Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/W09NIutkkSAjgpEkRuk85onH0l8.roa
File: W09NIutkkSAjgpEkRuk85onH0l8.roa (raw, json)
Hash identifier: q2HQQP5zurym93pluTXTlZ260i0L5iR/3b92vpekxIw=
Subject key identifier: 5B:4F:4D:22:EB:64:91:20:23:82:91:24:46:E9:3C:E6:89:C7:D2:5F
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 08833423
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/W09NIutkkSAjgpEkRuk85onH0l8.roa
Signing time: Sat 01 Jan 2022 03:55:35 +0000
ROA not before: Sat 01 Jan 2022 03:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15600
IP address blocks: 185.163.92.0/22 maxlen: 22
83.97.80.0/21 maxlen: 21
193.25.102.0/23 maxlen: 23
2a0b:7800::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142816291 (0x8833423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: Jan 1 03:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b4f4d22eb6491202382912446e93ce689c7d25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:f6:dd:92:c1:a8:d9:d8:6d:de:93:c0:63:
39:72:ab:5f:b4:53:f1:28:06:32:56:90:d0:1e:1d:
52:a0:f4:11:ae:11:b7:19:25:a3:c1:a6:51:bd:c5:
90:6a:e6:65:cd:d9:24:6b:1d:68:9c:d5:1a:1b:59:
49:7b:c3:f5:88:24:9c:db:48:65:5a:ba:04:1c:ff:
4c:1b:10:29:0b:f0:1e:ab:14:44:01:29:52:2c:e5:
8a:69:02:23:ac:b2:34:e0:a0:2d:11:14:11:d1:76:
8e:ca:50:df:23:c0:a9:4e:4b:68:4d:b2:22:7f:73:
ac:30:26:98:94:b7:2a:5a:be:39:5b:a5:36:d0:99:
ec:ff:c2:4b:0d:05:aa:05:8e:3c:f3:56:7f:45:96:
52:bf:1c:e9:d9:59:d9:b1:b4:6a:a0:3d:38:bc:45:
14:46:a0:86:65:ac:d3:d5:f6:af:f7:90:9a:5e:ce:
80:a8:8b:2d:45:43:e6:97:06:69:04:41:f9:a2:95:
a8:0b:ac:85:56:d1:bb:3d:b3:cc:8f:72:0f:0f:6f:
58:58:4b:31:c7:09:9b:dc:fe:c1:14:64:70:89:95:
e2:1b:5f:bd:06:68:6d:bd:ac:76:6a:3c:f2:fa:c0:
78:a9:0d:5a:fa:c2:8b:c9:9b:f5:19:73:04:09:05:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:4D:22:EB:64:91:20:23:82:91:24:46:E9:3C:E6:89:C7:D2:5F
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/W09NIutkkSAjgpEkRuk85onH0l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.80.0/21
185.163.92.0/22
193.25.102.0/23
IPv6:
2a0b:7800::/29
Signature Algorithm: sha256WithRSAEncryption
72:df:ba:ae:72:35:12:e8:32:1d:48:67:bf:67:49:73:fe:96:
d4:b8:97:13:af:58:89:22:1a:10:87:09:a3:65:84:de:c8:88:
6e:4d:cf:1e:c7:62:2a:20:0a:a2:f1:bc:4d:3e:37:9a:73:4e:
a6:81:7a:50:74:f1:dc:ef:51:2f:d9:31:aa:04:16:e4:74:29:
c2:67:0c:78:85:cb:05:51:e5:c3:9f:de:60:8f:81:b3:bb:ea:
4e:16:71:01:2b:27:ff:6b:55:03:22:37:00:22:11:91:4f:4e:
ec:f5:42:5d:39:ba:0b:ba:12:9e:0e:e3:e2:80:6e:6f:f3:93:
44:68:e4:77:bf:9f:5a:70:6c:31:45:4f:9e:da:5b:63:ee:49:
6c:ed:bf:af:44:1d:04:83:15:22:aa:8c:1b:32:f6:d9:bc:02:
0f:7f:43:f3:03:20:c5:2b:e8:0c:b5:93:b6:8c:e7:9b:35:24:
6c:97:63:07:fa:82:a4:6f:dc:a5:24:b6:2c:ad:e7:db:f4:ac:
e5:02:88:db:35:01:be:2d:de:44:6f:7f:c9:90:07:ce:0f:2a:
db:09:b0:51:46:4d:d5:7d:33:f9:84:28:8a:a5:c2:14:53:b2:
0d:b8:ce:de:60:b5:2e:50:56:97:42:de:b4:77:81:73:9a:ed:
2d:cc:9e:5d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:36 2024 by rpki-client on console-fra.rpki-client.org