Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/M3hkCmYq_iDoDtF_vieiiosv9VM.roa
File: M3hkCmYq_iDoDtF_vieiiosv9VM.roa (raw, json)
Hash identifier: gEtpqonu05kITzIkJGNn4mLhhis9fq7/WvO05zyMEpc=
Subject key identifier: 33:78:64:0A:66:2A:FE:20:E8:0E:D1:7F:BE:27:A2:8A:8B:2F:F5:53
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 1944FDFC
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/M3hkCmYq_iDoDtF_vieiiosv9VM.roa
Signing time: Sat 01 Jan 2022 06:03:10 +0000
ROA not before: Sat 01 Jan 2022 06:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35361
IP address blocks: 89.239.0.0/19 maxlen: 19
85.119.88.0/21 maxlen: 21
2a02:4000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423951868 (0x1944fdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jan 1 06:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3378640a662afe20e80ed17fbe27a28a8b2ff553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:c2:6e:4d:35:b7:d3:e9:90:b1:47:45:11:
5c:db:07:25:ab:6f:0c:03:45:91:90:05:05:da:9a:
d2:0d:c8:9e:4c:cf:28:8a:40:09:d4:9e:83:bf:37:
9e:58:cb:2e:94:0c:3f:fa:60:9b:d4:df:cf:c4:3e:
c8:c7:90:92:7c:61:ee:bc:4c:8d:15:c9:82:a1:f7:
53:f5:50:f2:2d:42:78:3b:35:b8:e2:a9:02:18:89:
54:df:7e:12:fc:0e:2c:1d:1c:d1:cc:25:ba:88:32:
76:bb:b0:53:5b:71:28:a6:ac:cf:47:d5:0a:a6:be:
bc:36:e1:11:38:cd:c6:3a:34:21:a7:63:5e:6e:bb:
a8:77:18:79:11:e5:70:cc:dd:d0:e2:34:74:99:5e:
ea:de:29:33:fd:95:0c:6b:08:9a:1d:13:ad:63:d5:
ee:4b:e3:b8:a7:9f:a3:95:56:40:79:6f:a3:35:64:
88:6a:ff:db:1d:ac:56:d1:7c:74:10:23:92:6b:36:
f7:40:fd:b1:23:5e:7f:27:6f:48:3c:e4:37:19:db:
7f:32:5d:3e:a8:79:68:87:c3:fd:8f:19:20:4e:dc:
32:e9:4e:fd:1c:41:ca:eb:07:76:e9:7f:6f:4d:4e:
65:12:df:47:c9:72:59:19:a4:1c:5b:0d:58:12:db:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:64:0A:66:2A:FE:20:E8:0E:D1:7F:BE:27:A2:8A:8B:2F:F5:53
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/M3hkCmYq_iDoDtF_vieiiosv9VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.88.0/21
89.239.0.0/19
IPv6:
2a02:4000::/32
Signature Algorithm: sha256WithRSAEncryption
0d:45:12:29:f6:89:b6:b0:13:9b:e2:cf:c8:a9:56:8a:b5:45:
57:ea:70:28:e6:3c:3a:0e:89:d1:76:50:81:51:88:cd:a2:12:
51:f1:97:07:04:d4:c8:c1:52:91:83:df:e4:9c:80:a0:e9:ec:
55:9a:f2:02:c8:1e:cf:d8:cc:3f:ae:c9:40:fc:6f:d4:a9:c8:
cc:7e:96:9f:89:76:51:57:71:8f:af:25:d8:d8:f4:4a:0e:4f:
ca:e1:58:7f:df:8a:cd:6d:9c:03:92:96:98:3b:2a:fa:d4:63:
58:4c:ae:ca:df:01:5d:fc:3a:42:2e:c0:97:df:62:a7:59:80:
8f:c5:d8:13:92:dc:e0:9b:53:62:70:d5:ce:4e:e9:c8:18:a1:
c7:eb:a8:a9:3c:0d:e7:da:db:67:e5:73:65:bf:e1:49:99:ba:
fc:cf:44:03:0f:52:8e:4e:5a:20:b9:0c:17:ae:2b:65:49:48:
33:05:01:9a:2a:a7:5b:b5:8b:35:53:f5:2f:74:b8:0f:03:d9:
86:54:75:fa:b5:4c:64:72:ca:0a:91:84:43:b6:ac:ab:11:c1:
4d:09:f3:5a:00:0c:6c:69:08:02:66:eb:63:9e:26:13:0a:51:
11:5b:bd:89:1c:21:ea:f1:60:0b:2e:e7:72:1c:3e:9d:f7:03:
9c:5e:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:06 2024 by rpki-client on console-fra.rpki-client.org