Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/CmSuSsR_1UrEdfQ_cGpTTLFYdtA.roa
File: CmSuSsR_1UrEdfQ_cGpTTLFYdtA.roa (raw, json)
Hash identifier: gXtO1Gv79aGajPbWazlzBOi87uZlSTMyvpXdicqAKNs=
Subject key identifier: 0A:64:AE:4A:C4:7F:D5:4A:C4:75:F4:3F:70:6A:53:4C:B1:58:76:D0
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 03A2FB5C
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/CmSuSsR_1UrEdfQ_cGpTTLFYdtA.roa
Signing time: Thu 05 May 2022 14:03:44 +0000
ROA not before: Thu 05 May 2022 14:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 185.125.200.0/22 maxlen: 24
95.140.152.0/21 maxlen: 21
80.90.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61012828 (0x3a2fb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: May 5 14:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a64ae4ac47fd54ac475f43f706a534cb15876d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:1a:ba:0c:02:41:cb:38:a5:40:00:2a:31:
3a:6f:d2:47:a8:83:b9:3d:15:d7:72:23:e2:f1:7a:
5d:0f:40:a2:a6:84:1b:d3:a9:86:e4:79:d6:8c:1a:
9c:f8:d9:e2:2b:0e:88:90:93:f2:2d:76:3f:c2:28:
18:a9:55:5c:59:b0:74:82:88:ae:54:8e:57:14:fd:
e9:6b:72:79:bb:c3:2e:13:51:75:27:a5:80:04:a9:
c9:23:39:0c:cd:2a:b4:80:25:3b:99:57:36:55:50:
a4:1e:86:09:10:82:89:f3:b0:cb:f8:d8:ea:19:f5:
51:d7:9c:bd:32:ee:11:74:82:37:09:23:7c:33:47:
be:e5:13:63:cc:38:eb:11:15:58:19:96:5a:02:5a:
98:01:c0:ca:be:c9:bf:05:99:28:05:b6:f6:d7:d9:
0e:6a:33:cc:23:cd:67:69:82:92:7e:cc:91:98:4c:
0b:d0:81:66:e2:b7:b0:14:76:c5:db:bb:6a:fe:0b:
61:1c:56:fc:83:87:a0:9d:92:ef:9b:ef:c5:35:34:
2f:6e:2d:97:0a:ce:6b:e1:78:8e:94:ea:c3:ef:88:
72:07:3a:0d:80:4e:83:70:eb:bc:13:74:5e:82:06:
0d:c0:0c:fb:da:89:83:36:93:13:f5:3f:8e:60:28:
8c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:64:AE:4A:C4:7F:D5:4A:C4:75:F4:3F:70:6A:53:4C:B1:58:76:D0
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/CmSuSsR_1UrEdfQ_cGpTTLFYdtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.180.0/22
95.140.152.0/21
185.125.200.0/22
Signature Algorithm: sha256WithRSAEncryption
21:4b:bc:ce:67:6e:b5:5d:4b:d6:a0:5d:c2:cb:19:1e:10:e7:
69:3f:a3:a0:74:34:a3:77:46:43:7e:0c:56:02:6e:48:43:1d:
25:9a:39:06:b3:56:05:01:67:02:ad:f0:c1:5e:99:f4:e9:a9:
7a:5d:b6:de:93:42:6d:0d:fe:e7:8a:a4:2d:af:b2:6a:c1:a8:
c8:48:2a:97:1d:f5:91:22:76:cf:be:4c:eb:59:8e:b3:3a:de:
0c:4e:d7:e9:33:5c:0d:8d:fb:a5:09:8e:97:4d:a9:0c:34:d1:
be:7f:85:b4:ff:d5:83:d7:31:fb:8d:ef:fe:39:81:cf:ad:11:
a8:90:fe:f8:05:51:7e:4b:e4:77:dc:e1:5b:3c:f8:81:84:03:
59:0a:31:04:23:fb:c0:80:88:16:dd:b7:a9:96:04:06:34:2b:
28:40:cd:63:4c:68:1a:18:a2:13:15:e4:f0:6c:60:f5:f9:26:
68:43:11:ef:0b:1f:45:e4:4b:2d:bd:ab:9c:79:ff:e5:65:46:
82:80:79:93:c2:80:44:91:6c:82:c1:b3:91:30:8f:89:a6:16:
08:d0:aa:fb:3e:79:9f:e7:90:1c:43:c1:1f:35:ae:e8:09:26:
e4:59:a8:7e:43:b3:18:9e:3d:48:87:e5:47:6e:64:4e:a9:e6:
23:6f:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org