Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/9jMr7qeNQpvfIFyNaJ9RU8IVcoo.roa
File: 9jMr7qeNQpvfIFyNaJ9RU8IVcoo.roa (raw, json)
Hash identifier: B+tqi0Ph8P6VO6EXeb//Pq6QBr9hpwVxr4N4YqcrWD4=
Subject key identifier: F6:33:2B:EE:A7:8D:42:9B:DF:20:5C:8D:68:9F:51:53:C2:15:72:8A
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 03EA1CED
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/9jMr7qeNQpvfIFyNaJ9RU8IVcoo.roa
Signing time: Fri 25 Mar 2022 18:03:51 +0000
ROA not before: Fri 25 Mar 2022 18:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 79.110.28.0/24 maxlen: 24
79.110.31.0/24 maxlen: 24
91.204.14.0/23 maxlen: 23
185.14.194.0/24 maxlen: 24
185.89.100.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65674477 (0x3ea1ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Mar 25 18:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6332beea78d429bdf205c8d689f5153c215728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:09:0f:0b:31:1b:3f:ce:11:31:78:97:8b:
81:56:02:3d:7e:99:01:8a:99:86:43:5c:fe:72:09:
d7:db:be:e7:a0:e2:4a:e3:6b:11:a1:ee:9e:ac:b2:
d1:86:1e:b1:3d:7b:31:b4:2d:e5:30:d4:0d:a6:c8:
2a:b7:5e:f8:c4:4c:dc:06:69:9a:53:c0:77:8a:c9:
e3:90:21:8a:b2:96:61:c3:1d:ec:ea:30:f8:8b:af:
84:4a:96:7c:88:eb:48:61:60:92:78:1e:d2:c0:65:
b8:a4:0d:10:ab:5d:46:c8:7d:77:42:86:13:0e:0c:
20:11:ca:05:88:f1:61:cf:55:40:d6:63:e7:6e:0c:
e3:43:14:97:4f:43:69:19:d4:55:1c:85:ca:06:78:
c2:0f:f0:a6:5a:47:ba:8c:7b:f4:30:a7:a4:8a:40:
3d:0e:25:ae:8e:56:89:0d:b8:19:d9:84:f2:82:20:
24:1e:00:11:6b:2d:18:87:31:4c:48:0e:6d:cc:ad:
af:2c:ac:02:96:ae:d9:f5:7a:4b:5e:b8:12:7b:54:
fb:19:36:53:39:d3:c6:46:94:ee:45:74:6c:6f:a5:
61:ca:86:30:fd:6b:ab:d9:d4:5e:1c:13:7b:d0:cb:
54:a8:08:d5:99:45:5e:7a:c4:0b:0b:09:4d:84:3a:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:2B:EE:A7:8D:42:9B:DF:20:5C:8D:68:9F:51:53:C2:15:72:8A
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/9jMr7qeNQpvfIFyNaJ9RU8IVcoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.28.0/24
79.110.31.0/24
91.204.14.0/23
185.14.194.0/24
185.89.100.0/23
Signature Algorithm: sha256WithRSAEncryption
13:0c:fa:ac:5c:07:3d:09:4a:8a:24:8b:c9:a2:bd:9e:20:f6:
1d:51:a3:1c:72:09:54:0b:fc:66:fa:4c:55:bc:c8:f5:f8:20:
1c:76:9a:92:5b:6e:85:84:6f:c3:27:e6:87:6e:67:0f:2f:08:
61:4d:b1:a1:82:30:0b:95:65:f7:5a:1e:1a:c0:e1:9e:77:ef:
8c:d1:9f:63:b9:b6:ff:bf:96:25:22:82:df:25:01:98:71:f9:
c9:dc:8e:1e:9f:76:11:b2:b0:d2:1f:df:e3:fd:57:9b:c2:da:
bb:80:46:5b:f4:d4:d0:eb:ed:cb:d6:62:e4:3e:f7:9f:6a:d4:
6d:d2:ed:8f:c2:c2:61:29:3d:c5:c5:b4:84:c7:33:a0:11:d6:
dc:89:10:63:e4:7f:01:1e:c6:1b:bc:dd:4d:ee:e8:bd:95:cc:
4c:34:da:84:59:4f:6a:22:9b:96:52:e2:51:09:8e:66:ef:67:
60:3b:de:10:d7:f8:7a:d1:ae:c5:ba:7c:07:95:86:fc:9f:23:
76:d3:79:49:a7:2a:97:44:6e:1e:e0:1a:35:e9:69:40:a7:ff:
1a:47:37:d6:2a:a2:84:32:35:06:10:b5:d1:a8:b0:d1:ca:10:
f0:11:3d:47:b3:96:3e:28:03:6e:3b:55:46:86:71:36:d4:ec:
47:38:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:17 2024 by rpki-client on console-ams.rpki-client.org