Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/039WbzvjLlyi3ol_jqKhJbzfr70.roa
File: 039WbzvjLlyi3ol_jqKhJbzfr70.roa (raw, json)
Hash identifier: 76fYTQcHMKrUETbjH8YMeeb1G6Y1PR15O82PB3fXm2g=
Subject key identifier: D3:7F:56:6F:3B:E3:2E:5C:A2:DE:89:7F:8E:A2:A1:25:BC:DF:AF:BD
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 05717EFB
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/039WbzvjLlyi3ol_jqKhJbzfr70.roa
Signing time: Sat 01 Jan 2022 07:01:02 +0000
ROA not before: Sat 01 Jan 2022 07:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.73.0/24 maxlen: 24
185.10.72.0/24 maxlen: 24
185.10.72.0/22 maxlen: 22
185.10.75.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91324155 (0x5717efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Jan 1 07:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d37f566f3be32e5ca2de897f8ea2a125bcdfafbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:7f:f8:ff:a9:22:52:86:93:a1:b8:8c:31:
22:c6:dc:61:a6:6c:d8:47:1e:2a:56:48:40:c6:55:
a9:04:53:bd:ce:96:b9:29:a4:bb:01:4a:9a:11:a4:
d8:d8:f9:34:49:33:e7:36:72:6a:47:13:0f:e5:4d:
ed:2d:be:12:44:f3:a1:e9:6a:28:d5:ed:fa:f0:cb:
2b:26:b3:ec:46:0f:ea:ef:55:c0:e5:23:c2:11:54:
8a:32:54:c1:8a:1e:21:7a:57:28:c9:36:a0:2b:cf:
dc:64:c2:87:bd:37:38:28:8b:57:93:e1:07:06:ec:
59:29:a6:d7:68:52:f2:57:13:47:df:2a:ee:a7:41:
9c:30:3d:60:fa:85:b8:31:40:4a:7c:bb:91:33:5d:
0b:41:d7:fa:7e:5a:d8:2f:71:e2:ae:e6:74:7a:07:
7b:c4:2b:f5:4f:ab:a6:f7:27:d2:89:1e:f1:53:0b:
0b:25:df:c9:c1:61:4b:a3:8c:11:9d:95:ec:5f:24:
80:86:b4:de:a1:cd:d9:b3:a5:75:d3:45:c1:fe:4d:
d9:c0:c3:d5:e7:88:ae:40:ac:87:d2:36:4a:f3:e4:
24:4d:48:3b:97:de:39:c0:cd:85:06:24:e7:02:04:
b8:43:c9:a7:d6:13:49:d4:17:68:f6:54:cc:73:98:
80:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7F:56:6F:3B:E3:2E:5C:A2:DE:89:7F:8E:A2:A1:25:BC:DF:AF:BD
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/039WbzvjLlyi3ol_jqKhJbzfr70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:68:f4:1b:41:75:bd:52:41:44:89:c3:3a:0e:b6:26:f2:3e:
1e:41:0a:d4:3f:29:4c:3b:05:7f:96:b4:5c:79:cd:11:f2:67:
ec:26:ff:0a:8c:a9:f2:63:f2:72:fe:6c:6f:f7:83:2e:cf:83:
f3:bf:98:92:b7:1a:f0:85:6b:a1:d1:06:1a:b3:7d:21:07:65:
a4:47:e2:3d:17:49:59:5a:e0:88:87:77:1e:f6:02:35:94:1f:
bf:39:18:82:ff:00:80:c3:5c:d6:dc:62:0a:e4:f3:7d:16:df:
a6:fa:48:92:88:34:48:93:7b:9d:01:53:35:29:3f:b5:20:b5:
c6:92:ae:74:26:ce:ef:a9:61:fb:f3:e8:72:dc:1f:95:00:26:
f0:e4:ac:38:ec:36:8a:37:0f:84:3a:3b:80:f2:42:87:6a:2b:
b5:1b:5e:c3:8c:b6:c7:1d:a7:a5:8c:9f:ba:bc:24:f1:7c:e1:
92:00:ed:5e:65:57:4b:7e:28:68:4b:a9:3e:b9:3b:4f:9e:23:
e8:74:34:aa:46:f9:e7:5c:87:35:09:4a:a8:77:c5:47:cc:5e:
fe:60:b3:6e:45:47:08:e9:cc:85:35:7f:d8:0c:b7:c7:97:86:
52:54:46:a7:31:1b:9a:41:e0:1d:b8:be:66:49:ac:ae:4c:f8:
ed:aa:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org