Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/ADAmtFn9AdJBbZWIs1ZV6glIw4A.roa
File: ADAmtFn9AdJBbZWIs1ZV6glIw4A.roa (raw, json)
Hash identifier: FdJwJHe3Ey8CYVtHvW5a2OmNzlwcKdHALjnapHaOBAw=
Subject key identifier: 00:30:26:B4:59:FD:01:D2:41:6D:95:88:B3:56:55:EA:09:48:C3:80
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 01C09E8E
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/ADAmtFn9AdJBbZWIs1ZV6glIw4A.roa
Signing time: Thu 26 May 2022 23:27:56 +0000
ROA not before: Thu 26 May 2022 23:27:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50554
IP address blocks: 139.28.112.0/22 maxlen: 24
185.3.176.0/22 maxlen: 24
89.106.160.0/21 maxlen: 24
2a00:1bc8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29400718 (0x1c09e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: May 26 23:27:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003026b459fd01d2416d9588b35655ea0948c380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:20:38:92:c1:7d:83:56:91:d7:a8:dc:8b:
68:bb:19:5a:77:3f:9d:ef:43:f5:cd:e1:f0:5a:9f:
aa:91:df:6e:7b:f3:f6:43:e4:7d:09:9a:33:22:eb:
16:31:0f:2e:2f:90:67:35:99:b5:9b:4a:a4:be:c8:
73:3a:f3:27:54:fd:e5:e0:e6:47:f1:7a:88:20:1a:
ae:73:3a:5d:bc:c3:4c:ca:71:62:2c:f4:41:7d:ae:
e1:bc:68:11:36:2b:d1:a8:b0:12:1f:bb:f2:fe:2a:
47:e6:b1:f7:77:44:ba:76:81:2e:e0:9a:ec:12:4d:
f9:71:5a:ab:46:f9:76:e0:4c:48:8e:aa:95:4e:fd:
cf:d1:32:73:a7:c1:fb:b2:d1:08:4c:d5:26:10:34:
3b:b1:b5:ba:58:fe:a4:f4:8e:d2:ad:a8:84:de:36:
a5:09:e1:12:2c:0f:90:34:a6:cb:37:a0:9a:d0:28:
89:5a:50:2b:7c:de:69:db:93:25:43:ad:ae:a7:0f:
53:ad:1b:30:71:dd:76:a3:6e:2a:fe:2c:c5:8a:29:
56:3e:c6:63:3f:dd:41:fa:82:f8:25:d0:74:49:d5:
fc:dd:0f:49:42:9d:2f:99:76:5d:bc:e1:fa:2a:0c:
29:db:08:b7:3a:4d:53:c0:7a:3a:98:99:72:d9:94:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:30:26:B4:59:FD:01:D2:41:6D:95:88:B3:56:55:EA:09:48:C3:80
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/ADAmtFn9AdJBbZWIs1ZV6glIw4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.160.0/21
139.28.112.0/22
185.3.176.0/22
IPv6:
2a00:1bc8::/32
Signature Algorithm: sha256WithRSAEncryption
26:03:a1:74:58:82:7e:35:8a:0f:07:7f:65:69:9e:61:f2:fd:
60:35:5e:ee:ef:ce:a6:21:12:b0:87:47:1f:bb:7c:d8:d5:81:
b7:b4:72:25:08:58:4f:65:ee:55:a8:9e:35:96:84:be:c5:50:
43:75:c8:cb:da:6b:7d:ab:09:60:43:61:09:e7:5a:21:90:81:
93:bc:6b:bf:3d:00:ec:c1:c4:44:a7:ca:eb:11:89:31:71:11:
0a:05:d0:e2:09:82:53:62:f9:5f:0d:92:9b:5d:31:db:ba:c6:
ec:91:10:09:f2:b7:f0:fa:92:de:9b:56:fd:3e:95:04:d0:de:
5a:21:6c:36:6d:7b:a8:56:a9:db:31:15:36:5c:52:c9:32:68:
58:7b:d7:fa:84:8e:ca:ef:ae:3e:8a:c0:c0:84:85:d8:49:63:
04:5e:61:01:9f:53:09:03:0a:cd:8f:c2:03:3c:92:43:81:c6:
e7:4c:03:a6:15:15:d8:6e:1d:72:ea:62:61:3c:3d:fe:8a:90:
6a:95:72:6b:c4:9f:e1:24:4a:82:e5:a1:ca:0d:7c:66:9f:63:
17:ba:72:71:c0:fd:15:0c:0b:c2:03:2d:de:04:2d:bb:82:3d:
ee:6a:3a:36:99:3a:5e:6c:a1:92:7b:5f:f4:5b:92:cf:40:f6:
e0:e6:70:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org