Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/ObOcmRLpEdUIhwiQ4tSPMzv-34g.roa
File: ObOcmRLpEdUIhwiQ4tSPMzv-34g.roa (raw, json)
Hash identifier: 1HLBkR3RCFA77sYIaaBWE2582gxTfhLEysfHcVWmEuU=
Subject key identifier: 39:B3:9C:99:12:E9:11:D5:08:87:08:90:E2:D4:8F:33:3B:FE:DF:88
Certificate issuer: /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial: 19FB66DA
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/ObOcmRLpEdUIhwiQ4tSPMzv-34g.roa
Signing time: Sat 01 Jan 2022 02:51:00 +0000
ROA not before: Sat 01 Jan 2022 02:51:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9036
IP address blocks: 185.140.128.0/22 maxlen: 24
212.85.128.0/20 maxlen: 24
2001:4b30::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435906266 (0x19fb66da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Validity
Not Before: Jan 1 02:51:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39b39c9912e911d508870890e2d48f333bfedf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:e2:c1:48:51:9d:50:2f:47:ca:83:88:02:
90:72:37:d8:5a:e0:8d:13:55:63:0c:14:e9:86:78:
d8:3f:3f:f1:db:c6:16:bb:f2:96:1b:14:80:7e:d8:
8f:e4:8a:6c:af:a4:5f:5b:c3:e3:67:21:48:c6:d7:
80:52:56:a2:9f:cf:8b:29:4f:25:02:e5:d9:b4:53:
71:36:7d:7d:c1:62:65:f0:1d:60:a8:8a:6c:ee:36:
27:b2:28:82:49:6d:10:fb:4c:30:f6:37:08:dc:60:
1e:35:c9:94:c3:36:4b:09:4d:ac:ff:35:75:3f:dc:
86:41:40:5b:25:3b:04:72:e6:42:df:b7:c6:d3:4f:
4e:57:75:f7:9c:47:27:89:6d:6b:95:5e:f7:24:35:
e8:8f:19:a2:24:55:f6:1c:43:23:83:7a:0c:0d:b8:
a7:6c:8f:b6:5e:40:92:af:85:1e:a2:7b:0e:04:eb:
f0:db:7d:5b:fb:f5:b1:8c:12:74:37:71:db:a8:ed:
7a:92:bd:0e:ab:e8:18:f9:c9:17:03:fd:97:59:61:
a8:59:49:fc:e5:5a:f1:ae:d5:8f:3f:0f:2e:cd:ee:
32:90:25:14:7d:b4:2f:6a:0e:aa:3d:61:d8:d8:38:
90:4a:ab:6a:b2:eb:5f:76:f9:ea:fe:07:49:d7:d2:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B3:9C:99:12:E9:11:D5:08:87:08:90:E2:D4:8F:33:3B:FE:DF:88
X509v3 Authority Key Identifier:
keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/ObOcmRLpEdUIhwiQ4tSPMzv-34g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.128.0/22
212.85.128.0/20
IPv6:
2001:4b30::/29
Signature Algorithm: sha256WithRSAEncryption
37:53:c5:9c:fc:ce:ff:71:c4:81:f8:7d:1e:82:f2:b0:58:79:
b8:66:1e:f0:ce:06:27:c9:79:88:33:a7:54:bc:bc:24:65:8e:
8f:52:18:41:3a:d3:16:31:77:9d:07:4f:49:14:1f:72:42:6d:
12:30:e2:15:3a:68:57:37:6c:7e:ec:c1:8e:d3:89:0f:bc:d6:
73:36:27:32:e5:c5:ba:57:21:de:6e:7c:c3:ca:ed:6a:06:5c:
98:a2:7f:67:d9:97:d1:72:6c:c0:40:bc:26:70:6f:8a:95:99:
1a:2f:8e:9b:49:af:8b:fe:9f:e2:de:b8:5d:a1:70:5d:40:c9:
b2:7b:e7:53:fe:6b:23:bb:86:0a:ea:85:c1:12:29:78:cb:66:
a8:90:f5:0a:cb:4f:e4:6f:54:95:a9:1b:d2:01:78:c7:70:c7:
26:1f:4e:26:10:cc:16:b5:89:8b:c0:88:bc:dd:88:7c:02:cc:
42:a5:b9:11:47:4e:b1:7e:cb:05:28:59:ef:cf:7a:ac:0a:48:
01:e9:d5:c3:93:5c:40:16:f8:84:ea:9e:9d:06:c0:13:4d:1c:
41:2f:5d:ba:ef:cd:ff:cd:87:23:15:67:13:da:4d:79:4f:81:
d1:05:22:26:05:c9:f2:4d:fd:1b:ab:91:ae:63:9a:64:c0:ec:
b2:72:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org