Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/SyzdTtD9c3AAgbrBTkDw39W9x7w.roa
File: SyzdTtD9c3AAgbrBTkDw39W9x7w.roa (raw, json)
Hash identifier: UtnQZGyFaPKyfTioUZPyqRSmIpzzxWcc9OL9hRJNWJY=
Subject key identifier: 4B:2C:DD:4E:D0:FD:73:70:00:81:BA:C1:4E:40:F0:DF:D5:BD:C7:BC
Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial: 378EB598
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/SyzdTtD9c3AAgbrBTkDw39W9x7w.roa
Signing time: Sat 01 Jan 2022 10:00:54 +0000
ROA not before: Sat 01 Jan 2022 10:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8676
IP address blocks: 31.7.8.0/21 maxlen: 24
217.65.160.0/20 maxlen: 24
185.109.138.0/24 maxlen: 24
185.109.136.0/23 maxlen: 24
2a03:9f00::/32 maxlen: 32
2001:1420::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932099480 (0x378eb598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Validity
Not Before: Jan 1 10:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b2cdd4ed0fd73700081bac14e40f0dfd5bdc7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:9a:04:a9:3f:6d:e0:e8:3c:b5:cb:b2:31:
12:b1:7d:5d:62:5b:56:82:f1:88:95:44:3b:a7:2a:
d1:cb:05:1a:27:4d:14:fc:d5:79:33:42:de:c6:96:
e2:fd:f8:e5:58:38:ed:bd:27:b6:62:23:ba:78:35:
b9:b9:89:ed:e3:cd:45:1f:2d:83:21:a3:d6:06:a4:
ba:5d:f6:c2:ab:31:ba:ee:b8:13:63:3b:ef:39:8b:
08:2f:b9:e1:35:a9:61:fb:a0:7c:53:f8:03:0b:45:
8b:a0:e7:ed:3f:3d:84:60:ab:dc:58:70:0b:ef:39:
ba:36:0e:54:63:d8:65:26:a0:93:cf:d9:35:27:e1:
ab:54:d4:28:77:1e:d1:84:d2:74:29:35:eb:03:38:
6f:48:49:59:72:06:fe:ad:fd:c0:c9:38:fd:2f:39:
19:da:7b:5b:e6:c4:c3:95:1e:ab:45:a0:f2:57:29:
7f:f8:ca:5a:0a:3c:63:e2:64:38:51:85:4b:bc:c0:
0c:8e:68:52:a1:99:98:5e:1b:33:1c:41:23:1f:c4:
90:53:39:30:f4:b7:f6:a7:2f:1d:0b:36:0c:6b:8c:
65:18:f0:6e:4f:32:e8:07:ee:da:36:24:69:14:a7:
4e:ba:d3:ed:a9:8b:d3:26:b2:6b:b3:e7:4b:2c:a5:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2C:DD:4E:D0:FD:73:70:00:81:BA:C1:4E:40:F0:DF:D5:BD:C7:BC
X509v3 Authority Key Identifier:
keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/SyzdTtD9c3AAgbrBTkDw39W9x7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.8.0/21
185.109.136.0-185.109.138.255
217.65.160.0/20
IPv6:
2001:1420::/30
2a03:9f00::/32
Signature Algorithm: sha256WithRSAEncryption
65:34:01:ef:2c:37:ce:6f:00:26:e8:aa:91:9f:36:a0:0d:30:
72:d1:5c:21:5f:6b:b0:c6:54:03:c3:dc:b6:3a:5a:0f:f4:7b:
4b:f1:75:54:57:58:a8:85:90:d0:11:4f:d0:48:5b:d6:3d:d4:
81:e8:3d:62:a7:d1:38:21:25:69:cc:df:3b:2e:b0:d0:3d:a0:
fe:83:b2:27:34:fd:b9:20:23:c7:6d:25:25:a5:f9:3c:33:65:
ac:34:39:29:44:54:01:19:b1:4c:84:1d:93:3b:40:37:1e:a9:
82:1c:05:13:5a:4a:b7:0c:22:d9:ca:12:f0:76:ea:68:d9:cb:
72:7f:50:f8:25:94:b8:1f:78:cb:fe:d1:1f:c8:b0:1a:5f:62:
1d:23:e0:df:38:b7:57:b2:42:82:ce:65:c4:96:90:20:ab:fe:
26:27:28:d4:8e:78:a0:75:71:fd:46:1f:1a:07:dc:eb:a8:8e:
be:9c:e2:ab:b0:aa:6d:ae:98:06:6e:45:f5:33:e4:ae:e6:60:
cd:a4:4e:cd:9a:29:9e:fd:67:f5:ea:5e:76:c6:20:26:da:e6:
30:d3:9f:e8:8e:c5:0a:31:18:fc:31:1f:be:46:f5:39:b5:81:
76:fa:38:c7:79:23:cc:0a:f6:f5:f8:06:59:bb:25:5e:7b:88:
48:cd:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:20 2024 by rpki-client on console-fra.rpki-client.org