Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/J61TEB5SObdKl7ZnogaZsWpvY_E.roa
File: J61TEB5SObdKl7ZnogaZsWpvY_E.roa (raw, json)
Hash identifier: nqQr2GlkzbMk9Iq4mE0q9tekGAwGXZ6fVuEIY7NbRJ0=
Subject key identifier: 27:AD:53:10:1E:52:39:B7:4A:97:B6:67:A2:06:99:B1:6A:6F:63:F1
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 09843764
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/J61TEB5SObdKl7ZnogaZsWpvY_E.roa
Signing time: Sat 01 Jan 2022 09:57:22 +0000
ROA not before: Sat 01 Jan 2022 09:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24634
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159659876 (0x9843764)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 09:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27ad53101e5239b74a97b667a20699b16a6f63f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:e4:60:9b:c1:cd:05:d1:e3:b7:83:ce:ac:
3a:68:01:01:cd:4a:20:3b:02:46:e9:3a:9e:ce:fd:
9f:8c:ea:4c:c5:46:ef:29:c7:b8:9b:1f:72:63:26:
f2:79:ee:1f:aa:44:c1:8b:fb:3a:f0:eb:3d:cb:35:
e5:94:5f:bf:fd:d3:23:94:2c:5e:f8:ee:0c:1a:c9:
a2:94:c2:30:d9:5a:a6:18:9a:ae:e8:25:7c:34:8d:
ae:24:e1:1a:54:7c:b4:ba:8a:ed:b5:1d:88:84:1b:
71:78:bb:2f:c4:41:f6:c5:13:45:15:c5:54:fc:30:
ad:6b:b5:e1:08:9e:cc:04:7d:30:96:13:0c:8e:3a:
31:a9:0d:73:28:ce:bc:86:29:d1:f5:ca:21:a5:3b:
60:5a:9f:1e:b4:75:19:3e:31:e0:6e:9f:cc:93:b2:
ea:f5:2a:f4:0b:df:6e:c2:15:f7:c1:7e:79:63:a5:
6d:7d:5a:5f:f7:a2:40:9b:69:05:94:04:36:78:f5:
9f:6b:d6:be:a1:38:bd:14:df:c7:ff:b3:86:a8:55:
4d:87:46:fc:8c:fb:ac:9f:bb:bf:8b:82:17:cf:e2:
c5:22:75:5d:e4:8b:2b:e2:e1:9a:89:6b:18:ac:27:
fc:1d:12:e4:f4:10:13:6d:4f:cd:3d:f1:8b:48:25:
2c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:53:10:1E:52:39:B7:4A:97:B6:67:A2:06:99:B1:6A:6F:63:F1
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/J61TEB5SObdKl7ZnogaZsWpvY_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
55:34:fa:9e:46:21:ee:0d:88:32:99:7e:7d:6d:1b:7f:00:66:
d8:15:1a:f9:01:7d:a2:a9:39:bf:9a:82:6d:1b:2d:a7:d4:3f:
4c:55:2b:0e:df:c8:0c:8d:a1:b1:50:57:c9:78:d3:04:c3:55:
5a:d9:15:d5:a7:f9:ea:61:7a:e8:1b:57:84:b5:d5:4a:5c:3b:
5b:84:00:9d:cd:2e:5a:11:4a:66:56:b2:18:13:8e:22:b5:00:
56:43:77:0a:1d:86:24:39:4b:a1:db:eb:9a:40:2e:ec:0e:d6:
24:63:7c:fc:aa:8a:0f:06:ff:d3:bb:a4:da:68:86:3d:f3:5a:
19:9f:44:14:bc:45:8d:7a:28:56:a6:4c:3e:6c:4d:a6:b3:f9:
93:52:e3:78:04:00:11:14:b1:6d:9b:3b:e6:45:81:8b:f7:40:
a7:a7:2a:3f:99:94:d7:10:28:20:63:82:2a:9b:6e:54:a5:28:
96:c0:e2:32:d1:29:f3:5b:2c:b0:04:aa:8a:05:ad:48:c2:ec:
bd:9a:49:63:8a:33:86:e8:cc:64:11:ee:c2:f2:ce:2c:a6:5e:
3a:fd:17:78:50:3c:f9:03:6a:fc:8c:04:2b:ca:58:5a:7d:83:
d2:f2:6e:84:33:40:3d:50:48:87:7f:a8:a2:ec:8a:b9:d7:b8:
f1:71:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org