Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jORJd4UfKP6NHrKuTKxF2CIGXzg.roa
File: jORJd4UfKP6NHrKuTKxF2CIGXzg.roa (raw, json)
Hash identifier: AJQ9jv/S8Hrl6H1ac8tFDVNyEQCL7/+o64MdQT85avI=
Subject key identifier: 8C:E4:49:77:85:1F:28:FE:8D:1E:B2:AE:4C:AC:45:D8:22:06:5F:38
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 30BA0CF8
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jORJd4UfKP6NHrKuTKxF2CIGXzg.roa
Signing time: Thu 14 Apr 2022 06:51:28 +0000
ROA not before: Thu 14 Apr 2022 06:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 139.156.0.0/16 maxlen: 16
213.162.160.0/19 maxlen: 19
145.54.0.0/16 maxlen: 16
195.190.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817499384 (0x30ba0cf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Apr 14 06:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ce44977851f28fe8d1eb2ae4cac45d822065f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:c2:e6:bf:22:58:20:79:cc:a1:bb:3f:ce:
23:00:9f:1b:82:09:c7:20:02:29:4e:4c:d5:7e:ca:
5f:bd:5a:23:36:c8:ca:5c:02:7c:94:92:66:69:2f:
36:3e:7e:02:88:30:21:05:d8:6b:63:f1:70:77:9f:
ed:35:87:ca:e6:52:91:7c:ea:45:8b:0d:84:25:b6:
7a:d7:19:78:f3:45:68:fe:fc:07:9d:e5:ee:76:96:
b2:e9:32:0c:b0:4b:8b:68:e7:81:06:d5:63:8d:e6:
c8:95:ac:c9:9b:ac:c7:5e:2e:97:89:56:c5:6f:a5:
76:90:69:3b:07:81:d9:98:36:00:2a:d0:75:dd:60:
5a:0c:87:ac:77:84:00:24:5d:84:c0:af:ba:c7:9a:
f1:39:74:25:c3:4f:d8:3f:5d:52:88:5b:a8:c9:f2:
62:3a:1c:4f:4d:b3:a2:4e:81:ec:7d:a5:bc:8e:c2:
ae:a2:9a:f0:c8:e8:e3:71:5d:76:d4:da:9c:14:68:
72:8c:6a:a5:0f:6a:88:d1:6f:92:69:2a:43:ad:bd:
94:bd:c8:34:81:b2:78:3d:a0:80:fc:19:5f:5d:5b:
eb:a3:3a:61:b4:05:e8:97:89:d0:34:f3:7d:9e:37:
b3:3a:e3:f6:78:3a:90:92:8a:75:8f:39:05:81:35:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E4:49:77:85:1F:28:FE:8D:1E:B2:AE:4C:AC:45:D8:22:06:5F:38
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/jORJd4UfKP6NHrKuTKxF2CIGXzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.156.0.0/16
145.54.0.0/16
195.190.224.0/19
213.162.160.0/19
Signature Algorithm: sha256WithRSAEncryption
81:05:84:27:d1:a7:ba:98:3c:91:ac:4d:7e:45:c9:56:98:f0:
1c:75:ca:18:9f:52:51:c1:68:e7:0c:fb:0b:25:f7:57:7a:e5:
44:cf:01:12:b8:84:1a:19:a0:da:5e:41:43:ae:24:48:a0:55:
ab:cb:79:f0:72:31:66:d8:95:ba:6e:09:1c:59:ed:a3:81:b7:
8c:cc:a9:bc:ac:92:a1:ec:c6:35:a2:9d:c3:46:88:55:6b:5d:
19:2e:04:a7:a4:05:a5:63:24:74:b6:75:08:c3:7c:12:d2:41:
14:71:6f:ad:8a:de:e7:cf:aa:13:e2:f2:df:27:1b:52:13:c0:
34:72:73:56:86:aa:be:5e:2d:4e:b5:0d:f4:1a:40:bc:50:25:
1b:2b:ca:3c:d3:a5:1c:3a:96:8c:e7:3f:ba:03:35:cd:98:7b:
6a:87:b4:ce:f0:51:4e:db:dc:28:69:61:8b:e1:40:2c:27:97:
5f:33:da:ef:e5:ed:a6:bb:d5:8b:70:36:3b:80:44:59:ed:c0:
16:de:c1:85:c0:ed:67:74:47:a8:52:38:c8:c8:15:07:6e:7c:
9b:00:ba:db:95:6e:f1:3b:31:20:7d:34:a2:5d:05:68:20:6e:
cd:18:fd:7d:a9:b7:3a:41:5e:ef:cd:bd:fa:3c:8e:d6:72:d6:
bb:25:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:02 2024 by rpki-client on console-fra.rpki-client.org