Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/0qo6jHDB9bAxMD2_GX_4FRroQ8E.roa
File: 0qo6jHDB9bAxMD2_GX_4FRroQ8E.roa (raw, json)
Hash identifier: sYbnB51VSvDlrSddYhuiujZtZIkAIP8dsNI33ZTH/1w=
Subject key identifier: D2:AA:3A:8C:70:C1:F5:B0:31:30:3D:BF:19:7F:F8:15:1A:E8:43:C1
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 0182ED3E076A7CA6F771F504F36179692475
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/0qo6jHDB9bAxMD2_GX_4FRroQ8E.roa
Signing time: Tue 30 Aug 2022 05:34:01 +0000
ROA not before: Tue 30 Aug 2022 05:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39775
IP address blocks: 91.204.16.0/22 maxlen: 24
81.90.208.0/20 maxlen: 24
185.149.124.0/22 maxlen: 24
185.190.0.0/22 maxlen: 24
62.192.32.0/19 maxlen: 24
2a02:1378::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:3e:07:6a:7c:a6:f7:71:f5:04:f3:61:79:69:24:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Aug 30 05:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2aa3a8c70c1f5b031303dbf197ff8151ae843c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:50:18:ad:55:fb:64:56:62:02:2c:24:0a:
85:5f:12:c9:28:56:c8:bc:7f:8a:ff:fd:bb:7b:be:
4e:b4:61:b2:3e:c1:e0:90:ef:9e:c5:b3:05:8f:d1:
97:b0:c3:38:6e:ed:da:5c:42:13:51:bd:56:63:ab:
99:58:ca:eb:09:f1:87:1e:6f:f1:50:7d:f8:0c:22:
d2:37:b6:e3:52:7f:6f:36:e6:36:b3:c5:1f:b2:4d:
96:d4:a8:a6:f2:26:34:40:bb:7c:78:6e:44:b7:96:
12:2c:0d:ec:a4:69:d0:66:77:65:4e:94:cf:0b:6d:
c0:6e:0d:2f:50:54:e2:dc:46:a6:d2:90:24:32:ec:
0a:41:40:e6:c8:4a:a7:69:c2:e6:10:1f:33:90:6f:
41:5d:23:74:7e:c2:05:b7:c9:b4:0c:db:2c:e0:ef:
fa:80:85:9b:0a:93:ab:53:7c:a4:b5:3f:0f:fa:fe:
e6:e8:f1:05:1a:90:3d:e6:fb:f9:e2:c4:3a:c1:b9:
08:7d:c8:9c:3e:e8:11:c2:4d:23:f7:49:58:f9:6c:
72:88:3c:12:88:53:86:97:b1:eb:01:68:7e:67:75:
47:dd:7e:cf:b8:9a:19:35:97:ba:b1:e9:47:7c:a3:
19:ed:f2:f8:12:05:e4:aa:52:5b:05:42:43:ad:c7:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:3A:8C:70:C1:F5:B0:31:30:3D:BF:19:7F:F8:15:1A:E8:43:C1
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/0qo6jHDB9bAxMD2_GX_4FRroQ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.32.0/19
81.90.208.0/20
91.204.16.0/22
185.149.124.0/22
185.190.0.0/22
IPv6:
2a02:1378::/32
Signature Algorithm: sha256WithRSAEncryption
45:5d:0e:60:da:8d:7b:a2:06:c1:1c:27:96:b4:94:bf:70:ca:
52:ef:7f:96:fc:ee:77:5f:5d:b7:8a:a3:e7:b8:a9:3f:d7:80:
ca:41:26:59:f5:5b:3f:1c:36:40:d0:80:48:b6:d5:c5:01:bb:
4f:e0:88:fd:ee:8f:19:33:58:72:55:1d:68:dd:00:25:ed:b7:
53:03:d1:10:84:48:fc:8f:2f:cd:ac:00:a5:9f:a1:69:a3:1a:
d5:eb:1e:50:3f:8a:b7:dd:a6:6d:cf:b7:44:e1:0b:e4:76:69:
7f:fe:76:3b:ea:52:8b:1b:8c:25:77:0a:4a:28:bf:90:88:6e:
09:ac:f1:2f:5c:40:ac:c1:aa:7f:65:6c:e0:bb:25:64:d2:b7:
6b:49:5b:5f:d3:08:5d:7d:45:e1:65:33:b0:0f:a7:d8:0b:e1:
94:d3:90:b8:b1:a5:8b:62:67:37:ce:3e:55:12:5d:24:a2:cc:
94:99:29:e5:b7:38:cb:88:1c:7c:4a:f2:f2:a0:68:7e:03:45:
2e:d5:d8:5d:a7:64:24:c5:87:35:e3:fa:43:cc:61:45:71:1e:
32:18:cd:9f:8f:15:03:6f:2b:9f:e6:14:84:80:65:ac:57:b3:
e9:19:55:73:60:bb:73:8d:f5:8e:04:2d:95:0c:f8:8d:a0:23:
1e:11:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org