Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/mU_04bJl7daiCLVtgrVb0I2I1k4.roa
File: mU_04bJl7daiCLVtgrVb0I2I1k4.roa (raw, json)
Hash identifier: nDqaRgZXLnOz0aJNHiYoURlkT0A5S/02tBNM6N73axA=
Subject key identifier: 99:4F:F4:E1:B2:65:ED:D6:A2:08:B5:6D:82:B5:5B:D0:8D:88:D6:4E
Certificate issuer: /CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Certificate serial: 01851B220F9907426E2FB7D88DEFBFF25000
Authority key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/mU_04bJl7daiCLVtgrVb0I2I1k4.roa
Signing time: Fri 16 Dec 2022 13:31:35 +0000
ROA not before: Fri 16 Dec 2022 13:31:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2593
IP address blocks: 95.140.128.0/21 maxlen: 21
185.213.114.0/24 maxlen: 24
185.213.113.0/24 maxlen: 24
2a09:8d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:22:0f:99:07:42:6e:2f:b7:d8:8d:ef:bf:f2:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Validity
Not Before: Dec 16 13:31:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=994ff4e1b265edd6a208b56d82b55bd08d88d64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:b9:6b:88:68:d2:7e:a1:7a:7b:f5:03:2a:
3c:2e:b4:be:b7:c6:30:21:ea:d2:54:89:3a:a2:1e:
59:bc:3d:ec:eb:63:8a:6e:1e:bb:95:05:22:45:c6:
b2:5d:80:1c:fe:88:71:e7:07:a5:49:8d:24:e1:6c:
0f:f8:6b:de:3d:27:7f:97:20:59:ab:12:b3:f0:aa:
87:18:ea:2b:dd:1c:e5:19:6f:3c:2d:cb:9e:21:1c:
4d:50:72:df:be:66:58:a6:85:68:4a:a0:3d:2b:72:
96:09:5e:d7:f6:1f:e5:c5:98:bc:3f:22:c0:3b:39:
f7:f4:24:49:2f:a7:df:3f:40:4b:b6:84:ac:27:a7:
d5:07:58:0c:a5:20:b1:e4:fd:3c:b7:c4:64:35:7a:
27:90:de:64:6c:af:4e:b1:7e:ae:4b:95:d6:90:d9:
4d:06:4d:5d:48:de:ac:7a:ac:92:59:46:8d:63:d2:
6e:db:f3:93:34:f2:4b:b8:5c:2e:56:8f:1c:90:5f:
d3:81:8d:34:81:6a:59:04:a7:0f:ee:dd:bf:f8:7c:
6f:e1:65:33:97:a0:7d:3b:81:23:ec:fe:a1:51:ab:
67:27:11:ee:bd:54:5d:61:4c:a9:91:da:d5:6e:75:
53:24:db:79:86:1f:91:13:c2:a2:04:75:70:a6:38:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4F:F4:E1:B2:65:ED:D6:A2:08:B5:6D:82:B5:5B:D0:8D:88:D6:4E
X509v3 Authority Key Identifier:
keyid:72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/mU_04bJl7daiCLVtgrVb0I2I1k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.128.0/21
185.213.113.0-185.213.114.255
IPv6:
2a09:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
0a:28:23:2e:4c:40:d6:59:f6:ae:1e:5f:29:3e:c1:06:8b:ae:
cf:53:fe:49:7d:7c:f5:e1:20:18:f3:2e:72:72:8b:8c:6b:e4:
ec:c0:89:eb:83:5f:30:54:68:a4:16:c6:b0:31:1f:d2:60:1d:
80:f0:ac:8a:2d:17:b0:ad:cd:b9:65:2b:00:34:c7:60:28:b4:
18:49:62:70:d5:e2:f3:ca:a6:bb:a3:9b:a5:3d:87:93:e4:82:
83:c6:ef:dc:04:d7:00:8e:76:92:98:05:11:85:0b:98:11:ba:
28:5a:23:9a:44:c3:1e:2e:5f:cc:2d:12:02:4e:be:cf:d8:bb:
50:cb:05:42:ad:70:97:b7:ca:8a:0a:92:13:74:81:df:ad:e3:
9d:ed:4e:ff:09:90:3b:12:75:30:59:e6:00:b3:df:9a:e4:e2:
3a:88:f0:e6:dc:58:19:f1:57:d6:37:97:16:b2:6b:6f:d1:cb:
71:1e:2e:66:9a:cf:9b:49:55:9f:df:b7:24:30:28:0f:21:e5:
4a:a3:61:8c:7f:7c:84:77:e3:48:83:23:b2:1d:7a:2f:36:ee:
a2:95:b8:c5:f0:76:f3:b1:9d:e7:65:10:80:f9:e6:ee:f7:c8:
5a:a9:c5:d0:94:ae:d2:a8:e2:78:e6:90:d7:2a:b2:80:9d:d0:
5f:1d:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:58 2024 by rpki-client on console-ams.rpki-client.org