Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/KezDF9G6EjUx0ybifDWHAdT9Uw8.roa
File: KezDF9G6EjUx0ybifDWHAdT9Uw8.roa (raw, json)
Hash identifier: F5nuBZClxvhlvDkimoAMlybTxZJ854OjEruKEYN1Eds=
Subject key identifier: 29:EC:C3:17:D1:BA:12:35:31:D3:26:E2:7C:35:87:01:D4:FD:53:0F
Certificate issuer: /CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Certificate serial: 059C6077
Authority key identifier: B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/KezDF9G6EjUx0ybifDWHAdT9Uw8.roa
Signing time: Sat 01 Jan 2022 01:53:29 +0000
ROA not before: Sat 01 Jan 2022 01:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42477
IP address blocks: 81.25.16.0/21 maxlen: 21
109.234.40.0/21 maxlen: 21
2a00:1800::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94134391 (0x59c6077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3143920956802a8eb4b4627a2ff4f3987ec1a3d
Validity
Not Before: Jan 1 01:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29ecc317d1ba123531d326e27c358701d4fd530f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:26:78:df:04:e1:52:57:a4:1e:44:2e:6d:
b3:03:89:ce:de:5b:54:d9:47:40:f2:54:64:19:2c:
7e:64:de:82:d9:fe:bf:d8:d0:1e:8b:94:c1:17:bf:
c2:6f:e6:0a:37:80:2a:8b:22:0b:a7:34:6e:c1:c4:
49:be:c1:fa:ca:6c:bd:8b:df:5b:91:19:af:c9:02:
27:1f:62:30:b6:02:d3:79:19:9f:13:85:82:f1:c5:
89:71:cc:2d:74:b8:cc:4d:7e:ab:6c:85:cc:fa:49:
e7:ba:cc:62:61:d5:fd:92:bf:4f:f8:98:65:d2:14:
d5:69:bd:ae:3e:e2:72:b6:ec:44:cf:90:bd:20:29:
4e:59:07:c5:dc:82:87:2b:73:07:39:91:a4:75:33:
ba:5d:a2:35:f2:b1:59:0d:85:d3:df:ce:a8:9f:f5:
7a:4a:5c:47:53:74:cf:3c:24:f7:81:43:96:1d:5f:
3e:67:bf:14:ec:0e:47:98:29:31:dd:e5:e5:e3:6d:
8b:d4:c5:fb:f8:97:ed:82:6d:23:de:ac:2d:aa:df:
5f:59:07:17:79:49:e7:49:0f:45:b4:fd:0e:37:b9:
3c:71:0e:ce:ea:eb:af:7d:eb:35:8a:51:de:ea:71:
73:f4:94:c3:ca:09:db:01:51:bc:f0:b8:03:6d:21:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:C3:17:D1:BA:12:35:31:D3:26:E2:7C:35:87:01:D4:FD:53:0F
X509v3 Authority Key Identifier:
keyid:B3:14:39:20:95:68:02:A8:EB:4B:46:27:A2:FF:4F:39:87:EC:1A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxQ5IJVoAqjrS0Ynov9POYfsGj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/KezDF9G6EjUx0ybifDWHAdT9Uw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a1c142-8943-49f4-8cc9-6ef2b9d7f104/1/sxQ5IJVoAqjrS0Ynov9POYfsGj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.25.16.0/21
109.234.40.0/21
IPv6:
2a00:1800::/32
Signature Algorithm: sha256WithRSAEncryption
7e:7f:cf:02:7d:de:bd:5d:f7:7c:51:c6:48:5e:de:a7:93:65:
f5:11:ac:81:7d:aa:51:66:40:40:83:d0:95:9f:35:94:6f:f4:
ff:71:23:99:a7:fe:bc:bc:7d:40:80:e0:0c:de:d9:b6:b8:d7:
4b:3e:dd:6c:03:d7:95:d8:66:1f:81:fe:87:24:e4:66:8a:92:
40:1f:33:1f:e1:67:bd:0c:74:62:98:33:a4:16:3d:0d:0e:ec:
80:62:b9:a1:4b:91:01:9b:73:07:0e:74:f1:e8:a9:2f:00:bc:
bf:83:b3:cc:0c:57:ba:09:7e:b1:5c:d6:4d:ed:7c:c8:42:8e:
f9:ac:15:3f:e8:0f:bb:02:00:f1:9f:20:07:f6:c4:12:7c:96:
82:34:8d:29:03:72:96:ea:68:12:c5:7e:49:cf:d1:80:08:24:
1f:3c:bd:83:05:50:ea:43:c0:aa:91:1a:71:ed:5c:d6:81:66:
5c:5a:bd:02:fe:61:05:64:3c:69:32:14:b7:e9:89:be:ed:ad:
06:32:35:4e:c4:97:36:b5:f3:5c:0f:e6:33:3d:61:71:0a:a7:
c1:62:df:90:2e:cb:bb:07:28:5a:c6:9f:50:a0:11:03:ef:e2:
5d:7a:80:8d:fb:eb:52:43:8d:00:40:1b:18:c6:63:76:d0:af:
39:8e:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org