Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/oDxyBy2rgEJmkmpJ--bJnsB9bJE.roa
File: oDxyBy2rgEJmkmpJ--bJnsB9bJE.roa (raw, json)
Hash identifier: K4xfN1a1+fkP+87RTYQneqNC1/TsO0jVXOQG6aApjQM=
Subject key identifier: A0:3C:72:07:2D:AB:80:42:66:92:6A:49:FB:E6:C9:9E:C0:7D:6C:91
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 029F9919
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/oDxyBy2rgEJmkmpJ--bJnsB9bJE.roa
Signing time: Sat 01 Jan 2022 06:59:28 +0000
ROA not before: Sat 01 Jan 2022 06:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31726
IP address blocks: 94.139.64.0/19 maxlen: 19
185.211.72.0/22 maxlen: 22
31.204.72.0/21 maxlen: 21
109.109.64.0/19 maxlen: 19
2a00:1680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44013849 (0x29f9919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Jan 1 06:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a03c72072dab804266926a49fbe6c99ec07d6c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:af:1b:8d:56:a7:08:92:0f:83:22:ef:49:
50:1a:11:db:12:6e:f1:d0:98:f5:e7:1f:2d:6e:3b:
6a:c6:60:74:00:88:67:6d:e0:44:57:53:bc:3c:7c:
72:1d:75:0d:4e:19:d5:25:d4:e4:64:d2:16:67:bf:
f8:1d:98:18:61:3b:4e:d3:f7:a2:90:47:96:32:21:
8a:eb:71:83:cd:d6:a1:a5:2d:dc:64:80:f3:96:d9:
8f:14:e2:32:f5:63:b5:1c:c0:1b:b3:af:57:db:5f:
ec:bb:03:b5:f6:c2:fc:88:f9:a2:ee:57:72:97:7a:
f1:fc:8d:ae:55:ac:c2:37:da:4b:79:96:32:f3:66:
09:f0:a6:50:32:d3:b5:2d:d3:33:fb:15:98:05:f0:
e9:5f:8f:dc:31:79:5c:92:0b:bb:ab:52:db:55:c2:
6e:50:6b:7c:ce:20:e3:dd:21:34:68:f3:36:12:52:
98:f4:ad:8a:37:92:d9:fb:9c:5d:a8:1e:05:22:b8:
da:d8:75:64:7d:79:a0:28:42:48:e1:aa:23:5d:70:
77:6c:6c:92:07:04:65:64:66:bd:24:9e:95:d7:d8:
8f:66:3c:40:a5:f5:cd:2e:39:9f:03:48:3e:4c:e2:
9c:19:e1:61:65:8a:53:50:cc:95:73:20:a2:0d:af:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3C:72:07:2D:AB:80:42:66:92:6A:49:FB:E6:C9:9E:C0:7D:6C:91
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/oDxyBy2rgEJmkmpJ--bJnsB9bJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.72.0/21
94.139.64.0/19
109.109.64.0/19
185.211.72.0/22
IPv6:
2a00:1680::/32
Signature Algorithm: sha256WithRSAEncryption
73:63:7a:6c:05:17:8d:6c:c7:c9:0e:55:34:56:d2:04:f2:18:
8e:6e:50:65:bf:26:cd:86:9f:c9:7a:fc:76:f2:af:ff:e8:f4:
a3:19:f4:8b:7a:83:62:6c:c9:2d:7f:c2:ba:19:ae:a3:9a:45:
77:a1:60:ec:48:b3:4c:24:64:7b:d5:29:7d:76:5b:d4:bf:04:
5f:4a:7c:c9:af:69:98:02:c9:3a:71:e9:c6:71:eb:77:bb:d2:
4c:20:ed:8b:26:7a:8d:ef:e4:db:7a:e3:7f:f6:e7:e7:f4:c8:
47:a6:e4:ce:b5:11:33:e0:f8:d7:f1:d4:26:56:aa:dc:01:b3:
d9:d4:09:86:35:6b:13:04:0c:58:33:ed:33:ff:df:70:b5:e9:
3d:fe:8c:49:e7:00:1b:03:9f:61:bf:fa:bd:5d:71:fa:09:92:
1e:5c:f1:82:98:a9:96:6c:ca:d4:78:89:67:bb:df:15:28:eb:
ff:d4:3b:63:8f:6e:e8:f0:f1:e8:a7:68:7d:9a:53:70:1e:98:
c2:9c:5e:c4:03:92:ae:c8:96:39:9d:bb:2b:25:4b:d4:28:50:
20:47:c2:b3:16:cd:0d:6a:66:b6:26:7a:fc:5b:74:67:2a:9b:
3b:9e:a3:eb:e9:2c:1a:88:08:08:ed:77:e4:62:dd:08:64:d1:
5c:5f:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:19 2024 by rpki-client on console-ams.rpki-client.org