Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/5JqwJOflUbXKXyC6jbCB7qqltTI.roa
File: 5JqwJOflUbXKXyC6jbCB7qqltTI.roa (raw, json)
Hash identifier: wxc4Dhw7DJ8pxXMAOiUzKdSnfKUghwebzBkFeBrPGNo=
Subject key identifier: E4:9A:B0:24:E7:E5:51:B5:CA:5F:20:BA:8D:B0:81:EE:AA:A5:B5:32
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 021464ED
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/5JqwJOflUbXKXyC6jbCB7qqltTI.roa
Signing time: Sat 01 Jan 2022 16:10:45 +0000
ROA not before: Sat 01 Jan 2022 16:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3330
IP address blocks: 92.63.213.0/24 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 24
78.142.88.0/23 maxlen: 24
195.16.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34890989 (0x21464ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 1 16:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e49ab024e7e551b5ca5f20ba8db081eeaaa5b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:81:0a:82:8a:0e:15:39:24:de:68:46:82:
89:d8:7f:a8:2c:a5:51:31:d9:b4:a1:ce:db:a7:55:
2d:3f:d5:14:2e:07:85:14:14:f6:58:c4:8d:a8:11:
03:ea:8e:d2:8d:ed:38:24:cb:fc:c7:4e:4e:68:d8:
e7:4c:20:70:14:d6:81:16:a8:68:47:91:d8:79:da:
e5:9f:c7:68:6f:06:8b:73:38:06:53:43:aa:3f:fd:
fc:89:f8:5f:fb:49:72:8a:82:ed:c3:35:53:e3:23:
56:b4:66:f6:be:1c:46:7c:67:66:9a:e5:41:e3:08:
6e:61:22:bf:de:db:71:12:72:0b:36:4c:e9:66:02:
76:61:ee:c1:da:42:7a:6e:ed:cb:6d:a0:ad:e6:41:
ba:29:cd:6f:1a:8b:01:70:df:9d:3e:70:f0:4c:ee:
e6:ff:4a:c1:45:b8:6d:46:db:56:20:c8:99:20:75:
14:2b:37:fc:17:ac:2b:e2:41:83:38:f0:f6:04:ed:
e3:df:be:b9:a2:3c:15:b8:94:6c:ca:c3:b2:56:04:
ca:68:21:1f:51:69:48:22:b8:05:43:a1:73:9c:73:
3b:a6:01:df:a7:e3:cc:dc:b2:ed:c6:00:04:ee:70:
54:eb:8a:4a:2d:da:0f:f5:e9:b4:f5:28:ba:ee:8a:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:B0:24:E7:E5:51:B5:CA:5F:20:BA:8D:B0:81:EE:AA:A5:B5:32
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/5JqwJOflUbXKXyC6jbCB7qqltTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.66.0/23
78.142.85.0-78.142.89.255
92.63.213.0/24
195.16.244.0/24
Signature Algorithm: sha256WithRSAEncryption
87:52:4a:da:67:a9:3b:68:e7:a6:ee:0c:d6:88:32:ed:d0:bf:
31:76:48:f7:64:d4:04:4a:c6:d7:1e:68:70:a8:97:8d:71:3d:
36:1f:78:3f:fb:ba:93:36:a4:e5:a6:e1:0c:3a:5d:7e:4f:23:
30:52:b4:35:55:9b:c7:4b:78:0f:cc:84:d7:31:88:53:a4:84:
e7:42:42:bb:bb:c5:28:82:c0:3f:06:2e:39:4b:66:e5:41:f3:
af:87:a6:34:28:2c:e9:67:7e:96:ed:2b:20:b7:35:02:59:cd:
e5:32:d4:b5:68:4a:2d:1e:2d:1c:61:3d:8d:cd:10:72:df:82:
5a:30:74:a4:97:96:3f:e1:8c:82:8b:73:99:d3:10:54:b4:4b:
86:75:6c:62:d3:4c:d5:fd:c5:1f:7d:c9:3f:cb:a7:be:66:66:
cf:e4:ba:71:d1:1d:39:d7:87:b2:62:88:3b:f1:10:ca:85:65:
fd:05:93:78:e4:91:91:80:d8:03:39:25:dc:d8:2c:9e:11:6b:
67:4a:32:42:fe:23:9b:ab:43:c5:b6:1f:d1:2e:6e:f6:7d:6a:
f6:84:a6:5b:b3:aa:da:89:16:93:6d:0a:51:f2:e6:e9:b7:9b:
b8:48:05:42:81:64:2a:55:26:49:e1:6e:7c:2b:ea:d3:a9:19:
19:c4:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org