Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/7Gmi70kU-uFwUpIgMa067BsTVY4.roa
File: 7Gmi70kU-uFwUpIgMa067BsTVY4.roa (raw, json)
Hash identifier: L6qxN9W8tcdh8hnIKleEwlbYxQjVMceCb3MtyyEufcU=
Subject key identifier: EC:69:A2:EF:49:14:FA:E1:70:52:92:20:31:AD:3A:EC:1B:13:55:8E
Certificate issuer: /CN=039b01353e51a3a87e835963bd8833ed81853d77
Certificate serial: 12906B32
Authority key identifier: 03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/7Gmi70kU-uFwUpIgMa067BsTVY4.roa
Signing time: Sat 01 Jan 2022 10:00:44 +0000
ROA not before: Sat 01 Jan 2022 10:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203318
IP address blocks: 185.138.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311454514 (0x12906b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039b01353e51a3a87e835963bd8833ed81853d77
Validity
Not Before: Jan 1 10:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec69a2ef4914fae17052922031ad3aec1b13558e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:cd:1e:83:21:f4:16:3f:fe:3d:2f:19:e8:
f1:08:8c:84:bf:3f:16:bd:ce:e4:99:cd:bb:4a:b6:
33:c9:59:95:8a:92:6d:48:8d:85:fe:fe:7e:da:b3:
0a:a6:bc:16:8a:59:93:53:f6:f1:a0:58:4f:a3:c2:
e2:3b:74:bd:1e:43:63:1e:e7:15:a1:16:fc:e6:28:
a3:4b:42:36:67:bc:f8:d6:36:f7:6b:ab:7a:47:09:
cf:b2:48:fc:87:96:66:c0:81:d4:73:0d:6b:1b:84:
5c:63:81:1c:68:c0:bc:6b:b4:d7:87:1d:23:f4:b2:
cd:a5:cf:b0:e3:74:23:99:db:66:8d:f8:d1:c4:15:
76:06:94:21:ff:e5:23:de:43:2d:16:65:43:3a:c2:
dc:16:54:49:21:a5:87:76:16:06:77:b7:ea:3b:29:
5a:d6:ad:9a:6b:96:b6:96:c6:18:aa:9e:40:c8:3e:
3e:0d:15:f9:17:4f:65:cd:70:a6:c5:68:e5:b6:92:
ed:73:55:b0:37:bd:5a:d4:fb:f4:7f:fd:b3:ec:cf:
4b:ee:e5:dd:8a:2c:a9:be:c9:2e:bf:30:1a:98:9a:
82:98:3c:7e:99:7e:ce:bb:e9:cd:85:d2:00:ee:0e:
d5:d6:91:f6:0f:42:cd:11:39:4b:4b:39:4f:93:4d:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:A2:EF:49:14:FA:E1:70:52:92:20:31:AD:3A:EC:1B:13:55:8E
X509v3 Authority Key Identifier:
keyid:03:9B:01:35:3E:51:A3:A8:7E:83:59:63:BD:88:33:ED:81:85:3D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/7Gmi70kU-uFwUpIgMa067BsTVY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cf88f-2c6a-4b48-a25e-4a8b6b4082b1/1/A5sBNT5Ro6h-g1ljvYgz7YGFPXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:07:53:8f:d5:ee:13:9c:58:8a:b8:e8:8a:70:4a:4a:62:f4:
a4:0b:54:ac:58:62:e3:89:2f:11:6c:98:d5:fc:ae:d7:b6:73:
66:de:a2:3c:31:e6:70:c3:06:1c:2e:8b:7f:34:41:fc:9c:56:
28:43:c1:67:d0:1b:9e:70:50:d2:63:c6:2c:a7:e8:63:7b:d5:
5c:84:90:af:cb:81:71:e2:24:b2:ef:93:48:11:61:97:41:20:
40:ea:3d:25:7c:8c:53:24:24:0e:46:33:fe:31:f7:50:fa:1a:
54:c7:a0:04:ab:87:c7:fc:52:d7:93:24:19:ed:5c:57:3d:04:
49:97:f8:c9:50:46:92:fa:04:b5:da:c5:ec:4a:14:10:16:4f:
c1:a0:b7:e7:1c:12:fd:7f:b5:35:48:90:03:a3:6c:cd:89:d8:
6a:ba:13:b8:f8:ce:0d:79:03:e5:eb:e7:4c:a0:57:57:e7:d9:
6b:98:f4:2d:30:97:4e:29:83:34:0d:25:f1:5c:f1:36:bc:3e:
6a:37:97:7f:79:ba:11:17:f3:5d:e9:e7:cc:4b:c5:f6:9b:34:
e3:9a:43:e7:f9:d0:1e:2e:73:88:bc:a7:3f:20:06:97:8c:fc:
a3:a4:71:c5:27:01:bf:ba:64:38:23:ef:da:f7:20:11:99:01:
0d:af:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org