Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/J8cMrj0WgT8C8ylkPxxyZDlEyWg.roa
File: J8cMrj0WgT8C8ylkPxxyZDlEyWg.roa (raw, json)
Hash identifier: RWHLQnN4QUIFXlyHmergZzsaoHCcKjchg47g84gEguM=
Subject key identifier: 27:C7:0C:AE:3D:16:81:3F:02:F3:29:64:3F:1C:72:64:39:44:C9:68
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01843EF45AAACDC94BD6F2DD097CBB1830D7
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/J8cMrj0WgT8C8ylkPxxyZDlEyWg.roa
Signing time: Thu 03 Nov 2022 19:25:12 +0000
ROA not before: Thu 03 Nov 2022 19:25:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209281
IP address blocks: 137.59.56.0/23 maxlen: 23
185.216.188.0/23 maxlen: 23
93.115.196.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:f4:5a:aa:cd:c9:4b:d6:f2:dd:09:7c:bb:18:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Nov 3 19:25:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27c70cae3d16813f02f329643f1c72643944c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:41:82:da:30:1d:5a:07:d0:70:8a:b3:69:
91:48:45:89:5a:60:38:8f:58:83:7c:c4:45:55:7b:
ba:22:5f:24:c7:75:3b:25:3e:ae:f9:af:86:e9:cc:
ec:db:59:ea:16:89:15:94:cf:ff:38:0b:b6:ba:dc:
f7:b8:3c:50:87:29:bf:30:55:1c:76:d2:a4:b9:17:
fc:5f:15:8e:c4:fd:7c:bf:6a:36:17:39:32:50:91:
42:54:1e:a0:71:39:63:c0:80:6b:99:db:04:77:2e:
7b:7e:7f:28:22:06:ff:dc:c1:d1:34:d0:54:b2:29:
ee:0c:29:cf:fd:f8:00:a4:ff:25:23:22:7e:7e:07:
4c:0b:d2:5b:c1:76:d3:07:cf:2f:ca:4d:d2:d4:7a:
dd:ce:03:c3:04:5e:03:05:c5:bb:12:0e:9b:2d:30:
2a:4f:53:1c:d4:7e:ad:c2:41:42:2f:6d:18:83:33:
00:f2:f3:8e:78:08:42:bf:9e:65:38:e1:12:6a:f9:
7f:c5:0f:40:57:bb:dc:11:25:7e:13:f5:68:8e:13:
9d:93:29:33:b8:15:ad:4f:12:05:92:ef:07:4c:e0:
93:82:61:25:99:9c:75:48:14:fc:7e:db:35:a5:84:
37:c6:26:9f:86:bc:3c:e7:11:c0:db:42:15:9a:e1:
11:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:0C:AE:3D:16:81:3F:02:F3:29:64:3F:1C:72:64:39:44:C9:68
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/J8cMrj0WgT8C8ylkPxxyZDlEyWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.107.0.0/22
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
25:b8:aa:9e:de:8a:1a:15:2d:c5:44:22:db:4d:8b:41:94:13:
4f:12:f7:6b:bc:a7:65:b7:f6:ba:a9:16:fe:78:aa:4f:12:98:
91:b8:d3:1a:3f:76:f7:12:2b:e1:a8:08:b1:37:b8:28:b5:72:
ea:ad:be:0d:4a:52:33:0b:74:f2:ae:42:f1:31:af:71:e2:c4:
c0:be:0e:14:01:99:60:55:57:e3:f0:38:84:6c:5a:db:d5:61:
30:89:a8:68:30:04:7d:53:51:e0:44:2e:18:41:fa:5b:d7:e7:
60:aa:9f:93:36:c5:49:df:1e:e8:f3:e9:54:0c:8c:1f:cb:fb:
c5:71:cf:95:94:03:52:a2:43:d6:4c:96:89:1c:3e:c9:17:60:
7f:5c:4e:01:eb:96:12:a7:ac:f3:2c:33:0d:b9:a7:4c:4a:8a:
4d:6f:5f:90:8f:33:cb:1d:af:ba:13:e5:8c:a8:0c:75:a8:0c:
0a:24:dd:f3:5f:c2:4d:7d:78:ec:e2:6b:0f:30:73:8b:fa:cd:
7b:5e:c3:30:eb:62:cc:6b:12:1f:61:8e:10:9f:69:20:ac:51:
5c:27:83:3b:59:1b:2c:57:3e:14:02:18:8e:0c:d4:1d:38:34:
53:b9:eb:f6:b5:bc:78:4b:71:9d:0d:e8:ab:ff:2b:e2:92:7a:
3d:d0:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:27 2024 by rpki-client on console-fra.rpki-client.org