Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/U2YBZOhumyBFO8vrfbCaNuAcAm0.roa
File: U2YBZOhumyBFO8vrfbCaNuAcAm0.roa (raw, json)
Hash identifier: Q8Q1bjPIJJ7nrSuvIRWMiBX0LKDbp6tZ323ECucyM44=
Subject key identifier: 53:66:01:64:E8:6E:9B:20:45:3B:CB:EB:7D:B0:9A:36:E0:1C:02:6D
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 05BA965A
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/U2YBZOhumyBFO8vrfbCaNuAcAm0.roa
Signing time: Sat 01 Jan 2022 16:01:07 +0000
ROA not before: Sat 01 Jan 2022 16:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12847
IP address blocks: 212.93.98.0/24 maxlen: 24
212.93.96.0/24 maxlen: 24
212.93.96.0/19 maxlen: 19
212.93.124.0/23 maxlen: 23
212.93.126.0/24 maxlen: 24
194.125.240.0/24 maxlen: 24
2a03:ec00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96114266 (0x5ba965a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Jan 1 16:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53660164e86e9b20453bcbeb7db09a36e01c026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:b3:d1:47:41:26:e4:ed:fb:d9:15:b5:c3:
c7:63:9b:23:b3:4b:c7:c9:2c:ad:47:13:7a:74:85:
be:7c:41:f7:df:d5:71:41:13:c9:5b:64:7f:26:fe:
8c:02:68:e2:94:82:65:38:39:d0:0f:89:c2:e7:d7:
08:df:1a:a8:01:b1:c1:10:73:f4:68:ed:06:35:fd:
4e:d7:8c:c5:d3:43:c4:dc:71:59:fb:0a:ca:5a:4c:
40:b9:8c:d3:54:08:31:d7:1f:0e:d9:c2:53:3a:e8:
5b:8a:3d:bf:6c:46:81:4e:b2:c1:8c:5a:c1:dc:49:
76:dd:4d:5b:97:c9:d6:39:f6:11:99:85:46:2d:71:
56:10:71:98:fb:ce:0c:12:2e:07:3f:78:cf:f9:72:
f8:34:60:0b:ab:0f:95:1d:c0:6c:ca:28:3f:14:06:
f8:74:a0:41:eb:57:39:31:80:c8:6e:45:d1:7f:15:
1a:e1:1f:46:bf:6b:81:e5:22:9f:52:2e:49:82:5c:
2a:61:11:5f:c3:1e:38:08:d3:1a:12:b7:00:a9:78:
1d:6b:8f:29:9a:67:06:a1:a9:44:ba:ef:99:9e:1e:
ba:55:0e:52:54:c8:07:5e:ac:ac:e5:e4:dc:eb:59:
e5:02:5d:5f:ed:1c:98:dd:76:e2:0d:47:0f:9c:e3:
3c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:66:01:64:E8:6E:9B:20:45:3B:CB:EB:7D:B0:9A:36:E0:1C:02:6D
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/U2YBZOhumyBFO8vrfbCaNuAcAm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.240.0/24
212.93.96.0/19
IPv6:
2a03:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
c0:e1:8a:1f:b4:ed:45:a4:50:b4:93:a2:24:83:d2:2b:c9:bf:
e2:b1:0e:c6:e4:93:76:21:92:97:f5:cd:1d:f2:90:af:72:3a:
6b:d0:98:dd:93:39:5e:06:3c:ed:ed:27:f8:25:e2:e2:83:75:
ab:94:82:19:45:7c:24:ef:40:f4:8f:36:dc:aa:1a:3a:11:4d:
78:27:e7:70:35:7c:72:dc:99:5c:96:58:c1:67:be:85:9e:df:
f1:d9:99:d2:6e:71:f5:42:6f:37:34:e0:c2:bf:5a:8a:8a:17:
e7:97:bf:c0:e0:73:0c:54:e9:c3:a3:33:f6:61:a9:46:97:e8:
15:83:ea:d8:fd:a6:26:4c:2a:ef:79:af:39:f3:95:e0:8a:8c:
89:58:7b:d6:0a:e5:07:78:9e:79:e7:c0:62:b9:ea:59:47:f6:
db:cc:92:cd:89:09:ed:23:bc:27:b6:c4:e6:11:b3:cb:3e:d8:
67:19:40:ff:e8:b6:a6:a7:c6:90:93:85:43:bc:6e:7b:f6:1b:
d7:26:f4:7f:db:87:44:26:7a:75:23:ae:d6:4d:09:16:ce:ea:
f0:b7:f6:e7:c2:9b:4e:77:35:24:80:f3:01:75:3e:12:01:d2:
e5:08:c0:97:af:de:c2:96:a1:9f:91:5b:aa:06:0a:ef:03:83:
07:e5:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:57 2023 by rpki-client on console-fra.rpki-client.org