Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jeL21CGHugOGXf1Zq9aDJYb1_OA.roa
File: jeL21CGHugOGXf1Zq9aDJYb1_OA.roa (raw, json)
Hash identifier: b7OVLiGn1Y1ZBPbHh24eRQuVigtx2n3es0dxd1CN0ws=
Subject key identifier: 8D:E2:F6:D4:21:87:BA:03:86:5D:FD:59:AB:D6:83:25:86:F5:FC:E0
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 3672291F
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jeL21CGHugOGXf1Zq9aDJYb1_OA.roa
Signing time: Mon 27 Jun 2022 02:55:40 +0000
ROA not before: Mon 27 Jun 2022 02:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4637
IP address blocks: 217.151.32.0/20 maxlen: 24
195.153.74.0/24 maxlen: 24
195.153.108.0/22 maxlen: 22
195.153.216.0/24 maxlen: 24
195.153.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913451295 (0x3672291f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jun 27 02:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de2f6d42187ba03865dfd59abd6832586f5fce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:81:ab:83:31:96:d8:8c:03:8f:63:7b:53:
df:61:66:3e:72:a0:64:e8:b8:08:d3:3c:83:1f:13:
49:e9:f4:2f:eb:a3:88:7d:06:ef:83:d9:7d:dd:d8:
a7:48:3c:c9:d5:d1:62:cc:bf:8c:43:cb:7b:73:ac:
81:31:2d:c3:db:c9:2d:1c:fb:74:08:93:d5:23:21:
06:ec:d2:6d:f1:fe:8b:92:28:7d:c4:39:47:48:4a:
28:94:e0:de:f8:1f:91:9e:27:99:ce:8d:21:a3:7e:
c0:44:84:83:34:f7:ad:44:a7:13:e1:a1:77:e1:5b:
b1:d4:db:14:ee:62:d1:13:11:05:64:10:a4:16:69:
a4:a4:17:c8:ba:2b:cf:21:66:a9:15:dc:c8:41:79:
0c:7a:ce:f1:03:6b:e6:5f:2f:bb:57:46:c3:48:5c:
7c:2d:23:15:1b:e0:75:64:d8:03:a6:1e:38:d3:7e:
84:aa:4c:9f:9d:3b:19:f7:44:cf:46:de:c9:92:25:
ee:f4:30:69:cb:bd:d1:38:f2:7c:2e:0e:f9:4d:bb:
5a:1c:25:90:46:14:1e:15:b5:a0:07:3f:70:21:e7:
6e:a3:9e:9b:ae:b2:60:a8:56:e1:2f:65:73:8d:35:
f7:e4:9d:62:04:fd:79:34:69:db:1e:79:c6:ad:a2:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E2:F6:D4:21:87:BA:03:86:5D:FD:59:AB:D6:83:25:86:F5:FC:E0
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/jeL21CGHugOGXf1Zq9aDJYb1_OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.74.0/24
195.153.108.0/22
195.153.216.0/23
217.151.32.0/20
Signature Algorithm: sha256WithRSAEncryption
84:84:7e:6b:82:64:96:c3:3f:ec:8b:3b:94:f1:22:0c:75:3e:
af:0f:cc:d2:42:39:05:12:51:ed:c4:f2:9f:20:c1:ce:ba:52:
8d:39:29:b0:95:bb:d9:8d:6d:e9:e8:b9:ac:f6:9c:c3:56:e7:
9b:57:87:36:33:c1:e2:75:3d:35:f1:f1:33:93:13:dd:80:50:
5f:46:56:13:f1:b6:09:5b:43:c3:eb:bb:13:45:f0:07:9f:ec:
cc:2e:99:1f:cc:f7:6a:fb:7c:eb:82:2f:11:76:31:60:04:8f:
e8:ee:e8:8f:22:68:70:9b:d1:06:9f:b1:f8:fb:26:98:71:68:
fc:7e:3a:c3:98:45:b8:71:80:bf:f4:15:d9:5e:37:db:5a:0c:
b7:34:87:e0:b1:cc:78:ea:fa:c3:64:d8:74:9a:0e:c4:1e:75:
81:3a:32:41:01:d0:60:86:da:7b:7d:76:0c:fa:4d:97:ee:99:
11:3f:00:3d:04:c9:bc:8a:97:88:6e:00:fc:bb:9a:42:9c:30:
44:58:bb:31:11:51:ff:29:07:56:47:75:f0:b9:63:20:c2:74:
35:63:a7:36:9c:6e:55:e9:44:aa:92:5e:5e:b6:76:25:db:23:
39:17:f8:29:65:6f:be:e7:f8:af:01:a0:29:4d:7c:8d:fc:d9:
03:de:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:07 2024 by rpki-client on console-ams.rpki-client.org