Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Jq7e07huvEk5GojV2Oy5zV_-zLU.roa
File: Jq7e07huvEk5GojV2Oy5zV_-zLU.roa (raw, json)
Hash identifier: tsATTW3R2w0xDvT05JMtDLoUrxAegKW3NkYphFpnkF0=
Subject key identifier: 26:AE:DE:D3:B8:6E:BC:49:39:1A:88:D5:D8:EC:B9:CD:5F:FE:CC:B5
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 098413BB
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Jq7e07huvEk5GojV2Oy5zV_-zLU.roa
Signing time: Sat 01 Jan 2022 09:57:22 +0000
ROA not before: Sat 01 Jan 2022 09:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9051
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159650747 (0x98413bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 09:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26aeded3b86ebc49391a88d5d8ecb9cd5ffeccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:f1:df:f8:4a:27:2d:5d:e2:72:a9:6e:8c:
5a:64:69:98:9d:57:af:7c:dd:54:80:f0:b0:90:b4:
cc:39:ce:90:a0:2b:f4:fa:a6:9c:b4:6f:d1:16:65:
5b:13:1d:03:b5:ec:f1:f1:08:0e:06:17:27:53:e7:
c3:16:70:8e:fa:90:51:40:f5:a0:24:cd:e7:00:ef:
b4:0d:40:ab:12:d5:8e:ff:a4:c7:85:d3:f7:27:3d:
9b:c3:b0:da:8d:2c:1a:dd:f8:cf:b9:66:bc:28:8c:
c7:d7:58:16:f1:c8:d5:51:f3:50:b8:b2:15:2d:6b:
27:ea:08:ee:6a:4c:cf:27:e5:ef:35:36:5b:b1:67:
0e:c8:ee:75:01:65:95:8e:d7:2e:e6:d8:a2:b5:92:
8f:b7:fd:c8:31:48:f6:e2:01:83:51:e8:7c:36:89:
fe:51:b2:da:92:1d:4b:29:d4:6b:74:a2:d3:db:60:
55:b5:e1:ef:e0:01:c7:52:cc:79:9b:33:3b:e1:85:
b1:bc:31:47:c9:19:dd:6a:c5:0d:7b:db:8e:0a:1d:
b2:bb:8b:87:37:65:86:5d:8f:05:6a:6f:fa:aa:95:
cd:49:7d:43:ac:27:75:01:ff:f6:d6:80:76:31:e8:
fa:5a:07:c8:5f:09:6d:54:5d:10:d1:f7:5f:d4:1c:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AE:DE:D3:B8:6E:BC:49:39:1A:88:D5:D8:EC:B9:CD:5F:FE:CC:B5
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/Jq7e07huvEk5GojV2Oy5zV_-zLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
ca:21:9a:19:51:0a:85:ff:83:84:64:03:0d:65:db:cd:7c:63:
14:ca:e9:9a:de:83:02:b3:28:83:52:cb:c8:7a:fc:5f:a6:3a:
45:1e:c6:ad:e6:4b:05:92:8c:c0:0c:f3:d6:29:58:d5:72:d3:
9f:17:75:64:42:6c:43:90:eb:e0:27:54:7e:7d:0b:f5:c2:90:
9e:54:37:21:78:d5:6f:23:68:5f:26:6e:6b:4e:ce:37:4b:f4:
85:dc:4d:86:98:99:37:77:3b:5e:68:38:db:32:14:21:ea:55:
0c:9f:0e:56:77:13:28:c6:9d:f5:e2:cf:15:fe:5b:fb:64:64:
3e:33:3b:71:2b:67:df:17:4a:5b:82:5d:a9:e9:4a:50:80:38:
92:3c:ed:2f:5c:6f:19:f7:bd:21:2a:41:46:0a:9c:46:46:44:
c5:ee:06:a2:07:84:98:a6:64:7c:fd:fd:7d:45:6b:25:d6:b7:
a6:0f:61:44:01:0b:7c:97:e8:c2:4f:06:57:14:87:5e:38:31:
4f:0b:63:f0:42:e7:36:e5:15:b1:c4:2b:76:66:8b:d3:ee:c4:
1c:5f:71:04:13:d0:d4:32:8d:4e:05:77:8e:91:a7:12:1a:b1:
28:67:53:60:a2:89:af:78:34:47:23:e6:73:a8:44:9f:e8:92:
14:c9:1d:e4
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECYQTuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NDM5NWQ2YTFhMjg4OGQ5YzM1NmVlZDMyNzg5ZTYyN2QyM2Q1MTZlMB4XDTIyMDEw
MTA5NTcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZhZWRlZDNiODZl
YmM0OTM5MWE4OGQ1ZDhlY2I5Y2Q1ZmZlY2NiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAML58d/4SictXeJyqW6MWmRpmJ1Xr3zdVIDwsJC0zDnOkKAr
9PqmnLRv0RZlWxMdA7Xs8fEIDgYXJ1PnwxZwjvqQUUD1oCTN5wDvtA1AqxLVjv+k
x4XT9yc9m8Ow2o0sGt34z7lmvCiMx9dYFvHI1VHzULiyFS1rJ+oI7mpMzyfl7zU2
W7FnDsjudQFllY7XLubYorWSj7f9yDFI9uIBg1HofDaJ/lGy2pIdSynUa3Si09tg
VbXh7+ABx1LMeZszO+GFsbwxR8kZ3WrFDXvbjgodsruLhzdlhl2PBWpv+qqVzUl9
Q6wndQH/9taAdjHo+loHyF8JbVRdENH3X9Qc2p8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQmrt7TuG68STkaiNXY7LnNX/7MtTAfBgNVHSMEGDAWgBRkOV1qGiiI2cNW
7tMnieYn0j1RbjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pEbGRhaG9vaU5uRFZ1N1RKNG5tSjlJOVVXNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvOTU4OTQzLTczZTYtNDBiNS1iYTA2LThkODM1OTQ4ZTg3OS8x
L0pxN2UwN2h1dkVrNUdvalYyT3k1elZfLXpMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
OTU4OTQzLTczZTYtNDBiNS1iYTA2LThkODM1OTQ4ZTg3OS8xL1pEbGRhaG9vaU5u
RFZ1N1RKNG5tSjlJOVVXNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBF25UAMEArl9lDANBAIAAjAHAwUD
Kga4wDANBgkqhkiG9w0BAQsFAAOCAQEAyiGaGVEKhf+DhGQDDWXbzXxjFMrpmt6D
ArMog1LLyHr8X6Y6RR7GreZLBZKMwAzz1ilY1XLTnxd1ZEJsQ5Dr4CdUfn0L9cKQ
nlQ3IXjVbyNoXyZua07ON0v0hdxNhpiZN3c7Xmg42zIUIepVDJ8OVncTKMad9eLP
Ff5b+2RkPjM7cStn3xdKW4JdqelKUIA4kjztL1xvGfe9ISpBRgqcRkZExe4GogeE
mKZkfP39fUVrJda3pg9hRAELfJfowk8GVxSHXjgxTwtj8ELnNuUVscQrdmaL0+7E
HF9xBBPQ1DKNTgV3jpGnEhqxKGdTYKKJr3g0RyPmc6hEn+iSFMkd5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org