Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/rJi-beDfb_v73y3CwALVyZ_GRFA.roa
File: rJi-beDfb_v73y3CwALVyZ_GRFA.roa (raw, json)
Hash identifier: 5SSlDwvB3hhJbhF0RgvVV/NxqJZvT4hYAQZ0gb7W7aA=
Subject key identifier: AC:98:BE:6D:E0:DF:6F:FB:FB:DF:2D:C2:C0:02:D5:C9:9F:C6:44:50
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01836A8B2C5C6B4C8349466ED8498ECF0F9C
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/rJi-beDfb_v73y3CwALVyZ_GRFA.roa
Signing time: Fri 23 Sep 2022 13:30:49 +0000
ROA not before: Fri 23 Sep 2022 13:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 185.152.92.0/22 maxlen: 24
85.239.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:8b:2c:5c:6b:4c:83:49:46:6e:d8:49:8e:cf:0f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Sep 23 13:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac98be6de0df6ffbfbdf2dc2c002d5c99fc64450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:b8:e0:91:6b:46:6f:61:67:02:a1:15:fa:
78:f9:df:75:46:29:3c:89:f6:2d:1b:9f:1b:cc:39:
3c:2c:14:d1:69:1b:a0:83:b8:75:a3:28:14:b5:82:
b4:80:25:b7:76:02:ef:b0:ab:3a:f2:af:9b:fa:72:
32:ff:4f:29:18:55:07:15:6e:e6:56:21:a6:2e:0c:
92:e9:96:c0:a8:50:b6:92:68:32:2b:18:0d:b5:78:
75:9d:f9:69:95:a4:83:5d:df:4a:3c:82:de:29:ee:
ba:e9:18:db:06:9d:2d:32:4a:d1:05:65:80:4f:f2:
d5:be:2b:5a:30:35:ab:0c:1b:e2:87:a5:94:62:8e:
bd:9a:6a:23:d9:ad:f5:0e:6a:cf:b9:53:58:17:77:
f5:9d:41:35:6f:46:45:e9:e6:97:7f:2a:71:0c:5c:
13:a9:48:ac:09:07:f0:1e:41:78:7b:03:42:d9:0d:
13:13:32:84:8e:ee:e0:94:1a:3c:b5:0c:3f:2f:d2:
e1:a7:3c:6b:31:64:e6:2b:ff:f3:0d:82:15:86:ea:
ee:20:8a:c9:f0:d5:2c:5d:d4:74:cd:dd:e2:5a:ea:
53:6d:1a:3a:7f:60:80:e3:9e:e1:63:7e:b3:ee:7e:
ed:1a:f5:2a:66:24:f5:f2:11:e4:2f:fa:42:be:07:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:BE:6D:E0:DF:6F:FB:FB:DF:2D:C2:C0:02:D5:C9:9F:C6:44:50
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/rJi-beDfb_v73y3CwALVyZ_GRFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.36.0/22
185.152.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:45:6b:8c:b4:54:60:41:f1:22:f1:a7:c4:b0:f5:f3:ff:86:
10:24:bb:a3:f0:11:61:8a:fe:c6:19:14:ab:0c:9a:ee:52:d4:
d4:54:59:92:ce:b4:0f:3f:a6:04:29:65:31:3d:55:c4:33:72:
fd:a6:d1:43:7d:ec:69:cc:10:42:4a:36:af:bf:b4:2a:a1:10:
c6:0f:c7:7f:85:ab:2e:c4:e8:85:e8:fc:11:09:14:43:9d:3b:
6a:4d:93:49:8c:90:48:0a:8d:42:f5:8d:69:4c:58:2d:62:3f:
3a:55:20:48:a9:d9:41:cb:a4:0b:90:c5:00:c9:30:27:0b:f5:
8b:36:df:19:4c:7f:bf:ba:d4:00:72:e0:27:66:ad:1c:2a:ba:
f4:be:2e:e1:db:37:55:16:74:54:8e:c5:11:09:f5:c5:67:f8:
a0:59:75:06:81:e9:b0:1c:fc:aa:84:f0:dc:82:7d:d7:71:9c:
49:4b:9d:7b:b9:45:b3:47:73:16:fd:33:9d:57:3e:48:f6:c4:
db:a9:c1:08:d7:23:0b:36:a4:c3:65:aa:eb:a2:57:63:cd:59:
6d:bc:f2:c4:10:d1:55:e3:1a:71:84:9f:7d:13:41:33:d7:13:
6e:75:d3:d7:64:72:63:6a:37:4c:09:dd:8b:62:e2:6d:f9:0e:
fe:26:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org