Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/iJF4A49tHyNAEa47-GOCsbN46_c.roa
File: iJF4A49tHyNAEa47-GOCsbN46_c.roa (raw, json)
Hash identifier: t8cXTD1nq+wahZJptpUC3MR1ioCaIZy/2spOq/TeppA=
Subject key identifier: 88:91:78:03:8F:6D:1F:23:40:11:AE:3B:F8:63:82:B1:B3:78:EB:F7
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 018573685593542E4F5017566E438E6DCF87
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/iJF4A49tHyNAEa47-GOCsbN46_c.roa
Signing time: Mon 02 Jan 2023 16:54:55 +0000
ROA not before: Mon 02 Jan 2023 16:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13135
IP address blocks: 185.132.220.0/22 maxlen: 24
213.238.56.0/21 maxlen: 24
192.76.134.0/24 maxlen: 24
212.12.48.0/21 maxlen: 24
2a00:14b0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:55:93:54:2e:4f:50:17:56:6e:43:8e:6d:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Jan 2 16:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=889178038f6d1f234011ae3bf86382b1b378ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:d6:9f:dd:5b:d0:dd:1a:1e:5f:4f:84:6f:
8d:65:a1:dc:70:44:96:fa:b7:f0:48:57:d1:26:c6:
47:ee:05:da:52:b4:f9:f3:2f:69:d9:03:71:9e:25:
01:f2:b4:6e:50:f9:ee:4c:06:94:12:41:d7:cc:dc:
ad:0b:ea:63:db:1c:1d:45:f0:ed:06:48:66:1c:70:
32:c0:65:2c:41:3b:73:76:46:a5:39:4a:fb:58:6f:
f4:ed:80:61:15:88:6d:e5:08:ff:18:82:00:d9:c1:
35:24:56:cd:93:3b:82:db:9e:8d:96:d7:29:25:3d:
c9:e9:c8:0d:38:18:b8:4b:c5:d5:ee:7a:4b:b9:6e:
be:b7:ec:b3:6e:79:42:22:c1:e9:09:8c:55:c7:8e:
69:4e:ef:b3:06:f9:63:7e:3a:47:df:c6:b8:5b:32:
19:fe:ba:66:c6:7e:b0:7f:95:9a:65:fc:dd:04:14:
42:2d:73:54:4d:dd:25:e3:a2:05:40:f0:db:b6:9b:
b2:d5:16:1a:70:f1:69:0c:f0:7e:95:5a:53:b8:7c:
27:24:c8:5a:93:f7:ff:04:44:64:b7:fd:0d:02:cc:
3d:77:ae:8d:87:65:92:cb:45:50:9c:6f:5c:ba:6e:
b7:2d:c1:94:6d:a9:cc:52:6b:96:cf:35:a8:ff:34:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:78:03:8F:6D:1F:23:40:11:AE:3B:F8:63:82:B1:B3:78:EB:F7
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/iJF4A49tHyNAEa47-GOCsbN46_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.220.0/22
192.76.134.0/24
212.12.48.0/21
213.238.56.0/21
IPv6:
2a00:14b0::/32
Signature Algorithm: sha256WithRSAEncryption
06:21:f9:53:17:11:cc:40:6d:57:fe:29:b9:11:ea:ed:1d:32:
67:6e:e1:9c:4f:cf:63:ac:4a:a7:72:f5:11:a5:71:a8:42:da:
9b:d6:c0:69:96:43:77:75:96:15:8b:f4:c9:cf:86:01:05:95:
c6:54:ce:23:e9:18:32:f3:59:78:c1:c5:64:99:58:ea:d0:72:
bc:44:76:43:38:a1:dc:25:28:23:aa:50:1d:26:a7:11:0e:00:
b6:96:46:76:4e:26:a7:18:55:b5:45:be:eb:7a:91:f6:ef:27:
9c:51:79:5d:f7:54:ae:8b:5b:06:e9:2a:12:3a:22:12:7c:80:
5a:f3:64:65:a7:63:7f:21:c3:b4:10:a4:74:c0:54:86:d5:22:
1b:68:86:61:39:72:b7:ac:33:fb:92:ca:47:91:e9:bd:db:ca:
49:49:c5:48:4f:0e:97:5a:f0:88:62:80:d3:d0:bc:e4:4d:9c:
de:7e:71:2b:f8:33:99:5b:83:72:ee:1b:6c:68:03:33:99:3c:
c4:ed:df:bd:02:43:f0:cf:f6:45:28:89:d1:a2:ea:b2:05:62:
4c:5f:bd:c5:e5:c0:be:b6:28:4b:5f:bf:e1:72:3c:46:4b:a1:
bc:46:a4:1a:93:74:0b:55:ec:8e:79:1c:d8:7c:69:ae:58:cc:
9d:35:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:42 2025 by rpki-client