Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/b-I2p5Rkc-7y1kMQJJEERSukh3s.roa
File: b-I2p5Rkc-7y1kMQJJEERSukh3s.roa (raw, json)
Hash identifier: gu6VVRql91w7T3vJyNwy5F+jvgYyK75YLAAi5TeLMlo=
Subject key identifier: 6F:E2:36:A7:94:64:73:EE:F2:D6:43:10:24:91:04:45:2B:A4:87:7B
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 072B2D0A
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/b-I2p5Rkc-7y1kMQJJEERSukh3s.roa
Signing time: Sat 01 Jan 2022 14:06:45 +0000
ROA not before: Sat 01 Jan 2022 14:06:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39095
IP address blocks: 195.142.244.0/22 maxlen: 24
195.142.200.0/22 maxlen: 24
185.80.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120270090 (0x72b2d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 1 14:06:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fe236a7946473eef2d64310249104452ba4877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:40:a6:9b:7d:29:5b:42:5a:86:35:58:08:
49:0d:30:57:6a:c1:25:59:41:fa:27:86:f0:fb:2a:
1c:bd:8f:97:fb:9b:0d:b7:8c:c0:6f:31:e5:04:dc:
1b:bb:ba:93:81:25:8d:e0:cc:eb:8b:67:d7:46:f4:
f0:fd:88:d1:4c:49:ca:68:7a:c4:fe:7c:03:4f:ea:
0f:8d:44:eb:e6:62:e3:1b:67:f7:09:fc:dd:df:48:
be:71:5e:eb:19:2c:08:ac:90:7d:fd:30:eb:45:0c:
39:56:45:e5:1f:89:22:b8:94:d6:5f:53:67:00:0a:
5d:c1:4e:d3:c0:03:7f:84:46:11:30:e0:37:a8:82:
7b:34:df:b8:c1:0d:50:26:aa:26:61:63:31:2e:02:
99:c6:15:d5:ae:27:fc:1f:f7:b4:d7:96:b6:30:13:
2d:33:fc:37:e6:d3:79:1d:5d:17:3e:8c:bd:8b:d8:
36:59:f9:65:fa:f4:d5:eb:ca:1b:3b:ed:fe:4c:dd:
e9:72:2e:11:88:b7:91:8c:1b:57:b6:fc:27:ff:2a:
ef:bd:32:04:fa:83:a5:34:3a:5a:d7:96:b5:6a:c2:
d3:69:d1:2f:30:9d:a7:b9:8f:35:6b:bc:4c:9a:f4:
37:b1:47:9b:1b:65:7e:00:e4:5e:30:4c:44:35:08:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:36:A7:94:64:73:EE:F2:D6:43:10:24:91:04:45:2B:A4:87:7B
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/b-I2p5Rkc-7y1kMQJJEERSukh3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.136.0/22
195.142.200.0/22
195.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
69:6d:51:9c:d7:b7:91:ea:86:c5:eb:65:04:da:c4:ff:ca:82:
e0:fe:9d:dd:2b:6d:49:3c:10:3e:bb:05:c5:d7:d5:6b:a9:fd:
8a:f1:7f:39:01:53:b9:59:ae:b6:6f:45:aa:3b:15:ea:00:58:
30:51:a1:38:57:6c:ec:95:dd:37:cd:9b:4e:a8:00:bf:ed:31:
be:d0:3d:96:d9:dc:93:af:47:bc:6f:00:80:0d:a7:c6:4a:2d:
c8:9d:62:d3:46:27:40:d8:3f:54:93:0e:1f:56:a9:bd:9a:69:
a9:10:99:29:41:cb:4b:27:99:4b:04:82:1f:6a:b7:b5:ef:51:
51:4a:ff:2c:f6:29:22:2c:57:41:21:6b:79:ba:0a:33:8e:29:
e6:88:7e:9c:a3:58:c4:77:9e:55:21:dc:e0:f9:37:91:49:5e:
a2:0f:72:eb:93:f4:1d:17:f1:82:95:c8:35:bf:23:e3:78:72:
6c:be:0c:dd:1d:6d:67:a7:28:0b:6f:16:c0:af:02:b2:f9:b8:
26:d1:bd:7e:13:8a:19:eb:e6:64:92:29:38:f6:ec:e9:19:e5:
23:44:aa:ec:17:b7:5c:21:2f:f1:14:e1:3f:a6:7a:8e:b2:7a:
cc:87:db:e2:f2:60:56:82:be:bb:b0:3e:ad:92:bc:96:5f:af:
a2:d5:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-ams.rpki-client.org