Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/CC64UJJ3W10ZehXMwArH6JZq_SY.roa
File: CC64UJJ3W10ZehXMwArH6JZq_SY.roa (raw, json)
Hash identifier: t4IDUrNydWl31Juug03aaRkheAakLBaCpoUFkYHvU4w=
Subject key identifier: 08:2E:B8:50:92:77:5B:5D:19:7A:15:CC:C0:0A:C7:E8:96:6A:FD:26
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 066B596B
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/CC64UJJ3W10ZehXMwArH6JZq_SY.roa
Signing time: Thu 21 Apr 2022 12:09:56 +0000
ROA not before: Thu 21 Apr 2022 12:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59793
IP address blocks: 95.85.80.0/23 maxlen: 23
93.179.70.0/23 maxlen: 23
93.179.72.0/21 maxlen: 21
79.133.106.0/23 maxlen: 23
93.179.80.0/21 maxlen: 21
79.133.112.0/21 maxlen: 21
95.181.136.0/21 maxlen: 21
95.181.240.0/21 maxlen: 21
93.179.122.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107698539 (0x66b596b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 21 12:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=082eb85092775b5d197a15ccc00ac7e8966afd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:4d:2c:b1:7b:48:d5:97:6d:79:0e:dc:05:
2a:3c:94:3f:a5:bd:8b:e0:6f:9d:a1:db:6f:f7:14:
47:99:bc:3d:1c:80:e7:7b:18:76:02:59:69:cf:4c:
94:cf:6f:bc:ff:bb:31:e0:0e:52:a3:3d:b6:58:8a:
3c:18:05:65:22:74:c8:da:e3:a9:95:6e:64:7e:06:
08:2b:a2:08:b0:0f:ba:6c:dc:1d:50:34:14:ec:93:
54:fe:d9:ac:99:6a:28:69:1e:d3:31:47:f3:50:62:
bc:30:17:e5:db:c6:9b:2d:86:55:1a:26:30:a3:e2:
6d:85:b5:ff:1a:8a:af:4f:49:59:d9:33:64:49:7f:
25:f1:90:d5:ab:f6:38:33:5f:20:9b:48:b0:cb:ea:
d5:55:8e:27:0a:96:18:63:1c:4a:4c:95:3b:ea:f1:
1f:3c:4d:15:6a:ac:58:77:97:78:8c:43:80:76:45:
a3:61:6a:46:8f:d4:02:3c:77:eb:f9:56:aa:33:32:
f2:53:6a:d6:c7:1b:dd:6e:d5:f8:48:5e:b4:21:6e:
ad:e1:49:a9:31:68:fd:e3:be:35:bb:5b:31:6d:fb:
50:60:82:ea:09:4b:52:7a:83:a2:c7:cf:e4:51:6e:
9f:36:49:5c:64:20:4c:39:17:d6:36:b8:0c:17:85:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:B8:50:92:77:5B:5D:19:7A:15:CC:C0:0A:C7:E8:96:6A:FD:26
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/CC64UJJ3W10ZehXMwArH6JZq_SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.106.0/23
79.133.112.0/21
93.179.70.0-93.179.87.255
93.179.122.0/23
95.85.80.0/23
95.181.136.0/21
95.181.240.0/21
Signature Algorithm: sha256WithRSAEncryption
13:2f:06:31:95:e5:ec:f4:2d:fa:20:b1:0a:4d:d3:34:c1:1f:
5a:c3:dc:17:f9:22:82:cc:4a:c1:88:f6:e3:c9:e3:59:a4:2a:
d2:9c:80:59:b8:2e:0b:ac:e4:5d:34:2f:36:db:0b:3f:eb:f2:
1d:aa:ed:f0:20:37:35:e2:01:a5:9d:a6:ac:9c:08:91:4d:be:
7b:5b:e8:17:d6:4c:0d:44:2a:28:7e:6c:6d:40:43:ee:93:4e:
26:63:82:aa:6e:92:45:e2:eb:13:b4:d5:60:57:49:72:f4:e6:
e0:36:98:39:cd:ae:31:cf:2e:9e:13:69:20:e3:4e:83:ee:cf:
4b:93:92:b9:86:5a:1a:ff:9f:84:f0:5e:51:93:83:dd:46:2d:
af:67:42:a9:64:ec:80:47:5d:aa:60:79:66:dc:c3:db:5e:74:
6f:66:9f:8b:c2:d0:86:1e:84:e8:78:ad:0e:26:73:38:05:f3:
99:ea:31:1c:83:52:79:de:f8:9c:38:33:d5:4c:eb:3a:6d:b6:
e5:ff:00:da:fe:92:57:a0:27:4b:a3:9e:a3:16:47:fa:f0:a8:
5e:18:5c:b0:ad:98:27:23:65:7c:cf:7c:9e:c5:3c:d3:21:10:
a2:2f:d7:d5:8f:d3:6c:62:d0:eb:68:32:6e:f4:4b:6b:18:2f:
82:06:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:22 2024 by rpki-client on console-ams.rpki-client.org