Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4biBCHxs12kSluj0h9K78oCgAtk.roa
File: 4biBCHxs12kSluj0h9K78oCgAtk.roa (raw, json)
Hash identifier: Vez8ShlRsuK6eFmj7b09D5Aj4HPijplDerLYGKo4hHI=
Subject key identifier: E1:B8:81:08:7C:6C:D7:69:12:96:E8:F4:87:D2:BB:F2:80:A0:02:D9
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 01833CEA14932F44D8D231FE3DC1CBF1AE8B
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4biBCHxs12kSluj0h9K78oCgAtk.roa
Signing time: Wed 14 Sep 2022 16:51:57 +0000
ROA not before: Wed 14 Sep 2022 16:51:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29650
IP address blocks: 79.140.128.0/20 maxlen: 24
212.84.40.0/21 maxlen: 24
84.51.224.0/19 maxlen: 24
212.78.224.0/19 maxlen: 24
82.195.128.0/19 maxlen: 24
2001:1bd8::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:ea:14:93:2f:44:d8:d2:31:fe:3d:c1:cb:f1:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Sep 14 16:51:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b881087c6cd7691296e8f487d2bbf280a002d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:82:06:01:ad:27:e2:e4:e0:3a:62:89:a4:
53:cf:dc:66:3c:43:27:b3:c4:e8:f4:84:4e:2d:14:
8d:2b:1f:c5:02:fd:1f:1b:16:60:48:5e:28:af:eb:
ce:0c:06:d9:28:38:b7:51:ea:76:57:31:ad:0a:13:
07:9b:c7:ee:20:a3:18:19:59:09:3d:91:4d:83:71:
76:ac:f5:91:00:80:b1:79:67:d8:26:83:bc:88:29:
81:7e:ab:fb:57:fa:4d:7b:48:41:c9:be:ac:f6:d5:
b9:f4:52:9e:41:f4:b6:cd:b5:0d:bb:dd:0a:23:ee:
a7:54:66:84:1d:57:03:66:8b:dc:24:47:e7:99:19:
13:3e:09:65:a1:87:de:be:98:82:76:ec:d3:cf:28:
a2:62:a8:c4:f3:cf:b2:dc:f6:1a:77:22:2e:22:2e:
2f:b4:a3:d7:c8:19:6a:99:68:62:61:79:b6:0b:f4:
7d:a2:3b:e4:bc:12:20:4b:04:ff:0f:7a:4a:f7:a5:
94:eb:80:4b:a3:db:dd:6c:93:fc:97:e0:c8:20:29:
87:96:82:49:22:d1:fb:83:06:62:f0:ff:45:f4:9e:
19:de:5e:2c:71:8f:90:e2:57:04:25:c3:4c:50:ba:
bd:9e:66:ed:ef:22:72:3d:63:f8:90:36:c2:52:92:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:81:08:7C:6C:D7:69:12:96:E8:F4:87:D2:BB:F2:80:A0:02:D9
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/4biBCHxs12kSluj0h9K78oCgAtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.128.0/20
82.195.128.0/19
84.51.224.0/19
212.78.224.0/19
212.84.40.0/21
IPv6:
2001:1bd8::/32
Signature Algorithm: sha256WithRSAEncryption
7e:97:be:b7:86:1f:70:fd:50:cb:a7:41:d6:f4:af:7a:ae:46:
2d:02:cf:b9:2a:f1:15:c5:c0:17:1c:c3:85:1d:b0:aa:ad:b9:
e3:2d:14:c4:22:c9:62:92:04:ec:21:15:38:c5:17:5a:64:0e:
19:4b:13:19:ae:d9:66:32:00:4c:b5:3d:2d:9a:76:10:8d:d3:
74:a5:59:8f:be:e4:6d:f5:cc:f2:cb:fc:ba:31:bc:9a:07:cf:
0e:65:5d:e7:6c:e5:1c:9a:55:f4:71:f3:75:b5:c6:c3:7e:7a:
43:9d:58:f6:64:73:13:78:e7:9e:7a:dd:6f:3b:45:1a:b2:78:
d9:02:eb:3a:71:ea:62:cc:0f:fa:ae:b8:04:76:c3:b5:06:50:
87:9b:94:77:96:6f:26:70:ed:7a:82:02:9b:c6:c3:86:09:be:
d9:e4:d2:15:18:95:dc:a8:1d:40:2d:c7:d2:f5:eb:95:10:50:
f1:44:6c:a7:13:22:2f:57:37:fa:f2:c1:52:a8:37:31:9c:63:
e9:02:57:8c:3b:d5:fb:c5:2b:96:65:86:d5:32:4a:47:35:40:
fc:b4:9c:7c:d0:e4:e2:c8:9f:51:36:e4:86:a9:59:e9:b9:5f:
04:98:8e:9d:2f:28:11:df:31:bb:61:08:d3:9e:0c:ff:4a:2a:
8b:59:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:41 2024 by rpki-client on console-fra.rpki-client.org