Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/JStVu0OHT9WTLCZSV0a0CGXWNjs.roa
File: JStVu0OHT9WTLCZSV0a0CGXWNjs.roa (raw, json)
Hash identifier: Ix4KSj1hhHvsVLSJ80RY0EGMlSyLmMR3oOdbCDPbTYw=
Subject key identifier: 25:2B:55:BB:43:87:4F:D5:93:2C:26:52:57:46:B4:08:65:D6:36:3B
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 05D2FF9C
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/JStVu0OHT9WTLCZSV0a0CGXWNjs.roa
Signing time: Sat 01 Jan 2022 01:55:22 +0000
ROA not before: Sat 01 Jan 2022 01:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43989
IP address blocks: 185.181.136.0/22 maxlen: 22
79.98.40.0/21 maxlen: 21
109.234.56.0/21 maxlen: 21
93.188.96.0/21 maxlen: 21
2a01:b600::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97714076 (0x5d2ff9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Jan 1 01:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=252b55bb43874fd5932c26525746b40865d6363b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:d2:97:38:09:9f:89:0e:b9:d0:81:08:36:
42:2a:72:71:25:b7:ea:24:0a:12:24:ac:d3:e9:ca:
33:26:a5:8f:a6:e8:7c:28:f8:33:db:f7:1f:4f:c6:
9c:02:11:d3:d9:c5:be:1e:d5:00:6c:85:68:be:f7:
c3:15:a0:0a:a4:d1:13:58:7b:a4:39:8a:49:ef:d4:
0c:2a:f3:20:f8:d5:70:bc:7c:7a:51:17:09:3a:18:
1f:da:d3:cf:d2:e5:80:c9:16:2f:ff:3a:b2:ed:37:
f0:16:22:e2:64:bc:07:cb:e0:05:4b:6b:cf:cf:98:
70:a3:2d:86:c5:72:9a:3a:64:e7:29:26:6c:50:7f:
60:cf:fa:4d:72:19:b4:21:fa:1d:2c:98:23:20:92:
03:cb:c3:9b:96:bd:b7:cf:55:da:39:2a:1f:3a:87:
2f:ce:3d:12:a3:65:b1:63:a5:4f:64:64:bc:27:9c:
1b:6d:6a:54:e7:76:a5:d0:c6:6c:cf:6a:a7:3c:b2:
b6:eb:0b:52:da:dd:71:c2:69:ad:dd:0c:8f:c6:5b:
cf:d8:da:35:94:1f:c0:cc:6a:90:f8:d2:30:2e:4b:
ad:6a:13:7b:61:22:fb:50:10:03:d7:5a:e7:29:ab:
0c:02:f7:92:a7:2b:d1:5e:b9:4b:95:87:4f:4f:43:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:55:BB:43:87:4F:D5:93:2C:26:52:57:46:B4:08:65:D6:36:3B
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/JStVu0OHT9WTLCZSV0a0CGXWNjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.40.0/21
93.188.96.0/21
109.234.56.0/21
185.181.136.0/22
IPv6:
2a01:b600::/32
Signature Algorithm: sha256WithRSAEncryption
45:d4:be:f0:5e:32:82:74:ca:30:2c:5f:dd:41:c8:c7:43:05:
c7:11:d5:10:81:f4:a0:ea:34:dc:c4:4c:69:36:89:33:e7:ab:
6d:5f:46:43:89:b4:18:03:b7:77:ad:59:e1:94:7b:5c:c3:aa:
ff:c6:1d:72:51:cb:28:cf:07:0e:3d:fb:7c:2b:2a:1d:a2:dd:
5d:52:57:40:b8:4b:2e:2f:90:5c:b4:d2:7a:0b:18:1a:32:79:
1f:7b:7b:2b:f2:86:5e:24:ec:e3:21:4f:a7:02:d9:92:3b:59:
a3:2a:d4:ba:9d:32:88:df:6e:09:4b:7b:7f:d3:ff:7f:19:b4:
e1:11:3a:e3:32:88:96:cd:10:cd:55:72:5c:43:f0:f1:81:dd:
33:78:28:12:6a:b4:03:fb:f0:8b:25:34:ca:17:43:72:b4:0d:
52:98:68:f3:f1:b6:18:b5:cc:38:7f:3c:02:58:f6:00:79:21:
41:f8:17:12:f5:90:e1:05:28:14:8c:65:f9:7f:fb:e3:56:4a:
6d:b5:9c:3b:67:80:b5:d7:14:fb:91:8c:5a:b9:ee:81:33:bf:
f2:38:e0:f6:8c:84:ef:22:ef:34:85:11:16:32:93:b7:5d:57:
26:f9:a1:93:13:37:c7:c0:29:7e:ba:52:54:a4:6d:99:b2:27:
ae:92:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:20 2024 by rpki-client on console-fra.rpki-client.org