Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/9o4yJn8s55HYwWD7BoF_tFPNYw0.roa
File: 9o4yJn8s55HYwWD7BoF_tFPNYw0.roa (raw, json)
Hash identifier: eMGxlS9o0QCTkY2SSoGLWmUMsiAYOyPFEZgnWdWwT5I=
Subject key identifier: F6:8E:32:26:7F:2C:E7:91:D8:C1:60:FB:06:81:7F:B4:53:CD:63:0D
Certificate issuer: /CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Certificate serial: 0EDEA9A4
Authority key identifier: 54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/9o4yJn8s55HYwWD7BoF_tFPNYw0.roa
Signing time: Sat 01 Jan 2022 04:04:12 +0000
ROA not before: Sat 01 Jan 2022 04:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205809
IP address blocks: 162.208.16.0/24 maxlen: 24
66.203.126.0/23 maxlen: 24
94.24.36.0/23 maxlen: 24
185.206.24.0/22 maxlen: 24
2a0b:e40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249473444 (0xedea9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Validity
Not Before: Jan 1 04:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f68e32267f2ce791d8c160fb06817fb453cd630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:66:cb:88:49:ab:ec:ca:a4:c1:7e:32:db:
3e:19:1a:70:23:db:e9:ff:21:37:e1:73:d6:03:b2:
00:59:e6:bd:1f:ae:a9:b4:28:87:66:56:a3:d1:5e:
c0:9e:b1:89:55:6f:22:50:db:2d:3b:b4:b4:40:8f:
77:9b:af:f6:13:e9:9b:17:7d:ac:96:8b:7e:5e:2a:
ee:d0:93:02:f2:3f:d6:38:fa:ce:d0:fa:2d:e8:eb:
ce:2f:98:10:f8:ae:8a:49:89:7e:22:cf:5d:5b:a1:
34:1e:e6:25:04:65:98:5f:a6:0b:9f:58:74:a4:f1:
61:32:86:ee:b8:bb:a9:4e:04:06:98:a0:2d:22:9a:
de:00:6a:c0:c1:3a:a3:05:a0:8e:88:13:22:dc:43:
0b:b8:8e:3b:00:49:bc:e4:e3:f5:c9:fc:4f:cb:2b:
25:6c:95:68:6e:8b:b1:0e:ac:66:54:a7:8f:bd:09:
ff:11:dd:ed:c8:e8:74:ca:e6:a1:9a:32:43:0c:54:
00:be:2e:31:bb:a2:1a:e9:b9:7c:1b:1d:e2:11:c9:
63:d8:4e:b5:70:da:7f:12:47:d5:d9:76:c9:9c:7c:
7c:f4:81:a4:4f:f5:9e:8e:b9:8a:b6:6d:ec:65:30:
a9:b3:62:06:c8:26:84:06:2f:3b:cd:01:41:ee:74:
e1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8E:32:26:7F:2C:E7:91:D8:C1:60:FB:06:81:7F:B4:53:CD:63:0D
X509v3 Authority Key Identifier:
keyid:54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/9o4yJn8s55HYwWD7BoF_tFPNYw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.126.0/23
94.24.36.0/23
162.208.16.0/24
185.206.24.0/22
IPv6:
2a0b:e40::/29
Signature Algorithm: sha256WithRSAEncryption
78:e1:e1:22:a8:a8:7d:65:d9:00:eb:93:e1:08:d5:00:24:b5:
cd:1c:36:d7:1d:1c:fa:e9:e4:10:98:1c:b9:df:9d:73:2c:f3:
d7:65:25:ba:ef:c6:40:c5:34:96:9a:6f:0a:30:45:ae:2c:a7:
8e:96:4d:3c:b4:62:8e:55:cb:bd:e6:7a:c4:8d:44:d3:f4:d9:
0e:dd:6c:09:56:0d:41:81:f8:68:9f:64:e1:e8:77:95:a1:51:
1b:71:20:a0:9e:35:4c:e9:f7:16:59:01:e7:cd:31:fd:19:8e:
06:29:86:e0:b1:c8:19:26:bd:7f:d1:c0:73:ad:e5:a8:ec:d6:
f7:8f:2a:90:19:a9:22:13:95:69:d7:4d:98:93:b6:71:e4:f1:
23:52:05:e5:19:b6:33:bf:a3:e8:c4:67:33:75:f4:0b:bb:a7:
2b:33:39:1b:a2:d8:4a:aa:dd:ee:4f:c2:a9:06:21:b1:47:92:
25:12:0c:fc:75:ad:92:20:8f:7b:09:6f:68:d6:24:bb:09:e7:
4b:4d:32:60:7a:49:67:06:d5:94:8c:8e:9e:9c:b3:7e:13:98:
58:34:0b:c0:2c:78:4a:ea:58:9c:e1:2c:04:40:41:e1:a5:9c:
7c:d9:74:1e:b9:1e:a0:5a:c0:b1:9f:80:7f:23:87:b3:6e:1f:
4f:a7:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org