Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/13wblFmqp07X6CPdK8LwK4wd7gw.roa
File: 13wblFmqp07X6CPdK8LwK4wd7gw.roa (raw, json)
Hash identifier: AfjG181Nx2ryrusXZPBwoCDTw3j1k3wJZWXAdkJoixw=
Subject key identifier: D7:7C:1B:94:59:AA:A7:4E:D7:E8:23:DD:2B:C2:F0:2B:8C:1D:EE:0C
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3940E6EA
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/13wblFmqp07X6CPdK8LwK4wd7gw.roa
Signing time: Sat 01 Jan 2022 03:53:01 +0000
ROA not before: Sat 01 Jan 2022 03:53:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9069
IP address blocks: 195.130.96.0/20 maxlen: 20
195.251.64.0/19 maxlen: 19
83.212.64.0/22 maxlen: 22
2001:648:2330::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960554730 (0x3940e6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d77c1b9459aaa74ed7e823dd2bc2f02b8c1dee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:72:d3:3b:6f:89:3f:b0:fa:d2:1e:30:30:
6f:36:5c:f8:41:c7:65:96:68:28:a9:44:47:a7:09:
1c:07:2c:51:b6:7a:f1:a1:11:f4:84:08:ec:31:72:
9e:55:64:10:23:dc:88:c3:9d:5b:70:ef:8d:21:9e:
22:77:cc:cb:ec:ab:45:0d:93:0a:ec:da:60:eb:8f:
3e:f1:eb:df:18:3e:bf:a0:75:4f:17:4b:f9:79:7e:
0c:ca:61:fb:13:ab:f9:ce:67:28:43:ec:83:e1:50:
6b:a1:d8:40:75:ef:3b:a0:91:db:0d:7f:8e:45:fc:
99:6a:c4:49:08:54:fd:a4:00:f2:24:8b:4e:10:18:
ee:20:fe:60:53:3a:fa:c1:ba:1b:a4:7b:a3:ec:f6:
a8:82:93:fe:5b:dd:43:c5:3d:72:e7:9b:3c:a1:8f:
3b:40:a9:c1:ee:e2:32:6a:74:f2:c5:f5:1e:b2:77:
2f:4d:bb:86:8e:02:cc:0d:b5:9b:10:a8:f0:2a:1f:
61:1a:00:db:61:41:da:af:7e:fb:b3:43:c9:96:4e:
8a:8d:c5:ea:27:47:76:42:48:b8:d8:e3:29:cf:f7:
2c:7b:61:d9:8a:9f:2a:13:e2:03:70:d1:74:01:73:
73:e3:ef:bc:46:37:bd:76:13:d7:4a:a5:ea:77:aa:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:1B:94:59:AA:A7:4E:D7:E8:23:DD:2B:C2:F0:2B:8C:1D:EE:0C
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/13wblFmqp07X6CPdK8LwK4wd7gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.64.0/22
195.130.96.0/20
195.251.64.0/19
IPv6:
2001:648:2330::/48
Signature Algorithm: sha256WithRSAEncryption
62:f0:86:22:52:1d:6c:8a:c0:89:77:8f:6f:26:f3:b6:85:45:
7d:12:40:ba:ee:8c:c6:66:4b:64:74:e8:d9:46:6a:45:9d:be:
8d:12:6d:3e:52:81:91:76:24:2c:f6:9d:f0:bc:00:92:0a:28:
be:f1:2f:b7:db:ec:3f:3d:91:25:bf:69:19:2e:fc:99:d5:55:
11:ef:97:44:98:0a:eb:fa:7b:29:fb:30:8f:4e:ca:6a:af:5a:
e5:4c:79:1f:ea:cf:45:e0:14:d3:22:81:15:b5:d7:34:12:75:
67:d4:c1:99:60:aa:13:a3:3f:2a:6f:bc:be:1c:2c:c4:63:69:
24:bb:ab:5f:e8:95:b1:d3:07:96:d2:85:9e:06:5c:71:60:c1:
b8:f9:27:e2:ab:82:3b:34:f2:dc:0c:77:95:24:ec:17:e8:f6:
d1:99:73:ed:02:8c:99:c4:4b:cc:f8:2e:fd:08:0b:4d:82:1a:
d1:f4:dc:1e:f2:fc:1e:28:78:6f:26:3c:4f:d0:de:6b:a2:33:
69:40:cb:8d:82:98:c8:fa:53:ea:25:73:71:01:e1:9e:83:9c:
f2:4e:ce:a9:9d:19:b9:9f:28:65:2a:66:60:f0:97:fc:ee:76:
b8:45:ad:97:59:a3:03:9b:bd:46:32:f1:ff:d1:76:8b:ff:47:
34:b8:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org