Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/jZ4RvItFJpAwWbljP8s_BtGBV_s.roa
File: jZ4RvItFJpAwWbljP8s_BtGBV_s.roa (raw, json)
Hash identifier: DiNn0l+Gy+eCbLHNvb7RYPVKt/cd0Sdjxok5KrUIb98=
Subject key identifier: 8D:9E:11:BC:8B:45:26:90:30:59:B9:63:3F:CB:3F:06:D1:81:57:FB
Certificate issuer: /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial: 05508A1F
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/jZ4RvItFJpAwWbljP8s_BtGBV_s.roa
Signing time: Sat 01 Jan 2022 16:06:34 +0000
ROA not before: Sat 01 Jan 2022 16:06:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15576
IP address blocks: 217.197.128.0/21 maxlen: 21
88.214.4.0/22 maxlen: 22
2a03:580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89164319 (0x5508a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
Validity
Not Before: Jan 1 16:06:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d9e11bc8b4526903059b9633fcb3f06d18157fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:cb:e9:d0:76:84:cd:9d:33:4c:0c:9f:c3:
07:67:7a:d5:1c:2e:30:22:d5:fc:d9:d2:d7:22:46:
9a:ea:1e:8b:41:20:84:36:1a:ca:c9:b2:73:b3:74:
f8:9c:a9:98:28:04:63:b5:e0:94:6a:86:4a:bf:c1:
aa:f3:1b:c3:7f:97:e2:9e:78:7b:02:7f:bb:29:40:
75:11:62:27:f6:b7:ac:a4:33:00:1c:a8:73:0a:f3:
e3:9d:67:fd:d2:0b:57:38:2c:78:08:ff:11:74:32:
3c:91:28:cc:cb:5b:30:c0:7f:47:63:2f:04:c8:d8:
94:f1:c5:93:cd:91:92:31:fe:a0:3a:18:94:af:8e:
0e:f8:67:45:a1:4b:33:ff:ee:38:71:f6:11:e6:2c:
28:b8:6a:d0:98:de:7c:60:fd:21:a2:64:8b:01:44:
04:a5:f0:1e:78:01:95:72:e0:e0:2c:44:a2:fb:79:
c1:ca:e4:98:80:f2:c2:31:8b:df:08:9d:b2:39:15:
0d:04:b2:fc:21:b4:0f:83:9b:6a:f3:e8:a0:f6:36:
95:e7:2a:93:03:56:fb:83:49:1e:be:ed:63:a6:0b:
21:36:27:73:23:f9:b1:e6:bc:eb:92:77:1e:f3:62:
29:15:80:04:ca:3a:95:4a:9c:79:ba:81:f3:42:4d:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9E:11:BC:8B:45:26:90:30:59:B9:63:3F:CB:3F:06:D1:81:57:FB
X509v3 Authority Key Identifier:
keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/jZ4RvItFJpAwWbljP8s_BtGBV_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.4.0/22
217.197.128.0/21
IPv6:
2a03:580::/32
Signature Algorithm: sha256WithRSAEncryption
37:19:58:7a:1a:f0:d1:df:e6:d6:2d:b5:d6:71:de:c4:61:a4:
a8:a6:fd:97:8d:97:90:f3:62:89:0a:e0:17:96:ac:85:65:58:
97:6c:9f:55:57:b9:5e:1d:53:3b:25:29:bf:3d:ca:ff:27:5b:
e4:01:b3:55:06:a9:8d:ba:cc:ef:49:a9:b8:cf:ec:3e:fd:2c:
bb:0b:a2:fc:28:5c:cd:41:5b:38:2d:58:d3:d3:ef:8e:b8:0e:
eb:de:60:b2:ce:d2:26:f0:16:60:85:60:f2:62:9a:8a:45:ad:
93:31:18:94:9c:34:f6:6e:24:da:c1:de:dc:37:a6:58:63:9b:
76:42:ad:e3:c1:36:aa:0e:8d:d2:64:d0:69:ef:66:2c:40:59:
15:17:e4:08:56:2c:6b:5b:46:99:d0:cd:42:e5:43:9c:f9:f1:
3a:98:49:66:74:8a:22:57:20:71:41:70:af:ef:21:84:eb:ed:
fb:53:a5:f1:90:1c:e6:b6:ef:bb:41:cc:c2:ff:ec:e7:6e:95:
ff:a3:3b:f3:c6:a3:d2:0d:a3:bb:10:69:b0:54:f4:66:67:e9:
67:77:7b:3f:d0:c0:1e:a2:46:fc:b8:b0:eb:40:fc:b0:91:f5:
17:da:9b:f6:a4:fe:22:62:cd:35:00:dd:a5:c1:0c:63:40:c5:
30:ec:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:25 2025 by rpki-client