Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aEgn6DOYIHZ-obiq_GE9sLNhziE.roa
File: aEgn6DOYIHZ-obiq_GE9sLNhziE.roa (raw, json)
Hash identifier: 9lWSZToFHsSyur4F3f4Gm2+DOIGU/ZHKDWKAi7KFPdI=
Subject key identifier: 68:48:27:E8:33:98:20:76:7E:A1:B8:AA:FC:61:3D:B0:B3:61:CE:21
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01854E05338B21D51C12EAEF9359B81D2CCC
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aEgn6DOYIHZ-obiq_GE9sLNhziE.roa
Signing time: Mon 26 Dec 2022 10:40:41 +0000
ROA not before: Mon 26 Dec 2022 10:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 185.113.138.0/23 maxlen: 23
185.95.231.0/24 maxlen: 24
185.75.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:05:33:8b:21:d5:1c:12:ea:ef:93:59:b8:1d:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 26 10:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=684827e8339820767ea1b8aafc613db0b361ce21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:4d:b8:dd:a5:61:7a:f6:e8:ed:26:86:fc:
00:e3:ee:ea:3b:a0:36:4d:8c:3c:4f:b8:d5:c4:21:
e7:9f:7a:ba:68:71:fc:e0:fb:82:9c:ad:f3:a7:7d:
f9:6f:09:fb:b3:f7:a4:d2:04:f0:4b:b8:d4:5a:2e:
bc:8d:9b:ff:5f:48:c8:7c:36:ea:20:5c:c5:09:4f:
25:35:46:1a:5c:b0:82:76:6e:0a:0f:2a:07:6f:ab:
4d:04:d0:08:66:36:12:de:0e:f6:11:9b:28:67:df:
c5:fb:fd:db:d2:34:20:e6:7e:f2:e5:6b:ab:00:01:
8d:dc:eb:19:38:c7:a1:86:36:fa:c5:24:c4:a6:5f:
d0:6c:e5:5f:4c:a4:5d:c3:c8:3b:16:3b:df:9b:db:
0e:fc:b5:c3:3a:45:a4:bc:34:0c:5f:a1:d8:ec:66:
43:cb:3a:30:d0:92:76:a9:a8:fc:e5:05:a0:4b:cc:
65:b7:40:ff:bc:39:ab:8a:d5:b0:86:ef:2e:d2:b3:
31:61:ee:db:ec:bf:ea:de:f7:f9:74:b0:1c:c5:b4:
ee:95:70:26:b8:f3:1d:95:f5:ac:da:c2:b5:9d:08:
1d:8d:01:d9:2d:98:c9:a6:d9:bb:f7:cc:02:29:c0:
6f:23:43:90:ae:2d:44:df:6d:0f:54:81:be:f6:51:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:48:27:E8:33:98:20:76:7E:A1:B8:AA:FC:61:3D:B0:B3:61:CE:21
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/aEgn6DOYIHZ-obiq_GE9sLNhziE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.135.0/24
185.95.231.0/24
185.113.138.0/23
Signature Algorithm: sha256WithRSAEncryption
14:79:32:1d:29:f4:cd:b4:0d:bb:44:b2:c0:fe:fb:93:b1:cb:
fc:ef:60:22:94:c2:a4:bc:1e:ca:8e:3d:31:d4:87:0a:d4:29:
40:af:f3:38:50:3f:a7:92:99:4b:c0:07:c8:e9:4c:9d:14:79:
0b:e2:79:ac:1d:5f:7a:69:ac:02:80:68:96:1a:3a:3a:a2:02:
8e:78:80:1a:77:80:61:bb:e7:dd:21:1b:d6:b3:de:9e:99:51:
a8:ba:72:0c:b8:09:3d:f5:87:3b:c3:29:db:64:17:bf:45:c4:
7b:81:5f:d5:9b:33:98:21:08:b6:96:66:19:9b:c1:6f:71:ad:
fa:3d:4c:b5:90:ef:29:d4:0f:85:14:19:c9:19:72:3e:bf:15:
ff:31:be:45:5e:21:41:2a:53:19:50:4c:56:0d:aa:08:d4:9a:
2c:3e:7a:87:9a:f1:7c:7f:51:16:3f:b5:ea:a7:7e:6f:6e:c1:
ea:52:34:39:cb:c8:00:e4:42:3a:ca:58:8a:4a:b9:29:73:1f:
b7:11:a0:79:48:33:76:ad:57:2e:fe:6c:23:06:16:22:12:03:
b5:a4:9d:d4:e7:ba:83:c6:db:27:74:c7:7d:40:2a:eb:b6:e1:
29:4e:01:b5:78:a0:66:8a:31:c7:9f:e9:63:d5:6f:f0:fe:84:
3e:21:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org