Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/g9rhhJFXiENPZfdODkES1cOIv_4.roa
File: g9rhhJFXiENPZfdODkES1cOIv_4.roa (raw, json)
Hash identifier: Fk00OENibMIvEb7tLY5JDNRMjk+MFh7PSRrhf9OaUfo=
Subject key identifier: 83:DA:E1:84:91:57:88:43:4F:65:F7:4E:0E:41:12:D5:C3:88:BF:FE
Certificate issuer: /CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Certificate serial: 0563429C
Authority key identifier: 13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/g9rhhJFXiENPZfdODkES1cOIv_4.roa
Signing time: Sat 01 Jan 2022 14:58:49 +0000
ROA not before: Sat 01 Jan 2022 14:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35368
IP address blocks: 185.36.136.0/22 maxlen: 22
2a04:6440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90391196 (0x563429c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134bc7e6fdfbf738d23fc5ee5e5acb52befbc051
Validity
Not Before: Jan 1 14:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83dae184915788434f65f74e0e4112d5c388bffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:92:55:d1:92:eb:05:0f:68:6c:bb:8a:4e:
93:d9:c0:db:4b:14:77:48:c6:94:9c:97:a5:b8:21:
8f:41:cb:29:ae:26:28:cd:20:05:4d:f5:4f:db:81:
70:9d:6d:ca:81:cc:91:2a:d2:8b:31:95:3b:ce:03:
f7:35:85:19:08:5a:d7:48:23:c6:4f:d4:5d:40:73:
4b:4f:cd:ff:7d:62:53:eb:9d:d0:41:a6:63:00:37:
13:f0:bd:3d:ed:e8:a6:c5:5e:32:b4:8b:4d:6e:32:
6a:69:5c:3b:e7:69:f4:ad:04:de:8e:7d:b1:78:e1:
a9:09:fd:25:aa:aa:41:84:95:f5:70:30:12:b4:26:
5e:97:ae:06:6e:14:ab:38:e9:3d:3a:08:4f:b9:36:
e0:2c:08:11:b0:33:fd:7e:fc:16:10:11:2a:42:89:
63:e7:de:f4:94:df:43:e1:4b:91:cd:06:a6:fa:00:
2e:0d:ee:91:a4:92:5b:3e:8a:63:f2:b9:c6:9f:4d:
c9:bc:28:94:21:c4:78:1a:24:0d:7a:ca:3b:19:24:
24:e7:38:a2:58:09:1f:73:56:38:4f:05:1f:44:06:
b7:34:12:8b:b1:03:6e:8a:7c:93:cd:4d:03:fe:08:
88:95:44:d4:0a:7a:76:1e:28:38:e5:54:ef:80:43:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:E1:84:91:57:88:43:4F:65:F7:4E:0E:41:12:D5:C3:88:BF:FE
X509v3 Authority Key Identifier:
keyid:13:4B:C7:E6:FD:FB:F7:38:D2:3F:C5:EE:5E:5A:CB:52:BE:FB:C0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0vH5v379zjSP8XuXlrLUr77wFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/g9rhhJFXiENPZfdODkES1cOIv_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8020d8-0684-44f6-84d1-d1d0f96cad1e/1/E0vH5v379zjSP8XuXlrLUr77wFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.136.0/22
IPv6:
2a04:6440::/29
Signature Algorithm: sha256WithRSAEncryption
1f:58:9b:17:76:d0:a1:72:22:96:39:a0:8b:0b:68:d4:38:e1:
e6:55:e1:58:ad:a8:a4:8b:61:fa:66:c7:ed:6c:14:42:25:3e:
b6:6d:71:cc:49:44:65:36:24:32:d7:f7:09:04:1d:6e:f5:88:
10:79:81:03:6e:72:43:fc:a2:d9:ec:2a:d1:bc:9b:40:f7:ec:
77:1a:53:93:3d:2c:e1:64:51:fb:cb:ec:06:9d:4f:a2:b8:b3:
b5:15:ab:7d:20:65:f4:73:4a:8e:87:41:3b:70:84:d0:b4:c3:
b2:c9:88:90:6b:54:20:16:dd:a9:33:e0:6e:7c:f0:28:ae:8f:
91:d4:fe:03:4b:89:cf:97:30:37:a5:18:10:a9:84:dc:14:b7:
18:3b:41:6f:79:27:a2:67:0c:15:9e:7b:d9:f0:ad:97:41:c9:
43:95:b1:6e:5e:f2:9b:92:24:9d:3d:d9:58:e9:d2:a5:9d:a4:
a1:b1:6f:44:70:d3:77:56:df:13:1e:b9:07:39:8e:f0:28:37:
0e:29:4e:6a:63:30:40:65:d3:58:f4:e3:40:b3:3d:de:94:3e:
5b:63:77:c8:55:cd:3c:16:e3:2a:0f:a1:8c:4b:97:f3:94:ad:
2d:2a:83:38:46:b5:1e:2a:52:f0:ca:73:7b:2b:8a:21:7b:bd:
33:87:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:25 2024 by rpki-client on console-fra.rpki-client.org