Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/C4_mYqvpgI69Ry3qEswe0oKr36E.roa
File: C4_mYqvpgI69Ry3qEswe0oKr36E.roa (raw, json)
Hash identifier: EvFeHBIlm66GyfwmFId+RVjsBYhhI0KohS89xby0h0U=
Subject key identifier: 0B:8F:E6:62:AB:E9:80:8E:BD:47:2D:EA:12:CC:1E:D2:82:AB:DF:A1
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 1AC904
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/C4_mYqvpgI69Ry3qEswe0oKr36E.roa
Signing time: Mon 28 Mar 2022 12:06:28 +0000
ROA not before: Mon 28 Mar 2022 12:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43366
IP address blocks: 195.28.22.0/23 maxlen: 24
185.159.136.0/22 maxlen: 24
2a07:b440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755396 (0x1ac904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Mar 28 12:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b8fe662abe9808ebd472dea12cc1ed282abdfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:22:7c:a0:af:e9:53:23:ba:3b:88:87:fe:
d9:3a:79:f6:19:85:8b:56:bf:6c:09:01:e2:26:9d:
98:09:27:69:37:94:8b:2e:c1:89:ed:06:b2:c2:d0:
9c:91:ca:e7:41:45:f7:68:9c:4d:80:ad:ca:c5:fa:
7b:29:65:87:30:5d:a4:a8:6c:83:ae:1c:c5:22:b2:
f8:5d:d7:64:a6:fa:ea:df:c6:07:bc:b2:56:85:d0:
a7:e8:36:b6:75:f8:c9:31:eb:d1:b1:2e:15:94:13:
53:e8:3c:f6:1a:f0:14:54:a6:ea:55:d9:0e:d4:c0:
81:b6:af:94:f1:30:eb:69:7b:7e:1a:cc:46:0c:ff:
12:43:e7:f5:98:97:3d:f1:d7:ee:e5:f7:86:37:20:
4d:68:bc:e6:db:4c:10:f9:6a:d7:85:04:46:6e:9e:
24:0c:29:64:15:f7:20:44:4e:65:d9:82:6c:cf:65:
b2:84:5a:9b:ae:ba:9d:ba:34:a5:a2:a6:ee:35:ef:
0d:3e:77:15:e3:1e:f8:d3:b7:b1:44:37:a8:9c:74:
f7:91:13:69:fd:21:9d:8a:74:bc:2a:28:50:a9:8c:
3a:41:67:5c:40:38:79:53:fe:fc:4a:c7:02:0e:11:
c4:ec:cb:b5:d6:3d:37:1d:15:ed:5d:68:bc:4c:5d:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:E6:62:AB:E9:80:8E:BD:47:2D:EA:12:CC:1E:D2:82:AB:DF:A1
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/C4_mYqvpgI69Ry3qEswe0oKr36E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.136.0/22
195.28.22.0/23
IPv6:
2a07:b440::/29
Signature Algorithm: sha256WithRSAEncryption
2d:86:fb:31:66:5f:21:6a:a5:5f:4f:d6:0b:86:08:e6:4b:69:
91:24:e7:61:17:9e:71:4b:06:14:2d:ad:d9:11:03:1e:a7:3a:
37:f5:be:87:30:95:a3:45:eb:ca:27:0c:ca:75:69:6c:ff:f1:
82:c5:d5:d8:3a:8c:55:ac:33:81:e1:e6:c8:64:22:58:95:8b:
de:0c:71:4a:6f:a7:93:b0:22:89:54:f6:af:b6:c3:3d:f4:b0:
91:db:00:5e:f0:9e:04:2e:39:86:d0:5e:84:09:1b:2c:d4:38:
67:63:10:62:8c:21:64:78:3b:ad:5a:97:8e:84:b9:98:69:15:
6f:a4:d1:87:7f:c6:b1:b0:61:82:1c:c2:07:d4:54:84:ae:78:
af:85:27:8c:12:b2:40:21:db:ad:57:bd:a5:76:1d:09:53:5f:
54:55:a3:eb:23:c0:dc:25:7d:84:89:41:b9:54:18:05:10:bf:
60:3e:92:ca:1e:e2:3b:e7:47:ba:07:f1:54:d1:9c:9a:ff:d1:
1b:ad:5e:42:1c:60:06:09:4c:58:3b:61:d1:85:83:60:8b:74:
7a:f8:6a:a7:dc:3d:b5:87:fb:a3:04:b0:54:4a:66:81:38:f9:
6a:0e:2f:fe:5e:dd:c6:15:5e:a5:a1:a1:49:41:ee:05:f4:57:
bd:f2:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:52 2024 by rpki-client on console-ams.rpki-client.org