Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5zXJOfruAxST4VqQqB2KcZTQwEo.roa
File: 5zXJOfruAxST4VqQqB2KcZTQwEo.roa (raw, json)
Hash identifier: JKlAan9mSi5QelFOo7iWeCEXPCRSWzx+UOpLLgMq8Lg=
Subject key identifier: E7:35:C9:39:FA:EE:03:14:93:E1:5A:90:A8:1D:8A:71:94:D0:C0:4A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 0B405D84
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5zXJOfruAxST4VqQqB2KcZTQwEo.roa
Signing time: Sun 27 Feb 2022 20:36:05 +0000
ROA not before: Sun 27 Feb 2022 20:36:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2852
IP address blocks: 185.8.160.0/22 maxlen: 24
78.128.128.0/17 maxlen: 24
193.84.80.0/22 maxlen: 24
195.178.64.0/19 maxlen: 24
195.113.0.0/16 maxlen: 24
2001:718::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188767620 (0xb405d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Feb 27 20:36:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e735c939faee031493e15a90a81d8a7194d0c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:a5:33:de:32:ae:49:ae:38:dc:b1:de:cf:
71:f3:79:52:80:d5:f6:26:5f:fa:0b:d5:ed:a7:3e:
20:cd:a0:61:68:6d:49:f1:1d:de:bb:f8:e7:be:c6:
4e:c8:d7:2b:3e:c9:59:be:7f:14:fd:e9:db:2d:73:
2e:63:a2:cc:cb:fd:3f:4f:47:e6:2e:3e:39:ca:52:
c5:e3:4f:ac:c9:e3:c0:c8:dd:0b:00:ac:5a:3e:2d:
62:3e:d9:66:0b:b5:32:3f:33:eb:b8:dc:5d:a1:5e:
2d:59:75:ef:f7:5c:60:a7:f2:32:b8:f4:97:3f:7c:
70:4b:2e:58:8e:37:e6:3e:df:79:22:8c:63:83:49:
46:a2:d7:e0:e0:89:dc:77:f1:07:b3:73:8a:45:cd:
fc:0f:98:33:32:74:a2:68:4b:24:22:ce:a5:41:f2:
c0:3d:59:9c:fc:61:2b:92:2d:df:f4:5c:d4:28:55:
2e:ae:ee:06:b3:15:3a:e0:02:4c:85:ee:d7:0f:f8:
b9:c4:9d:f1:ab:bb:a9:8d:2f:61:44:bb:e8:98:f6:
fb:cf:b5:6e:9f:86:f9:59:67:40:8f:56:f7:7d:ee:
9c:c2:69:67:dd:97:23:02:ff:34:ef:9b:e4:bc:79:
38:99:45:08:99:a3:d0:ef:96:ca:c9:d4:85:3b:3b:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:C9:39:FA:EE:03:14:93:E1:5A:90:A8:1D:8A:71:94:D0:C0:4A
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/5zXJOfruAxST4VqQqB2KcZTQwEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.128.0/17
185.8.160.0/22
193.84.80.0/22
195.113.0.0/16
195.178.64.0/19
IPv6:
2001:718::/29
Signature Algorithm: sha256WithRSAEncryption
04:d2:09:39:4b:36:1d:18:d8:a3:42:86:79:6a:93:8c:bb:ca:
f6:a5:81:86:e8:c9:10:70:5d:6e:50:39:60:e8:f5:b0:12:f6:
7c:09:50:24:df:50:ed:4a:14:d2:2d:d4:6d:88:09:b7:49:a7:
95:26:9a:00:03:26:67:a6:6c:2a:9d:a0:4c:36:76:fb:87:99:
6d:fa:77:9c:98:99:33:22:fc:1f:dc:38:91:a8:36:7a:4b:b7:
59:3b:1d:2f:79:e0:8e:66:7b:a7:78:f2:9a:10:b5:42:f1:6e:
e1:6d:1c:c6:11:3a:fd:26:cc:62:42:90:73:47:79:b2:26:2a:
60:e9:7a:3d:fc:59:58:36:0c:9a:dc:d3:fb:a3:fb:8d:e5:e2:
9c:4a:aa:14:ec:70:58:b5:21:9c:e8:a1:61:e3:64:99:85:08:
b7:05:03:2c:48:23:6c:49:7f:9b:5c:9c:2c:99:01:66:1d:55:
ba:a9:ad:96:aa:e2:8a:11:3f:01:64:4c:37:b3:18:91:f3:98:
13:17:67:de:b7:45:e6:ca:cc:4f:7f:88:ca:ee:37:88:fa:ef:
33:9e:b3:ef:a1:89:bc:4b:de:e1:5e:1f:4c:3c:8a:e6:f2:5c:
84:b8:ab:ea:fd:d0:46:63:eb:e3:d4:60:01:04:4a:cd:2f:cd:
fc:be:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org