Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/A76yT6wxt5R0OWkClYJiJJklerk.roa
File: A76yT6wxt5R0OWkClYJiJJklerk.roa (raw, json)
Hash identifier: EN6EU0JWBN5AtLHE06/tiwGkGwpsL9rRfrUd+5IUwsY=
Subject key identifier: 03:BE:B2:4F:AC:31:B7:94:74:39:69:02:95:82:62:24:99:25:7A:B9
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 02E4D482
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/A76yT6wxt5R0OWkClYJiJJklerk.roa
Signing time: Sat 01 Jan 2022 05:05:20 +0000
ROA not before: Sat 01 Jan 2022 05:05:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212583
IP address blocks: 195.85.2.0/23 maxlen: 23
185.196.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48551042 (0x2e4d482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Jan 1 05:05:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03beb24fac31b794743969029582622499257ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:da:2b:27:93:e8:77:e5:1a:97:96:70:ce:
6d:83:ff:44:b8:ca:35:7f:15:05:ce:37:64:24:8a:
89:19:bb:de:24:9f:20:9f:67:bb:b1:02:50:96:8a:
05:5d:13:a7:f6:e1:ed:9b:e9:0c:1b:b9:37:e5:78:
4d:e1:08:2d:e7:09:47:0d:21:9f:0a:3e:e4:b9:53:
2c:fb:61:da:14:af:87:60:31:12:11:89:b5:9d:94:
35:ce:84:63:61:21:25:e8:00:bf:aa:61:bc:38:7b:
84:03:5e:95:db:bd:9d:70:25:37:c1:4b:6f:f8:84:
19:d0:ce:e4:72:67:52:87:e9:d6:34:35:a7:25:26:
8e:e8:c5:e0:82:a7:b4:c8:a6:20:a8:f3:c5:ea:5f:
04:57:42:3a:59:4b:d6:f0:3b:0a:43:60:c1:e6:5e:
b9:20:3f:0c:f5:82:b9:fa:9e:29:6b:cc:66:05:d2:
1c:4f:31:91:12:2b:61:40:da:6f:f8:d6:6e:cb:88:
dc:1b:8d:91:e0:50:a9:16:bb:2a:bc:ce:1f:00:41:
1c:5d:d8:d4:45:bc:45:7a:9e:7e:1c:a9:c0:14:40:
95:f0:71:52:6b:2f:9c:98:8a:c8:fe:c1:21:57:fe:
db:d8:f2:2e:89:f9:62:c7:a1:35:56:52:b0:c4:35:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BE:B2:4F:AC:31:B7:94:74:39:69:02:95:82:62:24:99:25:7A:B9
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/A76yT6wxt5R0OWkClYJiJJklerk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.60.0/24
195.85.2.0/23
Signature Algorithm: sha256WithRSAEncryption
13:15:ba:63:84:2c:cb:cc:5e:26:d3:cd:ac:6c:be:5b:52:11:
76:0f:95:88:e5:5a:de:0e:8f:e6:a6:0e:97:28:3c:11:cb:1a:
2a:1d:d4:fa:81:c1:44:0a:a2:b6:cb:a3:5f:91:d0:77:5e:80:
5f:11:0a:59:c4:67:4e:10:fe:11:7c:7d:ce:ff:a6:9a:1c:63:
72:1f:b3:a7:44:c0:9a:8a:f9:d4:90:9f:5f:9a:87:99:61:d5:
06:98:e6:67:7e:43:de:da:e8:45:52:0b:f0:d8:a0:7f:32:fc:
7b:ac:01:ed:71:75:07:79:ca:28:25:b4:a7:dd:74:80:c9:77:
ef:1a:f5:28:eb:f8:ae:2b:34:2f:8b:da:73:c5:74:89:2d:1c:
14:b8:07:c6:29:17:81:ec:b7:c3:ac:55:3f:55:e4:2f:82:98:
6e:59:b6:76:99:70:79:55:d5:71:d8:01:c9:ca:a3:c7:9c:95:
07:2e:db:92:e8:f2:7d:d8:49:e2:93:cb:6f:82:92:17:fe:88:
fd:12:09:da:41:fa:a7:db:f0:39:20:d4:1b:f1:9e:e0:5a:b6:
06:50:b6:b0:49:e5:9b:db:89:9d:1c:57:a7:40:3b:5e:a5:e6:
bb:c0:92:22:83:90:07:60:d8:9e:d5:83:35:d6:82:f1:4b:f8:
a4:84:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org