Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/EdRe99J7cvKo96osYDgdlug41_8.roa
File: EdRe99J7cvKo96osYDgdlug41_8.roa (raw, json)
Hash identifier: nJqWeIQPr5TuevPguWCVgedpwLzoNqHqEjZVah9PYZo=
Subject key identifier: 11:D4:5E:F7:D2:7B:72:F2:A8:F7:AA:2C:60:38:1D:96:E8:38:D7:FF
Certificate issuer: /CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Certificate serial: 0E789B36
Authority key identifier: 8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/EdRe99J7cvKo96osYDgdlug41_8.roa
Signing time: Sat 01 Jan 2022 15:06:41 +0000
ROA not before: Sat 01 Jan 2022 15:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20574
IP address blocks: 185.119.100.0/22 maxlen: 22
178.21.80.0/21 maxlen: 21
193.108.42.0/23 maxlen: 23
2a03:900::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242785078 (0xe789b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3dcffca5795a47fcc2e138ce5473e800098295
Validity
Not Before: Jan 1 15:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11d45ef7d27b72f2a8f7aa2c60381d96e838d7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:52:a1:ef:aa:c0:57:81:d4:4c:d1:4c:02:
19:30:70:48:f7:66:c4:90:b8:cf:c5:dc:19:8d:ea:
3f:c9:42:b2:9e:cb:2e:1b:49:e0:3e:34:9b:35:d9:
18:48:bf:d0:09:e2:71:1b:16:b5:2d:c6:65:05:10:
b0:45:76:b0:ff:b6:77:dd:f1:91:61:18:ea:75:98:
48:c2:c5:00:0b:d3:13:f2:8a:5d:76:65:98:b3:d3:
c5:44:e3:99:07:ce:2f:3f:17:a7:25:e3:1d:2e:b9:
54:63:de:f6:48:8d:d0:1d:fb:64:23:41:02:41:39:
bd:be:4f:f5:34:90:c2:44:5b:ed:7e:fd:8a:dd:90:
a5:b3:57:4c:57:cd:ad:13:c0:8d:ce:ff:e6:27:39:
a5:7d:e3:da:fa:11:bc:8f:b9:90:b0:83:71:12:2a:
64:06:24:84:44:0e:27:42:f8:b5:b1:00:b9:b5:a1:
85:dc:cd:54:18:a4:71:ca:79:77:96:e9:d3:fa:ef:
34:d5:76:8c:4d:63:4c:ed:dc:9f:b0:dc:f2:e6:34:
35:b3:a0:3c:09:7c:cc:5e:2d:e8:ad:37:f9:61:e5:
69:14:07:67:4f:b1:bf:4b:78:f4:8a:a0:56:61:42:
b9:e9:5f:fb:47:5d:06:ff:51:12:e0:58:e9:17:f4:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:5E:F7:D2:7B:72:F2:A8:F7:AA:2C:60:38:1D:96:E8:38:D7:FF
X509v3 Authority Key Identifier:
keyid:8F:3D:CF:FC:A5:79:5A:47:FC:C2:E1:38:CE:54:73:E8:00:09:82:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/EdRe99J7cvKo96osYDgdlug41_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e393e-1e5b-4b0f-ba76-a0cfe12f3d51/1/jz3P_KV5Wkf8wuE4zlRz6AAJgpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.21.80.0/21
185.119.100.0/22
193.108.42.0/23
IPv6:
2a03:900::/32
Signature Algorithm: sha256WithRSAEncryption
96:44:40:b1:85:05:fd:56:e3:99:7b:7b:01:e1:a8:a1:da:3f:
4b:b5:ee:20:bf:b9:2d:9e:29:20:94:a4:8a:bb:d9:41:47:2f:
0e:71:5f:af:bd:06:ff:99:55:a1:66:3b:75:e3:89:b0:9a:8f:
11:e4:e5:a8:9d:e5:40:69:73:01:17:1a:37:53:6f:e5:fd:69:
86:14:64:ae:16:f9:4e:27:b8:6c:c6:f9:27:f1:36:ac:85:29:
3d:af:a2:0a:46:73:11:3b:c5:b2:c6:6a:81:75:b5:33:96:ec:
9c:ba:a2:15:2a:05:ec:65:bb:9c:02:71:06:56:18:b3:f3:b3:
d0:dc:86:b3:67:58:e8:0e:be:40:b4:b6:cd:91:21:06:dc:73:
7e:7c:af:ec:52:62:04:ac:8f:49:d6:4e:df:04:dd:24:ee:7e:
b1:f8:b3:82:cc:95:61:c7:e0:81:14:93:3e:a1:04:06:5c:07:
83:59:4c:89:63:30:cc:c1:86:37:e6:4f:17:1f:b4:0e:e2:7a:
df:e6:b7:e9:97:0e:c1:b2:4b:5c:2a:9c:df:29:49:c9:98:42:
5d:db:1c:92:6c:bd:52:f0:ed:22:48:13:24:58:56:65:eb:ac:
18:33:fd:d0:e4:21:40:64:45:0b:6e:46:66:b4:57:bb:2c:15:
e0:72:15:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:25 2024 by rpki-client on console-fra.rpki-client.org