Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa
File: 7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa (raw, json)
Hash identifier: aZ4hVknTlxyXx/nHCNM3dOWps6CvLDIXG6hnDrwBg/c=
Subject key identifier: EC:46:29:27:45:C7:7C:36:D5:D8:95:99:08:13:0C:94:ED:3F:64:33
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 044E9281
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa
Signing time: Mon 30 May 2022 02:00:13 +0000
ROA not before: Mon 30 May 2022 02:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25795
IP address blocks: 185.139.34.0/24 maxlen: 24
185.139.32.0/23 maxlen: 24
185.139.35.0/24 maxlen: 24
2a07:12c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72258177 (0x44e9281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: May 30 02:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec46292745c77c36d5d8959908130c94ed3f6433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:96:5a:ad:41:e9:6a:b6:78:ec:8c:6d:4d:
17:39:d3:80:37:1e:33:ba:e2:0c:ae:aa:80:1a:2e:
1f:29:39:8f:32:6b:e2:84:69:80:96:7f:db:ad:6a:
f1:1f:41:6b:45:4e:4a:cc:5b:eb:cf:cc:b6:51:17:
58:d1:86:62:3e:b4:2e:93:72:0c:96:3f:74:71:4f:
85:73:08:da:60:81:0e:d8:90:af:71:81:78:c7:28:
b9:12:1f:e8:ee:75:61:fa:d2:74:42:b6:03:c8:7c:
be:d8:a3:97:c2:ff:7f:c2:da:34:64:0a:ab:63:29:
77:ce:f9:21:5c:fe:26:1d:31:2d:da:59:9a:6a:9d:
7d:45:51:44:ed:d5:db:ec:17:9e:da:92:64:91:17:
3a:c4:40:df:f2:fd:60:f5:20:67:9b:2a:1f:fb:28:
26:cc:40:8d:c2:2c:c8:ca:bd:00:93:a0:fc:c1:43:
84:60:a7:2b:f3:ce:c4:5d:8b:84:8a:1b:e0:3e:ed:
e8:16:55:87:b5:66:f4:3f:58:cc:47:c6:71:21:44:
9a:6b:30:05:59:8f:e8:38:d3:fa:9a:68:87:8a:52:
27:d9:83:89:d5:f0:90:98:5c:ff:86:23:23:68:47:
ec:1c:78:f8:75:fb:1d:37:6d:51:1b:3b:7d:93:3f:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:29:27:45:C7:7C:36:D5:D8:95:99:08:13:0C:94:ED:3F:64:33
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/7EYpJ0XHfDbV2JWZCBMMlO0_ZDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.32.0/22
IPv6:
2a07:12c0::/29
Signature Algorithm: sha256WithRSAEncryption
63:9e:97:f7:c8:8d:0b:67:dd:14:ce:7e:6d:03:a3:ea:c9:f9:
ba:dd:69:d1:fc:92:6f:76:c4:14:c8:bc:a8:7e:ce:29:83:df:
9a:0c:84:c7:e4:76:3b:3e:cc:d6:63:d0:b6:62:bb:29:c2:c5:
3a:46:50:57:5e:d4:72:2e:00:2f:e7:76:e5:db:c4:bb:7f:58:
29:d3:60:35:c6:89:91:8b:7a:e0:39:a9:51:cc:a2:fe:2a:f6:
76:97:72:ec:8e:7c:c2:bd:e0:80:2b:b0:6e:18:13:e7:7a:3e:
f8:04:06:8e:e4:07:12:94:af:ce:49:4b:11:06:46:92:5f:64:
b3:af:8a:03:dc:1b:c1:3a:39:64:0a:86:d1:a2:7f:d6:ea:36:
4d:f6:be:7b:b3:ae:45:58:9c:40:53:ce:e7:d9:c9:51:83:ef:
5c:76:50:5a:ad:f3:15:3a:4d:be:b1:fd:10:e7:5e:26:08:d8:
ee:9d:f4:95:68:b5:cc:7b:2d:4e:25:a9:cc:ef:ff:41:7f:c1:
1d:ed:a6:38:14:1c:08:c4:a4:b5:2e:9e:73:ed:00:f0:b4:bd:
5c:94:21:ca:4c:5a:0c:da:e6:13:70:1c:df:f4:03:04:d0:2e:
ce:9e:42:c6:bc:f4:38:41:e3:12:d5:12:53:07:ac:a2:39:db:
d8:d2:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org