Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/9jDXRHhFUQUDA7gdusdxkkQeKPM.roa
File: 9jDXRHhFUQUDA7gdusdxkkQeKPM.roa (raw, json)
Hash identifier: +mYOCKb7MZ+6vOeKRfCfSSywpdP60z7AGNk4LsTYRPM=
Subject key identifier: F6:30:D7:44:78:45:51:05:03:03:B8:1D:BA:C7:71:92:44:1E:28:F3
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0181D49031F5186DFEEDD59430219AC16143
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/9jDXRHhFUQUDA7gdusdxkkQeKPM.roa
Signing time: Wed 06 Jul 2022 17:30:28 +0000
ROA not before: Wed 06 Jul 2022 17:30:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39150
IP address blocks: 95.85.83.0/24 maxlen: 24
91.196.139.0/24 maxlen: 24
91.196.138.0/24 maxlen: 24
91.196.137.0/24 maxlen: 24
93.179.66.0/24 maxlen: 24
91.196.136.0/24 maxlen: 24
109.196.133.0/24 maxlen: 24
195.182.8.0/24 maxlen: 24
2a04:8680::/32 maxlen: 32
2a09:d5c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:90:31:f5:18:6d:fe:ed:d5:94:30:21:9a:c1:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jul 6 17:30:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f630d744784551050303b81dbac77192441e28f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:49:eb:21:8f:87:9d:5e:06:0a:7a:aa:34:
57:b2:a3:20:09:d6:17:c8:2a:e8:31:4f:4e:7f:fe:
68:4a:50:1f:33:77:c9:3e:97:db:06:a2:2d:90:35:
e0:20:10:d6:91:c1:c8:47:af:45:5e:5e:b3:fb:ff:
7b:ce:d6:7b:89:5d:79:03:9c:c7:f3:55:d3:15:b7:
b0:b0:f1:27:b8:60:0b:59:f9:e3:01:57:c6:9c:c3:
57:49:83:c8:ac:7a:c9:43:7e:2c:21:d8:15:a5:68:
da:10:73:65:3d:6d:b4:fc:2b:58:86:56:0c:d1:3d:
8c:90:56:6d:a9:9c:1c:08:51:fe:e0:e6:e4:de:b5:
2e:ac:ab:0f:f3:49:3f:e6:f8:1c:b7:69:50:6f:63:
7e:eb:6b:e0:f7:4c:bf:c4:9a:33:85:9b:2a:f3:8d:
f4:33:c8:52:58:81:9d:5d:45:90:5d:2d:98:16:a0:
78:63:ff:3b:a8:c9:50:65:c8:29:09:9c:58:3a:91:
e9:3b:a5:cb:c5:c8:e1:cc:29:c5:9d:76:34:29:e3:
bb:d3:f3:f0:7e:e7:6c:29:74:23:af:a8:9c:fb:d4:
c3:ce:75:67:d7:41:d2:ce:72:c3:a9:93:9f:1b:2e:
51:95:8f:ed:aa:f5:f0:ac:f0:f0:3c:9a:9e:78:d3:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:30:D7:44:78:45:51:05:03:03:B8:1D:BA:C7:71:92:44:1E:28:F3
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/9jDXRHhFUQUDA7gdusdxkkQeKPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.136.0/22
93.179.66.0/24
95.85.83.0/24
109.196.133.0/24
195.182.8.0/24
IPv6:
2a04:8680::/32
2a09:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
65:e4:42:b8:2e:31:04:95:a2:73:9b:7a:eb:41:ac:4d:43:36:
21:29:d9:cd:9f:0b:de:7b:d1:60:43:94:86:27:3d:a9:f1:f5:
f4:cd:be:2d:21:75:de:2c:90:a8:26:56:c2:f8:3c:37:65:e6:
f4:82:cd:b3:80:b4:ff:89:be:53:ea:f9:0c:c8:92:06:10:4e:
e0:39:7f:4c:41:26:7f:d6:dc:6e:e4:d5:65:20:ca:de:2f:13:
a3:fc:97:d2:cf:a9:67:0a:bd:3f:0f:1a:42:59:d1:65:38:d3:
36:7c:55:d4:d8:c8:2a:4b:44:e9:63:b7:f8:19:f7:97:a9:8f:
52:9b:1b:ba:59:1e:d9:df:e6:03:1d:50:a4:52:df:a7:ab:1a:
7d:42:84:5f:53:2c:27:d1:36:98:26:23:1e:5b:31:21:69:1f:
30:cd:ce:49:6f:ff:5b:42:36:fc:11:1a:a7:f5:c7:93:ff:a3:
86:a4:73:81:68:fd:50:d7:53:1d:02:77:5f:ae:8d:34:3d:8b:
00:ce:7b:6f:d2:0c:a9:e5:3e:6c:66:53:80:2d:25:ba:4c:7a:
11:b1:87:b5:aa:2a:77:be:05:3b:db:65:bb:20:ea:c1:f4:51:
5b:71:b1:da:6b:b8:bc:a5:44:3d:2c:67:fb:dd:d9:25:eb:8e:
4a:7e:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:30 2024 by rpki-client on console-fra.rpki-client.org