Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/O42ikGobFF_-utkYuFhj_Z9mGGs.roa
File: O42ikGobFF_-utkYuFhj_Z9mGGs.roa (raw, json)
Hash identifier: 3doBW0qPG3lFTFxw/PTUJ9cBugbH7WAiAsm4IvLTiRY=
Subject key identifier: 3B:8D:A2:90:6A:1B:14:5F:FE:BA:D9:18:B8:58:63:FD:9F:66:18:6B
Certificate issuer: /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial: 37F35E2F
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/O42ikGobFF_-utkYuFhj_Z9mGGs.roa
Signing time: Sat 01 Jan 2022 07:54:05 +0000
ROA not before: Sat 01 Jan 2022 07:54:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39449
IP address blocks: 77.95.160.0/21 maxlen: 21
178.20.80.0/21 maxlen: 21
88.151.80.0/21 maxlen: 21
185.52.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938696239 (0x37f35e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Validity
Not Before: Jan 1 07:54:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b8da2906a1b145ffebad918b85863fd9f66186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:9a:1f:95:dc:f7:ff:11:db:da:e2:89:b5:
92:5f:20:a9:f5:f6:64:a0:de:36:7f:34:61:fc:f4:
31:d0:f4:b7:54:84:1e:64:01:6c:56:9b:b7:5c:ae:
07:2f:b8:82:7f:41:ec:7f:7a:b0:4e:43:e1:cd:b2:
29:3a:25:b7:71:7d:ca:30:ca:dc:fa:75:af:c4:d8:
5d:56:b0:8b:62:79:b4:a1:af:61:b4:df:94:13:8e:
c1:53:10:6a:0a:c1:1c:06:05:45:70:e8:4a:35:e7:
53:ed:7e:98:95:ec:1c:c4:72:8c:79:11:01:2a:18:
73:c0:74:ea:b8:5d:5d:a7:b3:52:56:82:dd:90:11:
f1:d1:15:4e:9a:af:db:ba:c6:6e:12:5a:98:62:70:
d5:a1:39:fb:3e:b7:5f:0b:4a:a3:26:4f:93:39:92:
f7:ff:c7:b3:12:83:75:9a:c3:61:53:a0:a6:94:f6:
a0:84:60:8d:ba:83:eb:20:e9:ae:1c:fe:2d:f8:6c:
4c:bb:ab:18:e3:9d:9f:57:73:36:a9:86:0a:fa:18:
ff:d5:bb:dd:3f:65:98:6a:52:18:88:14:30:49:ad:
58:e1:e1:65:6a:0e:94:39:3a:f4:61:95:e9:11:44:
74:44:69:c3:eb:c6:40:5e:6b:b9:a5:f3:3e:88:3c:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:A2:90:6A:1B:14:5F:FE:BA:D9:18:B8:58:63:FD:9F:66:18:6B
X509v3 Authority Key Identifier:
keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/O42ikGobFF_-utkYuFhj_Z9mGGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.160.0/21
88.151.80.0/21
178.20.80.0/21
185.52.92.0/22
Signature Algorithm: sha256WithRSAEncryption
81:48:a7:08:58:ef:f5:19:3b:5c:55:1f:78:ad:71:97:df:b3:
e4:26:16:27:83:8d:67:48:06:e8:2c:a6:8d:11:74:50:28:1b:
3f:ea:0e:21:56:78:12:58:55:1c:40:73:33:bb:9c:07:1f:b6:
fb:71:c0:0b:57:ae:f3:06:ab:e6:b6:d3:c4:25:87:92:5a:e4:
9a:85:37:f4:a2:42:60:db:99:b4:e7:38:4d:ff:0a:b8:f3:85:
3b:54:7d:14:17:60:9f:55:37:cb:92:50:e4:28:9c:ac:b0:a2:
54:6e:df:5a:ec:5d:cb:b4:2a:ad:f1:b7:9c:97:92:ab:1c:c4:
bb:60:ad:aa:b2:cf:09:da:e4:bf:e5:75:8a:e3:37:b2:8b:10:
1f:16:5b:33:1f:c8:f4:34:f7:8c:54:fb:d2:40:7c:c7:ab:14:
4d:38:0b:f3:d6:1b:e4:b6:d0:4b:1f:81:a8:63:5b:09:a3:56:
8b:ab:11:97:04:ca:a1:46:8d:f4:dd:2c:2b:e9:38:5d:62:50:
6e:7d:b2:8f:2c:d5:c3:52:78:25:51:83:d6:bb:7e:ba:54:4c:
95:6e:9d:f7:b5:9d:c7:fc:35:ff:88:44:27:5f:1e:28:1a:0f:
3b:ae:7a:36:f6:da:24:bb:75:d5:83:9e:71:27:d1:95:fe:1b:
11:60:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:23 2024 by rpki-client on console-ams.rpki-client.org