Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rJQKWrmYrfLb6IwlEqlFe0-mXus.roa
File: rJQKWrmYrfLb6IwlEqlFe0-mXus.roa (raw, json)
Hash identifier: 5rsIKnWfbhCkehrQOikA+gjlxKZnwZ3u1nMxtkkJbMc=
Subject key identifier: AC:94:0A:5A:B9:98:AD:F2:DB:E8:8C:25:12:A9:45:7B:4F:A6:5E:EB
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02824BF6
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rJQKWrmYrfLb6IwlEqlFe0-mXus.roa
Signing time: Sat 01 Jan 2022 13:02:54 +0000
ROA not before: Sat 01 Jan 2022 13:02:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.88.96.0/21 maxlen: 24
5.35.192.0/21 maxlen: 24
62.112.0.0/21 maxlen: 24
93.113.184.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42093558 (0x2824bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 13:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac940a5ab998adf2dbe88c2512a9457b4fa65eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:6e:2a:dd:d6:b4:d3:b7:d0:88:6e:7c:3e:
bc:32:f5:93:84:71:23:da:6f:21:b4:83:67:37:12:
cf:d3:ba:5f:4b:e7:d3:3b:2a:0f:08:60:11:5e:c8:
b8:2c:b4:0e:aa:dd:e1:bf:8d:c5:ef:25:44:28:63:
00:ec:17:83:7e:27:eb:02:12:6e:da:c4:34:48:5f:
14:e8:73:03:48:fb:99:03:34:9d:83:dd:b2:6e:c0:
c0:68:27:87:b9:da:e0:ec:ed:4b:8a:08:3e:02:b0:
2d:a2:61:52:34:1a:88:08:72:67:73:9b:be:29:92:
89:2d:39:d9:3d:cf:5a:2e:ed:65:66:e4:8c:38:3c:
bf:95:d8:48:5a:5e:a9:cd:54:4e:65:59:f6:fa:f9:
6f:4d:33:b9:47:dc:f9:9f:d4:1a:7d:fc:9d:35:6f:
92:b2:af:40:61:7c:ba:e7:3c:25:01:86:42:f9:83:
ee:b8:2f:e6:45:97:56:47:5a:99:82:b5:df:a8:7d:
85:df:cd:09:34:68:79:81:68:50:06:48:bc:0a:69:
e0:21:ff:4f:0c:09:c6:16:15:8f:e3:e9:f8:03:c0:
66:19:1f:fd:e8:14:8f:06:ce:40:69:d0:9b:c3:dd:
21:cc:08:d4:94:d7:b0:71:cb:d7:7e:5b:13:c0:a4:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:94:0A:5A:B9:98:AD:F2:DB:E8:8C:25:12:A9:45:7B:4F:A6:5E:EB
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rJQKWrmYrfLb6IwlEqlFe0-mXus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
62.112.0.0/21
93.113.184.0/21
194.88.96.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:89:43:0b:19:2e:47:51:d1:81:ac:92:47:1c:45:ef:20:a0:
b7:15:50:2d:d1:47:58:57:c4:b8:9b:3f:68:7e:48:aa:05:4d:
3a:29:5a:ae:76:17:d9:f9:05:de:45:ec:8a:27:1d:8f:f1:06:
26:a2:04:2f:da:00:2f:4e:3c:6a:a3:d0:d1:9b:4d:a0:5d:e0:
7d:61:ac:0e:4b:42:6d:44:33:a1:b5:52:17:56:d9:89:73:79:
3d:ac:ef:16:f8:ba:65:04:30:7a:ee:f9:32:64:55:f8:e5:be:
b8:be:f4:41:11:fc:c5:ee:4f:00:08:60:e3:c2:fa:d0:77:8c:
82:d7:44:25:bd:c3:f8:04:f7:df:cc:3b:87:86:06:cf:cf:b1:
27:d0:1c:df:81:9f:a4:3e:88:7f:93:81:b5:a1:12:51:7b:3b:
99:7e:2b:f9:52:ac:ac:8b:f8:75:c4:72:79:eb:58:eb:40:a2:
e2:cc:d5:6b:a9:87:48:c8:c9:c9:0a:92:a6:80:72:71:68:2d:
24:56:5c:05:2c:2c:73:03:ee:4e:af:d6:24:55:d8:f0:b6:e5:
67:4d:a7:00:1f:7a:17:cb:07:65:5e:0a:59:fc:40:80:bb:40:
29:da:a1:85:76:de:5c:7c:df:0a:6b:73:2b:ba:8a:8c:d3:81:
04:55:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org