Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/OJibVAfAlYcozubrqEtGF9TxX5g.roa
File: OJibVAfAlYcozubrqEtGF9TxX5g.roa (raw, json)
Hash identifier: BsuwRZXbhVofJ+YAV3LPTxYmpdP7UGLfMZ537Fv1+jw=
Subject key identifier: 38:98:9B:54:07:C0:95:87:28:CE:E6:EB:A8:4B:46:17:D4:F1:5F:98
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 09BB7626
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/OJibVAfAlYcozubrqEtGF9TxX5g.roa
Signing time: Sat 01 Jan 2022 14:07:40 +0000
ROA not before: Sat 01 Jan 2022 14:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16117
IP address blocks: 62.116.224.0/19 maxlen: 19
84.23.128.0/19 maxlen: 19
185.98.244.0/22 maxlen: 22
79.142.208.0/20 maxlen: 20
213.141.64.0/19 maxlen: 19
2001:b48::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163280422 (0x9bb7626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Jan 1 14:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38989b5407c0958728cee6eba84b4617d4f15f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:d6:2c:23:70:e6:31:86:d7:c6:4a:36:66:
5d:cb:42:1e:1f:dc:d3:30:1e:04:cd:8a:cb:3f:3d:
24:77:68:2b:03:18:c9:8b:25:98:0e:b6:d4:c8:14:
a3:28:58:3f:1b:97:d6:83:15:ce:9c:ad:20:26:c1:
0a:41:b1:7f:70:57:c7:39:a4:37:43:c0:c6:a4:93:
d1:24:3c:58:2a:aa:91:80:2b:fc:2d:e7:1e:bd:72:
f5:3b:dd:c1:69:19:92:9d:e4:b2:41:fe:b5:49:04:
3a:14:4b:e3:a2:e6:c1:0c:46:7b:46:d1:fb:ac:32:
9c:da:74:e4:5d:90:1b:da:45:79:c0:84:6d:1e:4f:
a1:5b:68:ee:3d:ae:6d:b1:7c:f1:98:a2:58:f5:50:
36:06:ea:0d:1b:a3:80:45:45:db:a4:40:8f:f2:24:
93:17:f9:79:19:69:5f:a0:50:e5:4e:e8:22:62:ae:
79:a5:d8:e0:f1:b2:37:7a:5d:14:d5:63:96:46:50:
e2:4e:49:00:7e:17:92:64:6d:7b:32:93:11:34:36:
b8:36:b9:3b:51:92:ee:79:4c:85:8e:de:1e:82:b7:
71:f0:e0:e9:70:42:ae:bf:ee:c4:b7:cb:14:4b:34:
04:da:32:b5:e9:84:2e:a9:3f:60:5e:41:68:73:7a:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:9B:54:07:C0:95:87:28:CE:E6:EB:A8:4B:46:17:D4:F1:5F:98
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/OJibVAfAlYcozubrqEtGF9TxX5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.224.0/19
79.142.208.0/20
84.23.128.0/19
185.98.244.0/22
213.141.64.0/19
IPv6:
2001:b48::/29
Signature Algorithm: sha256WithRSAEncryption
63:38:23:90:96:83:8d:22:89:b9:40:27:36:53:c0:3a:51:ec:
e8:e0:e3:fd:2b:05:db:60:18:98:2f:5a:c2:a7:0a:9e:f4:16:
ff:f7:0d:d7:a6:11:b2:a1:e1:e4:d4:f6:db:d9:30:6f:0a:60:
4b:46:46:0d:81:b9:42:ed:1c:13:b1:f7:70:77:7f:90:4b:6f:
60:48:9a:fc:a8:07:b7:b7:a6:d6:c9:fd:b9:32:51:70:a8:cb:
60:1c:98:11:41:f4:46:64:8b:d3:96:62:ab:ce:e6:74:5a:b0:
90:d3:c8:df:ce:4a:94:ce:48:d6:dc:07:24:83:b2:75:e2:a7:
ce:0f:de:9b:7a:39:08:72:25:79:78:2b:20:f5:4f:b1:ca:d3:
74:11:5b:82:9e:a6:7b:83:cb:f7:15:e8:da:f8:57:46:fd:a1:
54:85:f1:8a:80:9f:68:0c:df:21:33:28:a4:34:67:06:b0:a1:
d1:8e:4a:e7:b7:ad:9c:82:25:35:d9:4b:be:46:c9:2c:5a:b6:
d9:6a:5a:36:a7:a4:b9:e7:3e:e7:ce:72:4f:a2:f3:a9:af:82:
14:89:e8:a9:5a:40:d6:b7:2b:2c:47:f5:89:d7:0e:59:79:5e:
25:c0:d2:07:2c:1b:25:bc:5e:c3:00:e5:56:71:f8:61:b9:df:
b9:42:48:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:54 2024 by rpki-client on console-fra.rpki-client.org