Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/uR42g9gd_kOHSVUwDwc9U-bUpOM.roa
File: uR42g9gd_kOHSVUwDwc9U-bUpOM.roa (raw, json)
Hash identifier: 7tO7uWGwYzRrtm/AluEHgX9zvkSntJEZdYRgUAbjNVk=
Subject key identifier: B9:1E:36:83:D8:1D:FE:43:87:49:55:30:0F:07:3D:53:E6:D4:A4:E3
Certificate issuer: /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial: 3524F99F
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/uR42g9gd_kOHSVUwDwc9U-bUpOM.roa
Signing time: Sat 01 Jan 2022 07:00:12 +0000
ROA not before: Sat 01 Jan 2022 07:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49220
IP address blocks: 188.92.128.0/21 maxlen: 21
185.37.136.0/22 maxlen: 22
2001:16f0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891615647 (0x3524f99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Validity
Not Before: Jan 1 07:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b91e3683d81dfe43874955300f073d53e6d4a4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:6b:ef:e0:17:c2:a5:ef:c3:6e:b1:86:58:
bd:c5:8c:8f:7b:58:ae:19:fc:5a:9b:3b:5c:1e:48:
11:2d:e6:b5:ed:23:d7:23:5b:b8:e4:70:5a:52:33:
70:26:95:b0:04:d2:f0:af:6a:05:6c:b9:95:77:c8:
25:dc:a5:59:8c:ae:69:56:69:2f:e9:f6:d6:e8:c5:
f6:ef:d5:5e:84:ba:29:3b:46:11:c0:9b:f4:60:8f:
3a:3d:a1:4a:fd:39:b8:a1:34:83:d2:7a:be:99:94:
88:d9:48:24:40:10:5f:82:64:0d:35:e4:98:22:50:
06:4b:d9:69:1b:65:23:2c:6b:0d:cf:65:b4:46:84:
56:6b:b6:7b:9d:5b:1e:70:42:cf:90:a0:22:51:9b:
f5:98:79:1b:46:d9:29:76:32:22:af:c6:5a:1d:cd:
46:6d:8a:00:23:b1:42:14:d8:b3:6e:d6:c0:ee:75:
56:9f:31:5c:d5:43:74:47:e8:53:65:1d:e6:90:ca:
e1:6b:03:ff:54:3b:33:e9:a3:07:e2:6b:f0:c8:19:
0c:eb:87:b3:fa:1c:b4:56:db:9f:f9:ad:7c:9c:9d:
06:00:95:ef:17:21:de:fb:8d:4c:cd:07:92:1d:32:
06:cf:d0:fc:f6:22:13:5e:77:6f:36:ff:e6:fd:2c:
30:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:36:83:D8:1D:FE:43:87:49:55:30:0F:07:3D:53:E6:D4:A4:E3
X509v3 Authority Key Identifier:
keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/uR42g9gd_kOHSVUwDwc9U-bUpOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.136.0/22
188.92.128.0/21
IPv6:
2001:16f0::/32
Signature Algorithm: sha256WithRSAEncryption
e3:e0:61:7d:36:b8:cc:59:04:fc:a8:25:2c:91:d3:6a:d1:5f:
71:a7:93:90:11:23:90:72:e9:35:14:52:fe:5f:5f:39:1f:6b:
4e:75:12:12:79:b1:a7:34:79:de:23:e3:cc:eb:15:05:28:a3:
bd:df:cb:ed:35:be:c6:2a:c0:d7:fb:d2:ce:40:28:f4:ec:87:
ff:38:40:51:17:b6:de:d2:24:9b:44:7b:8d:d5:66:1b:af:0b:
89:69:7f:0e:3b:cd:3e:ca:71:62:b3:e4:75:d8:bd:7c:94:7e:
f2:08:98:3e:28:0b:1a:b8:f4:7a:62:fd:41:bf:50:1f:37:73:
ed:b3:25:77:5c:84:c2:36:32:72:f5:6e:1c:b1:9a:f1:52:f5:
9b:b3:ba:23:99:b6:5b:92:a6:11:c1:3d:2f:61:c7:f2:ba:d6:
01:81:40:4b:b3:38:53:0a:12:68:d3:8c:a2:24:b4:20:10:04:
2b:4b:af:e8:dc:f7:89:73:ec:89:a0:69:31:6e:d9:57:a1:b0:
a6:43:37:3b:76:03:62:13:8f:d0:3b:d8:b5:35:5c:db:09:d5:
e5:9b:a7:b9:e2:05:d9:1f:7b:79:bf:de:03:bb:05:24:f9:53:
16:b6:00:95:2b:2a:69:45:a7:1f:6c:d1:f4:6c:dc:84:b6:26:
48:b7:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:28 2024 by rpki-client on console-ams.rpki-client.org