Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/axYESrTDkFnJinPGJ6oHRoUVXG8.roa
File: axYESrTDkFnJinPGJ6oHRoUVXG8.roa (raw, json)
Hash identifier: 62HWSf60eyoFCYccy09WIJ8HbAynGh3HNm9kJ5u5kOg=
Subject key identifier: 6B:16:04:4A:B4:C3:90:59:C9:8A:73:C6:27:AA:07:46:85:15:5C:6F
Certificate issuer: /CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Certificate serial: 058161E3
Authority key identifier: 3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/axYESrTDkFnJinPGJ6oHRoUVXG8.roa
Signing time: Sat 01 Jan 2022 11:59:06 +0000
ROA not before: Sat 01 Jan 2022 11:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49688
IP address blocks: 195.35.98.0/24 maxlen: 24
195.35.102.0/24 maxlen: 24
195.35.108.0/24 maxlen: 24
195.38.21.0/24 maxlen: 24
2a0f:b7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92365283 (0x58161e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6c4520759f3a4ef8b9a9a27e2533ce732c5411
Validity
Not Before: Jan 1 11:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b16044ab4c39059c98a73c627aa074685155c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:16:98:b7:98:c0:d0:65:25:31:fc:30:4b:
74:67:27:cc:6b:4b:d9:3e:83:04:c9:52:43:a2:af:
05:6e:69:8f:4c:62:f9:2c:5c:88:67:7a:7a:fd:e1:
27:c4:57:1a:e4:16:1c:48:fd:60:db:7e:3f:4f:15:
f3:c9:e8:5f:e6:f9:39:54:65:e4:8f:a3:2d:7a:ff:
4f:69:aa:55:92:5b:11:89:3b:14:a6:55:60:77:30:
75:4e:99:d2:00:a9:ab:af:4e:67:b5:b3:28:bd:f9:
80:8f:2e:41:eb:4d:1a:aa:96:f8:e0:c5:72:11:50:
29:75:a2:cb:49:20:eb:b4:d5:b2:6c:b4:1c:cd:da:
b1:e1:1d:bc:17:6f:76:f1:df:74:94:71:47:06:c8:
e8:99:59:bb:68:09:b5:bd:49:e4:13:00:0e:aa:89:
2d:32:75:86:7e:a2:f7:9b:27:ad:31:43:12:3b:e2:
57:62:aa:92:b8:cb:86:6a:86:27:ce:e5:9c:60:47:
d8:9f:bc:82:f3:56:ad:8a:37:0f:bc:c9:be:0f:a1:
07:84:7c:de:49:70:da:59:ab:fb:8e:fb:91:61:30:
04:e6:db:d8:00:d8:70:23:60:5a:cf:23:9c:4d:b0:
1b:38:52:2b:26:52:28:6e:36:74:e8:bf:10:8e:3c:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:16:04:4A:B4:C3:90:59:C9:8A:73:C6:27:AA:07:46:85:15:5C:6F
X509v3 Authority Key Identifier:
keyid:3E:6C:45:20:75:9F:3A:4E:F8:B9:A9:A2:7E:25:33:CE:73:2C:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmxFIHWfOk74uamifiUzznMsVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/axYESrTDkFnJinPGJ6oHRoUVXG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/483e33-c767-46b7-8f3a-9c0a0e2767aa/1/PmxFIHWfOk74uamifiUzznMsVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.98.0/24
195.35.102.0/24
195.35.108.0/24
195.38.21.0/24
IPv6:
2a0f:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
71:81:48:d5:24:2f:5f:c7:2e:80:4f:3b:4d:20:ad:73:6d:fd:
57:d1:3c:25:93:8d:f9:1d:bf:6a:46:bd:dc:e0:2b:60:49:c1:
95:46:d9:68:5b:96:95:63:97:bf:73:1a:f9:c3:9c:92:3b:29:
b1:1f:a3:60:3f:56:48:0a:33:b7:b8:5a:5b:e8:d2:1e:3e:b7:
06:17:96:88:fd:d6:f2:15:18:db:80:98:a5:03:e4:4f:d1:2b:
36:5a:a5:75:94:bb:78:33:1f:ee:7a:65:16:69:0a:64:f7:15:
9c:95:59:77:70:a6:52:7a:93:47:2a:84:a1:9d:32:39:55:3b:
ca:33:81:98:e0:69:93:d5:c4:d7:d2:0c:c3:66:ee:ee:19:cc:
4a:6f:ea:05:36:e9:e9:ed:cb:af:a3:56:99:d1:90:b1:d3:6a:
18:e4:2f:30:00:79:1c:16:60:b5:ca:3b:e9:54:95:ba:a5:b3:
da:32:d1:30:d8:80:fe:3b:a2:da:f8:f7:3b:44:42:b5:87:60:
8a:61:cf:23:e1:70:e1:36:eb:fe:0f:b8:0b:c0:ce:7e:bd:51:
a8:67:6c:ac:b5:a2:ad:0f:39:d0:fb:41:00:92:4d:bd:6d:50:
e0:3e:6f:b0:c9:34:d7:d7:3a:8b:db:fe:88:b6:a1:c2:a0:00:
59:80:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-fra.rpki-client.org