Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_AJeE2JwFv5-pm4Btx4d4tZQUo.roa
File: 8_AJeE2JwFv5-pm4Btx4d4tZQUo.roa (raw, json)
Hash identifier: KD7j1lrtG87YhVPhbfiOPrR91YSnSAdjNPtHqpyd9OQ=
Subject key identifier: F3:F0:09:78:4D:89:C0:5B:F9:FA:99:B8:06:DC:78:77:8B:59:41:4A
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 19FC9499
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_AJeE2JwFv5-pm4Btx4d4tZQUo.roa
Signing time: Tue 10 May 2022 14:38:10 +0000
ROA not before: Tue 10 May 2022 14:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3598
IP address blocks: 194.69.96.0/19 maxlen: 19
194.69.100.0/22 maxlen: 24
2a01:110::/32 maxlen: 32
2a01:110:8068::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435983513 (0x19fc9499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: May 10 14:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3f009784d89c05bf9fa99b806dc78778b59414a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:a2:89:4c:f2:6a:c6:39:cc:fa:18:7e:e7:
c0:b1:8d:64:7a:a2:12:ee:82:aa:e2:49:e5:fd:e1:
8c:f6:62:69:8e:cc:b9:f6:d2:dc:7d:f6:85:03:aa:
07:12:65:3a:d1:0c:20:33:e9:6e:24:3c:9b:ff:59:
08:57:36:57:a2:f2:32:c9:4d:f1:16:86:49:44:0b:
3a:0a:7a:ef:34:09:bc:82:e2:32:d0:e2:0e:f0:9e:
79:cf:9b:42:7e:c9:4e:72:8f:64:cf:2a:18:02:6d:
f5:73:74:ec:64:e2:ac:d6:a1:fd:a5:ae:1b:61:e8:
5e:05:75:cf:5b:8d:29:d7:9a:16:e5:5e:c1:ab:d1:
2b:94:86:35:13:b4:3e:59:aa:b7:9c:76:59:df:22:
cf:28:6f:9d:15:fc:6f:87:3c:7e:dd:5a:2f:71:a4:
44:20:8e:a2:5a:80:4b:ba:f0:1d:52:1f:8e:66:31:
95:70:bf:5e:2e:db:fd:18:93:2c:a1:37:ff:60:3c:
62:e1:a3:f6:3b:d8:f3:b6:e2:87:f6:ca:7f:57:4b:
85:4f:cd:c7:f2:d7:04:8a:df:f7:b3:c2:4d:67:38:
2f:9c:13:b8:e1:df:17:ae:09:c7:13:e5:b2:08:6e:
3f:c5:85:d3:ab:53:23:b1:41:57:6c:5d:25:a7:06:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:09:78:4D:89:C0:5B:F9:FA:99:B8:06:DC:78:77:8B:59:41:4A
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/8_AJeE2JwFv5-pm4Btx4d4tZQUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
60:95:81:51:c1:1f:a1:bb:62:f8:a6:a2:89:9e:7f:3e:db:0c:
80:76:db:c2:9a:ee:cf:73:33:49:fd:5b:61:a7:b9:d8:d0:f1:
c8:c6:30:2e:18:25:5d:46:46:96:25:8a:ca:d7:89:a6:15:8b:
dd:bd:be:3a:56:63:a5:da:07:ff:bc:7f:7a:21:99:68:3c:53:
58:bc:fe:7e:8e:db:02:34:9b:a3:f0:d3:9c:b2:19:82:5c:74:
a8:c8:04:5b:14:0b:d8:64:a9:eb:f0:76:39:16:cb:46:be:55:
cc:fb:80:80:30:66:6e:aa:ab:63:4e:ef:73:a1:21:1d:c7:2c:
e3:83:b2:d1:b6:73:04:6d:35:3d:f4:9d:52:15:28:b0:6d:d1:
fd:69:96:9f:61:8b:18:87:1f:25:0f:d5:4e:f7:4d:96:c1:ad:
c8:21:af:30:73:a1:ea:0e:70:d9:fb:d4:d5:2b:c1:35:9f:3f:
b6:ae:94:eb:20:f2:8f:91:a2:59:2f:67:32:a8:f4:64:70:ab:
f6:3c:d4:ac:65:a4:02:d3:bf:a5:ec:ee:9c:d8:84:0c:85:28:
2b:f5:02:03:43:cb:8a:83:7c:85:ca:f0:96:fa:ad:bb:a5:0f:
a9:25:c5:1d:f7:b2:a7:fc:f5:cd:e9:ca:00:1b:d4:be:be:4e:
88:c6:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org