Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/J3x7S89gB5O5oLQk5X9_dyPLUwk.roa
File: J3x7S89gB5O5oLQk5X9_dyPLUwk.roa (raw, json)
Hash identifier: LX6voVyDy92H7UiaiuhLn0v489R1/UH8vEhhWIHhnyw=
Subject key identifier: 27:7C:7B:4B:CF:60:07:93:B9:A0:B4:24:E5:7F:7F:77:23:CB:53:09
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 39340D65
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/J3x7S89gB5O5oLQk5X9_dyPLUwk.roa
Signing time: Thu 30 Jun 2022 08:49:02 +0000
ROA not before: Thu 30 Jun 2022 08:49:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50149
IP address blocks: 62.122.216.0/22 maxlen: 22
94.154.128.0/22 maxlen: 22
45.150.188.0/22 maxlen: 22
89.104.107.0/24 maxlen: 24
89.104.125.0/24 maxlen: 24
89.104.119.0/24 maxlen: 24
2a00:ab01::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959712613 (0x39340d65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jun 30 08:49:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=277c7b4bcf600793b9a0b424e57f7f7723cb5309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ab:42:03:f5:19:c6:ba:f8:6e:c1:15:5b:af:
45:df:0b:94:71:de:a0:14:24:6d:89:37:da:bf:48:
75:20:f7:e2:7f:72:fc:a9:ac:f5:72:46:98:2d:0d:
d9:74:0a:c2:0e:77:71:cd:01:4d:c1:a6:7c:e9:2b:
b9:00:57:38:90:31:03:59:c5:ce:ce:e1:27:ed:40:
b8:51:84:42:4b:16:2d:9b:be:27:97:c5:67:66:18:
9c:61:9b:98:e8:11:11:76:31:11:4b:39:cd:94:66:
e9:a0:72:e7:6f:fa:ac:02:51:aa:6f:9e:a1:45:da:
5c:32:99:be:36:68:b5:9f:b9:3e:02:c1:73:aa:04:
3e:53:d5:1a:fa:76:28:0d:00:b4:7c:52:ce:e9:9e:
e7:56:2f:10:c7:42:af:3d:d4:b9:81:a8:66:89:42:
46:44:92:5e:df:0e:1d:22:78:62:b8:c3:e5:9f:3e:
f9:8b:54:28:ec:39:27:69:14:2b:6f:53:45:00:3d:
39:0b:30:85:0b:2e:a6:69:d9:86:51:9b:c5:8f:84:
16:12:f1:fe:61:7e:3d:c4:3b:67:38:02:76:20:62:
19:7b:29:75:e9:77:b2:a6:19:54:b3:5a:8e:e4:64:
1b:00:3b:9e:48:a6:4f:5a:c0:d7:44:1d:10:18:87:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:7B:4B:CF:60:07:93:B9:A0:B4:24:E5:7F:7F:77:23:CB:53:09
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/J3x7S89gB5O5oLQk5X9_dyPLUwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.188.0/22
62.122.216.0/22
89.104.107.0/24
89.104.119.0/24
89.104.125.0/24
94.154.128.0/22
IPv6:
2a00:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
2d:05:18:2a:f2:0b:d6:e3:2a:a6:04:7c:88:af:f1:62:13:34:
b4:75:71:62:e7:b6:b0:c6:8d:aa:d0:4d:99:1e:9c:de:7c:fb:
cc:2b:a4:06:df:2c:7d:9f:8e:c8:c0:b7:fd:42:24:1a:63:5d:
b3:1b:7a:16:de:29:30:8b:c5:1a:42:a9:37:18:45:ec:cd:5e:
6f:db:4a:00:a4:b6:6f:e0:ed:bc:8d:99:bd:ed:78:be:48:a9:
33:4b:68:cb:16:33:0b:27:f1:0e:2d:80:88:11:e6:ec:d1:93:
ed:bb:69:76:33:e5:06:b7:ae:84:c2:58:9a:cc:40:70:47:29:
ee:b1:6b:d4:49:b7:5e:b0:00:dd:06:f1:95:69:29:81:5d:89:
a4:3c:a7:73:ff:84:f5:77:bc:11:bc:93:99:46:f0:fd:3f:23:
b9:e9:c1:bd:db:10:73:60:b1:67:e0:d7:d5:e8:99:2a:84:37:
6c:b3:f9:1d:9d:fd:92:8c:8f:e8:5f:34:33:cd:12:65:fa:78:
93:86:a9:03:c7:e4:97:8e:63:d9:dd:df:7a:d7:ff:72:e8:a8:
d6:8e:1f:5e:ca:10:b6:4c:ae:c6:17:97:4a:b6:13:58:70:c5:
33:6c:b8:1f:cb:99:17:b4:10:2c:a5:ed:4b:fa:e9:96:24:2f:
b5:70:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:36 2024 by rpki-client on console-fra.rpki-client.org