Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/44ezM5vuyCUCnho7QSrnJ_RXj3I.roa
File: 44ezM5vuyCUCnho7QSrnJ_RXj3I.roa (raw, json)
Hash identifier: n1kN+Czk9YvCJBxk+7Wdgrqf1oAbTih4yiJvQrLwBKM=
Subject key identifier: E3:87:B3:33:9B:EE:C8:25:02:9E:1A:3B:41:2A:E7:27:F4:57:8F:72
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 378F396E
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/44ezM5vuyCUCnho7QSrnJ_RXj3I.roa
Signing time: Sat 01 Jan 2022 11:54:51 +0000
ROA not before: Sat 01 Jan 2022 11:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34663
IP address blocks: 85.159.96.0/21 maxlen: 21
185.94.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932133230 (0x378f396e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jan 1 11:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e387b3339beec825029e1a3b412ae727f4578f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fa:33:ea:45:90:cb:a7:7f:c5:5e:50:01:cc:
1c:a5:21:d0:58:5d:67:99:31:a2:c2:74:f7:be:6b:
3d:f0:32:18:f4:23:36:0f:f0:e5:59:aa:66:e5:b0:
f1:94:96:67:7f:35:b0:d1:90:74:2c:00:75:d9:ed:
b1:6e:33:4b:28:c4:21:9b:37:7d:3c:a7:30:0b:3f:
3f:02:75:f7:90:c6:eb:af:06:53:36:f5:12:a7:4a:
5e:95:28:73:40:01:03:8c:bc:2a:bd:e9:d1:7b:a9:
93:02:ba:33:17:6e:10:f6:2a:28:8b:0d:86:1b:c2:
21:d3:fc:8d:4a:76:3e:4d:52:b2:cc:ea:44:e1:fa:
bb:5f:1f:53:b8:8b:a6:7a:26:f4:25:58:71:47:ae:
07:ca:3b:09:29:e8:80:63:1f:88:1b:64:ca:91:b1:
d8:c9:12:67:0b:dc:f2:d6:e2:03:b7:9a:6f:28:e8:
bd:ef:d9:cb:83:94:00:97:91:a7:f1:03:cc:a7:69:
f0:c9:4a:57:21:49:b4:49:f8:ff:94:ff:97:0e:82:
81:ac:60:de:6b:d8:ce:1d:fd:f7:f3:67:44:03:69:
49:b4:5f:ad:ba:32:8a:52:a9:a7:18:c6:70:30:a6:
8d:99:2e:70:f9:87:ac:dc:66:b7:8f:63:07:56:35:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:B3:33:9B:EE:C8:25:02:9E:1A:3B:41:2A:E7:27:F4:57:8F:72
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/44ezM5vuyCUCnho7QSrnJ_RXj3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.96.0/21
185.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:31:f4:9e:d5:68:fe:a4:13:84:b4:df:a9:8a:be:63:6c:aa:
c0:93:08:2d:3f:73:c5:41:c9:2b:e7:48:6e:19:ce:e0:e7:1e:
6c:bc:10:e2:74:0c:04:17:d0:34:14:ab:43:4a:bb:2a:52:fa:
3f:26:05:75:3b:31:ad:be:e8:76:48:d3:84:c3:7b:20:31:e2:
e9:30:ac:89:9b:c4:71:05:aa:51:0b:3b:bd:74:81:41:ed:d9:
b4:9c:59:35:41:53:ee:ea:e4:6e:7e:0d:7b:3c:7f:99:86:dc:
85:59:49:67:a0:d0:8a:ed:21:b7:78:6a:eb:56:80:48:64:65:
f8:f8:f3:e4:1e:cc:48:7a:0f:d3:b3:9d:40:62:ae:bc:08:92:
80:e2:5c:a1:e5:14:8f:e7:34:74:04:f2:b0:78:c0:89:72:6b:
22:ad:7d:0e:1f:aa:87:7c:59:4a:b1:c6:35:ba:23:0c:ad:5a:
96:d9:aa:ad:cd:51:2b:ac:2d:7d:d0:c6:a3:83:76:cf:7f:62:
08:f3:5e:ae:f5:b5:f7:27:fa:8e:a1:3a:90:41:7b:8b:a0:9a:
ba:58:b4:71:67:67:54:cd:e4:37:79:9e:aa:14:b7:c9:f8:0d:
6b:a3:25:1e:3f:0e:01:0f:e3:e1:de:09:e6:57:63:32:ab:3d:
fb:3a:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:06 2024 by rpki-client on console-fra.rpki-client.org