Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/7hFUnFQq05GKvW_aYZak-_q5C2Q.roa
File: 7hFUnFQq05GKvW_aYZak-_q5C2Q.roa (raw, json)
Hash identifier: 8drLh2thZ9SHn7UCRGLqCk//qEwkes0ODB6TuYl8GiI=
Subject key identifier: EE:11:54:9C:54:2A:D3:91:8A:BD:6F:DA:61:96:A4:FB:FA:B9:0B:64
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 09420E4F
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/7hFUnFQq05GKvW_aYZak-_q5C2Q.roa
Signing time: Sat 11 Jun 2022 10:15:02 +0000
ROA not before: Sat 11 Jun 2022 10:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200697
IP address blocks: 185.98.25.0/24 maxlen: 24
185.98.26.0/24 maxlen: 24
2a04:7800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155323983 (0x9420e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jun 11 10:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee11549c542ad3918abd6fda6196a4fbfab90b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:41:4d:0c:bc:22:cb:37:e9:a2:59:f6:65:
53:f8:bb:f3:22:f6:1f:d6:f6:32:64:cb:94:ab:a5:
8f:7b:d0:7a:a6:1f:14:78:99:4c:92:ee:a5:e9:44:
6f:bf:2f:89:53:a4:b9:33:d4:bc:54:fe:25:5b:a3:
4e:89:31:55:1a:19:da:4c:66:17:90:6f:ba:2e:ee:
2e:f4:4a:ca:df:92:ce:48:b9:d8:13:c1:96:26:32:
89:22:02:49:0e:d7:2c:4a:64:aa:00:42:f9:5f:83:
51:34:a8:7e:ab:b2:4f:70:59:69:4d:30:4f:10:36:
f4:f5:c4:b4:c8:11:03:d6:84:3c:7c:96:8f:9a:22:
99:e8:2a:d6:8a:ba:3f:97:1e:aa:c9:8e:ce:c7:85:
89:78:52:7c:68:a0:db:55:d0:9e:0e:6b:d3:81:e9:
00:b0:c5:0b:4f:a2:ff:ed:39:11:b3:38:13:3d:51:
7e:77:24:35:12:24:50:88:46:36:29:39:89:86:2b:
e5:9f:51:fd:66:99:ed:06:9c:5b:18:f7:55:31:57:
57:dc:f0:eb:4d:f2:e4:85:6d:b9:7b:32:c2:04:f2:
c1:c4:9d:6a:d3:e2:28:11:1a:84:95:9b:8a:f7:a0:
1a:73:e8:41:e3:a4:5d:23:39:28:b5:d6:9c:77:05:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:54:9C:54:2A:D3:91:8A:BD:6F:DA:61:96:A4:FB:FA:B9:0B:64
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/7hFUnFQq05GKvW_aYZak-_q5C2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.25.0-185.98.26.255
IPv6:
2a04:7800::/29
Signature Algorithm: sha256WithRSAEncryption
8c:1a:d1:66:67:60:3a:3c:24:c0:42:ff:c2:f7:68:83:09:60:
d5:61:82:40:c9:11:b2:d5:ae:47:88:8f:c1:68:3a:0d:00:07:
06:e5:98:9e:37:27:81:82:92:7d:a2:a2:d9:c4:ef:10:59:b7:
70:5d:da:75:43:e0:e6:dd:bf:46:54:59:fd:ac:8b:a5:e0:d3:
57:80:e5:c6:0a:6e:10:bd:b8:6c:a7:0a:79:06:51:b8:4d:f4:
22:dd:6c:b4:ef:e3:b0:7f:2a:e1:d2:80:4c:29:03:b0:09:92:
5d:dd:2b:c0:32:68:08:a0:ab:50:63:d3:7d:2b:43:c3:32:5c:
dc:26:aa:6f:a5:87:62:b9:18:e1:a6:f0:17:74:24:1c:80:9d:
1c:91:b3:da:1a:0b:ae:72:f2:f1:bf:92:79:63:0a:e8:b4:7e:
3c:a3:b6:38:d3:e3:80:e4:3f:b4:5f:21:bb:12:89:22:7c:3c:
c6:ab:f6:32:00:d5:59:4d:ac:90:76:dd:75:2d:01:41:f7:e3:
48:86:66:af:ca:c7:ae:f7:a0:64:31:02:16:d3:a5:b3:7a:08:
bf:e6:5b:9b:1a:50:d5:c5:f4:22:19:9e:0d:fe:91:35:93:f2:
d9:5a:31:c6:64:81:48:5e:ad:dc:ff:8f:71:bd:17:9a:40:08:
8a:77:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:00 2024 by rpki-client on console-fra.rpki-client.org