ab:7b:2c:da:d6:f0:7e:76:d0:e3:0a:4f:de:3a:0f:f4:89:
66:55:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org