Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/i4GRa_oqv5PuD8pFlTSGgS_d3OM.roa
File: i4GRa_oqv5PuD8pFlTSGgS_d3OM.roa (raw, json)
Hash identifier: Ezi8vx7FCURvAye/XUH5dfzrcbS6VGNk06n6bQVh5ak=
Subject key identifier: 8B:81:91:6B:FA:2A:BF:93:EE:0F:CA:45:95:34:86:81:2F:DD:DC:E3
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 044BF216
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/i4GRa_oqv5PuD8pFlTSGgS_d3OM.roa
Signing time: Sat 01 Jan 2022 11:57:36 +0000
ROA not before: Sat 01 Jan 2022 11:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42580
IP address blocks: 81.20.240.0/20 maxlen: 20
185.218.12.0/22 maxlen: 22
78.29.128.0/18 maxlen: 18
128.65.224.0/19 maxlen: 19
2a0b:c1c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72086038 (0x44bf216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jan 1 11:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b81916bfa2abf93ee0fca45953486812fdddce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:84:e7:83:3c:fe:4b:33:93:58:ab:a9:ed:
b0:88:7e:b7:63:f4:f8:fe:c3:e0:fa:44:d3:8a:de:
91:1c:0e:48:b2:ee:3e:04:79:a9:91:d5:d7:f1:39:
8c:56:3a:50:15:d5:b2:dd:88:87:85:b1:24:98:e1:
8a:94:7c:19:97:57:dd:8f:c4:03:69:3f:b3:82:2c:
fa:1d:ca:02:f7:a0:e7:10:65:8c:a8:17:39:4d:b4:
0d:a6:a7:f0:6a:a8:bc:65:9a:a4:09:ef:45:27:5c:
a7:75:24:2f:db:3a:f3:b3:2d:d7:48:c8:fc:33:09:
d8:8e:aa:24:62:08:80:0d:1e:5c:a5:7e:70:e1:94:
99:14:aa:3c:7e:65:41:83:e9:15:bc:fe:c9:5b:89:
b3:a5:5b:97:74:a9:7c:08:50:d8:3f:24:fb:06:ca:
48:8f:fb:4d:d2:51:42:8b:e5:46:a2:96:ee:ca:83:
4c:d1:5c:91:66:8e:5f:e5:f4:cc:36:6f:4e:c6:f2:
93:af:8e:f2:34:29:2a:0f:64:36:d9:10:2f:64:21:
8e:12:3f:db:3d:c8:a9:5c:d2:46:c2:3a:03:56:1a:
e2:36:f8:c8:80:a2:88:e8:5a:de:1c:df:32:38:e2:
94:5c:51:9d:76:b8:c7:ed:9a:d9:df:4f:20:91:66:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:91:6B:FA:2A:BF:93:EE:0F:CA:45:95:34:86:81:2F:DD:DC:E3
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/i4GRa_oqv5PuD8pFlTSGgS_d3OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.29.128.0/18
81.20.240.0/20
128.65.224.0/19
185.218.12.0/22
IPv6:
2a0b:c1c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:7c:a3:f5:95:90:34:c3:ae:b4:a4:94:72:da:f3:c8:11:30:
a7:6b:4f:16:0d:7d:ab:4c:ec:c1:85:a5:4e:ec:81:8a:06:94:
d3:23:83:b1:58:e4:0b:7c:d5:5f:4f:bb:92:4a:55:17:84:21:
3a:54:5c:bb:65:69:6a:34:89:7b:3c:70:eb:f3:11:ec:96:ac:
64:f5:af:4d:c7:32:c3:d7:a3:34:e4:8b:4d:d9:80:38:7b:e2:
9a:ef:2f:83:bb:11:0c:c4:71:8e:0e:29:bf:04:65:0e:28:09:
fa:6e:67:ce:38:fa:56:f6:80:0b:a3:8b:9a:50:4b:47:46:af:
6b:95:07:f1:fa:2e:78:b3:ad:69:f6:32:11:dd:7f:e3:e1:32:
09:f2:b6:ce:37:05:d6:dd:a5:84:0b:53:bb:e0:9e:b9:8c:25:
7c:a3:c1:01:91:de:66:da:60:68:e7:af:f0:22:29:8c:df:3a:
25:d1:9e:db:e1:05:e3:75:f0:eb:3c:e8:88:e2:00:07:08:b3:
6e:e6:ed:10:d4:3d:1a:fd:d4:c7:08:10:91:3a:42:89:63:2d:
22:09:1a:b7:5b:ca:4f:6a:16:07:af:2e:68:4b:d9:3b:16:34:
c8:50:fd:27:b3:1c:a5:75:ec:87:c1:7c:a3:ed:90:28:bc:45:
a7:71:9e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org