Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/J8GqeB1NLp1xJjy1X3fbniW4ZqY.roa
File: J8GqeB1NLp1xJjy1X3fbniW4ZqY.roa (raw, json)
Hash identifier: TeDoCgJTrTMItALO/P6B+ecykNBtbe42DHaZ2uj38h8=
Subject key identifier: 27:C1:AA:78:1D:4D:2E:9D:71:26:3C:B5:5F:77:DB:9E:25:B8:66:A6
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 0943A424
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/J8GqeB1NLp1xJjy1X3fbniW4ZqY.roa
Signing time: Sat 01 Jan 2022 08:03:08 +0000
ROA not before: Sat 01 Jan 2022 08:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196954
IP address blocks: 185.63.124.0/22 maxlen: 22
130.255.120.0/21 maxlen: 21
2a04:9740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155427876 (0x943a424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jan 1 08:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c1aa781d4d2e9d71263cb55f77db9e25b866a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:e3:7b:24:c9:20:d5:2b:41:8c:57:24:ee:
5f:1f:0c:56:2d:a7:c5:29:95:87:32:d9:d7:e5:b3:
d1:7d:f9:72:d1:85:04:6f:75:ea:d4:02:23:d3:37:
f5:c1:95:12:cf:ce:1c:e7:8d:a4:11:56:36:2d:c4:
22:10:00:cb:5b:e6:4f:33:93:0e:f8:38:d8:c5:5b:
fc:66:1e:d8:7a:b3:2b:fc:2a:d2:e5:cb:9f:dc:d4:
6b:5a:8e:7a:a0:1a:76:bb:90:cb:e3:6a:83:9c:c4:
d0:f6:17:56:5a:31:44:1f:71:9e:a1:92:56:5d:6b:
89:c5:7d:0c:91:2f:82:86:8f:62:04:8e:ea:b6:04:
51:9e:a5:3c:5f:c0:7a:81:8c:af:fb:51:de:c2:b3:
97:15:7f:71:2b:f2:3e:35:f3:4f:f1:ce:e0:d2:64:
14:24:8b:99:fa:27:2f:d9:4a:ba:50:77:ba:c2:0d:
84:d0:35:1b:7c:34:b6:d0:e9:e1:b5:9c:23:90:1a:
ae:e5:e6:f3:c3:71:5d:eb:d8:75:ae:d0:35:b3:2d:
34:d0:49:2b:4b:47:8d:ad:36:85:3d:f0:2d:9e:df:
88:dc:d3:f0:52:1b:f4:cd:25:9a:61:89:50:ce:99:
24:ed:79:ad:23:1f:45:eb:8f:66:9c:43:7b:f3:22:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:AA:78:1D:4D:2E:9D:71:26:3C:B5:5F:77:DB:9E:25:B8:66:A6
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/J8GqeB1NLp1xJjy1X3fbniW4ZqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.120.0/21
185.63.124.0/22
IPv6:
2a04:9740::/29
Signature Algorithm: sha256WithRSAEncryption
13:79:f9:34:ab:9a:3e:f0:ba:89:65:d7:c3:1c:00:5e:99:66:
0b:c0:f7:cf:1d:2a:ed:2c:19:87:c2:b2:90:1f:67:76:c0:3a:
24:09:a5:ba:a5:c6:2b:16:60:38:a4:56:8c:8f:ac:a3:a6:bd:
18:06:d1:e5:7e:f8:6d:ee:ed:82:64:b0:db:a6:00:34:77:21:
82:20:58:b1:56:3c:8f:72:04:c3:4a:85:3c:aa:28:2c:73:cd:
1c:c7:1f:7b:9c:7a:88:80:76:a1:d9:7b:00:83:8e:ef:e0:22:
00:df:4b:4d:58:75:f1:b6:98:6f:c1:f8:e1:db:25:37:65:2c:
45:99:30:68:fb:6c:83:50:77:cc:8f:29:a5:ff:51:9b:05:6e:
94:82:42:43:aa:5c:9e:25:ba:4f:fa:7d:56:d3:54:da:67:11:
01:3e:49:6c:d4:d9:04:8c:e3:ae:c8:b1:4d:c6:d3:9b:97:8f:
ad:62:da:33:7c:6b:3f:3e:b8:c4:a8:4d:52:67:e4:b1:17:fd:
bc:ff:e7:b2:86:c8:57:61:43:d3:79:af:5f:0e:9a:c5:65:e5:
df:8d:7a:a8:4e:23:a3:c3:78:d6:f0:2f:b4:9a:cc:ca:f8:af:
9b:07:e5:9c:63:69:a9:cf:69:ac:2b:05:23:ec:bf:4c:c3:d7:
88:97:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org