Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/3JuY2PRSnkH9nUt2xro7Bl694uA.roa
File: 3JuY2PRSnkH9nUt2xro7Bl694uA.roa (raw, json)
Hash identifier: 2znMB4tSI2dmLeLHUfpS4L7x3kd/f/ISm9YjRp6dwV4=
Subject key identifier: DC:9B:98:D8:F4:52:9E:41:FD:9D:4B:76:C6:BA:3B:06:5E:BD:E2:E0
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 083884EC
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/3JuY2PRSnkH9nUt2xro7Bl694uA.roa
Signing time: Sat 01 Jan 2022 03:56:52 +0000
ROA not before: Sat 01 Jan 2022 03:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5626
IP address blocks: 213.146.192.0/19 maxlen: 24
89.26.128.0/17 maxlen: 24
194.38.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137921772 (0x83884ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 03:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc9b98d8f4529e41fd9d4b76c6ba3b065ebde2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:94:b7:41:5e:ad:25:b0:58:65:06:8d:19:
aa:fb:06:ad:e9:3e:0f:cb:39:12:63:c9:0c:7d:31:
db:1e:e1:1f:b0:ae:99:e5:2d:d1:2a:24:7b:49:be:
43:96:a4:1b:c0:ed:f2:00:2f:11:d5:03:30:12:eb:
a1:da:bb:45:76:a2:44:bd:90:42:81:fb:5c:7c:1d:
f6:1d:63:bd:b9:e4:1b:d9:7e:d0:c0:06:31:24:12:
82:c3:0f:64:6b:ed:44:d1:e7:be:0d:7b:93:44:39:
1c:c0:c2:47:60:4d:57:34:11:a8:1a:2d:09:90:20:
e4:69:77:f4:de:93:a0:4c:4a:22:00:85:89:27:e9:
aa:dd:7a:66:74:1a:c1:8a:03:82:1f:58:c6:81:82:
67:3b:44:fc:f7:e0:8a:d5:50:05:cd:25:3e:d0:2e:
96:3a:19:8c:3f:b3:3b:cc:6c:3f:8a:74:eb:55:b4:
f3:87:45:e7:34:93:e6:bd:65:8e:66:23:b0:cb:f2:
2f:b3:1e:e5:45:0e:c3:ac:f3:c5:06:10:80:9a:f0:
3e:9a:42:da:ca:f5:f1:5e:eb:5d:3b:e8:a7:4f:f1:
56:c6:c1:93:a4:41:2d:e3:18:c4:f6:6a:4d:7e:f8:
4c:fc:75:b5:c0:63:5e:a9:5e:75:76:cf:a0:b7:e2:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9B:98:D8:F4:52:9E:41:FD:9D:4B:76:C6:BA:3B:06:5E:BD:E2:E0
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/3JuY2PRSnkH9nUt2xro7Bl694uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.128.0/17
194.38.128.0/19
213.146.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:94:d0:c0:55:fa:dd:82:c2:f7:86:9f:43:ae:d2:33:ef:06:
67:84:06:55:2b:eb:61:20:0f:7a:f6:ce:f6:40:91:48:3f:65:
8e:fb:a2:f0:e2:6e:c2:8d:a9:00:46:1d:cc:c6:ac:f2:3f:4c:
d9:f8:84:3b:e6:b3:e1:8c:fa:1f:14:72:da:e2:68:fc:83:7c:
a3:12:3d:99:9d:cb:ca:ba:d4:89:88:06:d6:40:6f:7f:8f:e7:
ea:80:0b:c4:80:78:fd:e4:e9:18:78:84:84:c4:bd:13:3f:8e:
22:2f:33:c1:cf:fe:ef:09:4e:aa:1f:a2:d9:75:a6:20:ba:eb:
51:14:2d:4b:f0:4c:fa:17:5c:80:d5:41:80:36:fd:45:51:de:
3f:95:c1:b4:ca:b7:f5:61:0c:cb:53:a0:b9:87:57:30:b1:65:
ed:8f:b4:f3:a1:f5:24:21:27:9e:49:d1:e6:9d:38:60:91:01:
21:ef:fb:e6:c1:c8:e4:f1:ce:1c:13:0f:25:c8:0a:1d:a0:ed:
d2:d6:a9:c1:30:b3:db:b1:7e:83:87:2f:f3:14:a8:96:f3:5f:
f9:7d:95:a3:69:6d:03:da:d7:a4:5a:dd:0b:4f:1a:a2:38:2c:
fd:43:35:81:6e:43:ee:80:09:a1:c7:65:de:6b:67:53:42:75:
d5:b1:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:34 2024 by rpki-client on console-ams.rpki-client.org