Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/l3e5xo8xIsLAAwae_yKmkwZKQQg.roa
File: l3e5xo8xIsLAAwae_yKmkwZKQQg.roa (raw, json)
Hash identifier: QVkwp9myvZYFbziUGIWGNiDbpyGSRE2E6++p7oUjqlE=
Subject key identifier: 97:77:B9:C6:8F:31:22:C2:C0:03:06:9E:FF:22:A6:93:06:4A:41:08
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B5D5F5C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/l3e5xo8xIsLAAwae_yKmkwZKQQg.roa
Signing time: Sat 01 Jan 2022 10:02:32 +0000
ROA not before: Sat 01 Jan 2022 10:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 195.228.112.0/24 maxlen: 24
195.228.4.0/24 maxlen: 24
84.1.236.0/24 maxlen: 24
84.2.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459104092 (0x1b5d5f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9777b9c68f3122c2c003069eff22a693064a4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:62:30:e0:05:b8:7f:2e:05:1f:c0:1c:aa:
5f:6c:97:0f:a2:55:81:b6:e3:ea:82:3a:18:33:83:
43:84:60:60:78:d0:b4:dd:a6:bf:db:f3:f9:79:63:
ef:a1:3b:f4:c5:6b:f6:cc:aa:a3:85:8a:34:45:88:
d1:f9:bd:e6:87:bd:89:95:0f:79:2c:4d:e1:e5:f4:
5f:f6:48:56:ff:bd:d2:51:bb:8b:76:73:93:a6:4e:
00:79:04:c9:7f:02:ab:2c:30:b3:d2:99:e2:f4:db:
24:90:bd:0d:36:49:7a:41:47:fc:76:09:0f:70:b1:
f9:89:5a:af:c7:5e:44:8f:88:5c:44:a9:7b:59:55:
69:15:32:e4:c6:27:fb:d6:9a:e7:23:21:f8:69:f9:
7d:77:b3:35:09:25:46:14:03:4a:14:27:26:d7:b0:
69:2d:58:62:45:c9:71:cf:0f:53:0b:7c:9b:5d:df:
69:20:a6:93:ef:58:6d:8b:b7:80:32:76:ce:0d:38:
27:92:4b:a6:93:37:92:25:85:f5:2a:8c:8b:4f:30:
88:1e:cc:6d:9c:a8:16:50:c3:dc:6d:69:78:55:53:
d6:b8:47:a9:f2:81:eb:ef:91:20:c0:4c:d2:53:b9:
8e:eb:7e:8d:ad:f1:86:15:89:e0:d9:98:cb:2b:87:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:77:B9:C6:8F:31:22:C2:C0:03:06:9E:FF:22:A6:93:06:4A:41:08
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/l3e5xo8xIsLAAwae_yKmkwZKQQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.236.0/24
84.2.54.0/24
195.228.4.0/24
195.228.112.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ec:46:67:67:55:bb:92:d0:46:af:24:09:2b:0a:f4:e3:3b:
f6:c5:1f:6d:f7:47:3a:16:46:b5:f7:9a:ad:c6:55:19:fb:7b:
c5:82:e2:3e:6c:4a:91:84:1c:f1:ac:63:44:7a:f9:af:e0:c6:
53:d5:3b:cd:e2:45:3d:86:a3:29:a6:5f:52:94:5e:43:8f:9f:
20:0d:30:57:a8:24:72:41:65:72:77:59:f7:8a:93:5d:41:a9:
cf:6e:95:c6:39:90:53:a3:69:e0:d2:bf:5f:04:48:0b:fb:c9:
c4:83:5c:dc:76:2e:2c:a1:c5:ad:c1:3e:21:cb:e4:fa:31:54:
36:f2:ff:a3:03:4e:cb:a2:74:d7:1c:8c:5e:bf:fc:6d:e1:b8:
5f:5e:72:11:64:c5:30:60:dd:2d:0f:10:dd:07:57:3d:d3:2b:
4a:1c:2c:98:0d:a0:58:64:e0:2b:63:80:4c:5f:dd:1d:1f:bc:
a4:52:5d:09:9e:58:f6:a2:f7:fb:95:a6:cb:81:3d:13:5d:e6:
b5:e8:d5:b0:2a:00:5f:e7:c2:65:9a:50:4c:e1:5e:f4:bf:2e:
04:e2:47:3f:d1:ae:4f:8f:f1:50:4f:54:64:e3:c3:d6:ef:d2:
c3:97:45:a5:64:88:b2:37:89:67:ce:f2:7f:26:98:74:f3:d5:
ea:59:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org