Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/OmJaQH_ggayaRNNMJfJMOSUr-tE.roa
File: OmJaQH_ggayaRNNMJfJMOSUr-tE.roa (raw, json)
Hash identifier: iv9pnvUkiTe5nQeVP5yOAmXyr+kDevA/7+1lxkSHEM4=
Subject key identifier: 3A:62:5A:40:7F:E0:81:AC:9A:44:D3:4C:25:F2:4C:39:25:2B:FA:D1
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 1AA60D73
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/OmJaQH_ggayaRNNMJfJMOSUr-tE.roa
Signing time: Sat 01 Jan 2022 13:00:42 +0000
ROA not before: Sat 01 Jan 2022 13:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200596
IP address blocks: 147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
91.212.42.0/24 maxlen: 24
135.84.148.0/22 maxlen: 24
85.184.228.0/22 maxlen: 24
2a00:5ea0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447090035 (0x1aa60d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jan 1 13:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a625a407fe081ac9a44d34c25f24c39252bfad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:3c:a6:a7:48:ec:5a:d6:39:de:e1:cb:3a:
2b:c3:6f:f6:5e:99:01:b5:9a:91:94:f8:f0:07:85:
59:5e:f9:b6:88:9f:e6:ae:d2:f2:ec:3e:74:43:1e:
13:a9:6a:1c:35:4c:74:0e:fd:ad:9d:ff:96:cb:2d:
0a:4b:ba:76:36:7f:ae:2a:58:2c:2f:dd:bf:7b:aa:
8c:66:34:61:dc:6d:2a:d5:c7:0c:85:b0:14:28:b4:
54:e4:fa:ac:b4:ae:82:1d:69:02:5f:11:1e:c8:ba:
ad:89:d2:1d:e8:58:28:c0:d3:94:6a:95:ab:97:95:
12:5b:91:da:cf:bb:62:91:4e:5c:d9:ba:1d:e3:6c:
4a:52:84:1f:35:46:70:6c:b6:8d:c6:b8:08:52:69:
f2:b4:71:ab:ed:1d:df:87:7f:3f:39:c9:f1:34:ec:
6d:f1:8b:a0:bc:14:b1:e7:14:54:f9:e9:90:58:4c:
23:16:46:59:a6:9b:d2:da:55:32:0d:9d:1b:82:1f:
67:49:79:67:07:a9:9a:8b:0a:69:67:5b:58:f0:35:
b4:1e:c3:76:9a:8e:72:ef:39:03:c3:0e:d8:75:b6:
af:2e:23:10:7d:62:55:bf:5c:0f:46:f6:43:1e:df:
b1:5a:e3:88:fe:33:be:2a:26:53:49:fe:e1:18:4c:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:5A:40:7F:E0:81:AC:9A:44:D3:4C:25:F2:4C:39:25:2B:FA:D1
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/OmJaQH_ggayaRNNMJfJMOSUr-tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.228.0/22
91.212.42.0/24
135.84.148.0/22
147.12.16.0/20
185.101.196.0/22
IPv6:
2a00:5ea0::/29
Signature Algorithm: sha256WithRSAEncryption
02:c1:1f:19:a8:30:f3:a9:6d:c8:31:14:54:7a:1e:02:40:09:
fe:47:5d:f5:3c:64:10:55:ff:6e:a9:97:f8:31:b5:db:c9:bd:
66:54:ef:77:f3:a2:33:bb:cf:54:23:db:89:14:a3:0d:0b:de:
b3:45:33:0a:78:2a:c9:46:c5:2e:3e:12:cf:5f:b9:7a:e0:e5:
1c:c8:1b:25:fe:0d:20:dd:28:18:5b:f9:1d:39:9b:bc:a6:14:
43:e1:9e:81:c5:0d:d5:33:15:cd:37:75:d0:f3:d8:f6:b2:06:
3a:08:69:6a:0e:b7:0a:e8:d9:f1:44:fb:e2:ae:ea:fa:d6:45:
1b:ac:ad:29:d3:a5:0d:06:a0:f5:e6:b9:f4:8e:c1:78:df:83:
89:97:60:b0:c7:83:c1:5f:20:62:71:b6:bc:de:45:cb:c5:e6:
4f:a6:58:27:03:c5:01:62:0f:51:61:21:24:2e:a1:3f:df:4e:
ac:3b:7d:2d:1c:26:f4:8e:6d:95:17:20:97:1c:b7:37:b0:04:
90:9c:ae:66:80:bc:a9:54:ae:e1:84:61:17:a3:70:db:d5:4c:
ef:0b:67:5d:fd:6c:84:f1:27:34:cc:a0:02:2a:fd:8f:f2:32:
21:07:57:48:d0:60:31:58:bd:79:c4:6f:51:3c:fb:19:21:40:
b6:b4:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org