Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/8SQmY9wPBIWOilX9ZtOTREYg75s.roa
File: 8SQmY9wPBIWOilX9ZtOTREYg75s.roa (raw, json)
Hash identifier: kmU55tp28XUe0Rxon9jva3kRqwXSgxV2fDzdCpX12Tk=
Subject key identifier: F1:24:26:63:DC:0F:04:85:8E:8A:55:FD:66:D3:93:44:46:20:EF:9B
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 0711F7CA
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/8SQmY9wPBIWOilX9ZtOTREYg75s.roa
Signing time: Sat 01 Jan 2022 14:56:54 +0000
ROA not before: Sat 01 Jan 2022 14:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8819
IP address blocks: 83.142.192.0/21 maxlen: 21
91.189.24.0/21 maxlen: 21
46.227.104.0/21 maxlen: 21
185.188.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118618058 (0x711f7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jan 1 14:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1242663dc0f04858e8a55fd66d393444620ef9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:5f:6b:b0:e2:52:c4:50:5d:32:7f:71:8d:
ec:c6:6c:39:8f:1e:5f:cc:3e:52:d1:32:40:0a:89:
6e:1e:49:59:1e:f7:bc:78:ee:7c:69:d0:c3:e2:e6:
97:72:c4:53:15:5b:89:5d:16:7a:0f:cd:06:a3:7f:
b7:d2:36:a5:00:9d:03:f7:d2:86:d8:05:1f:d2:4c:
1d:75:32:5f:df:f6:9b:72:77:a0:42:f8:10:8f:db:
d5:af:a7:7f:4d:7b:4f:31:fd:b1:61:73:09:09:35:
9c:8c:3f:91:5a:86:68:29:91:43:49:49:09:81:1b:
f2:67:53:67:75:1a:50:a4:76:1c:f1:a9:19:a6:ae:
9e:04:54:63:aa:76:b4:8e:bd:54:7a:1e:b4:b4:a2:
e4:b3:8a:0c:16:bd:4d:f5:8e:4f:7e:af:f9:f8:a2:
13:82:8c:43:a2:86:0f:d7:8d:8c:b2:e2:89:70:b5:
9b:8d:1e:7c:38:44:a8:cb:3f:4f:ee:18:7b:c1:13:
a6:e7:7c:f2:40:11:45:55:ee:a6:55:b9:0a:a5:2b:
50:2a:6d:47:f4:0c:cf:c7:7e:5d:81:1c:78:2a:6a:
c9:79:36:66:72:a7:c1:36:35:5b:1d:3a:43:93:3f:
06:72:29:eb:0a:19:b2:3d:52:08:d0:af:ee:48:7d:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:24:26:63:DC:0F:04:85:8E:8A:55:FD:66:D3:93:44:46:20:EF:9B
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/8SQmY9wPBIWOilX9ZtOTREYg75s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.104.0/21
83.142.192.0/21
91.189.24.0/21
185.188.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:59:92:5e:67:c4:55:4c:59:1c:2f:7c:29:a9:29:62:b1:fc:
5c:e8:37:7e:fe:ed:cd:e1:c1:b8:1c:4f:ce:ba:32:dc:7c:73:
d1:45:4a:4b:dc:29:88:a2:c1:7b:8d:84:a7:32:e0:2e:cd:8f:
81:ef:05:d2:34:1f:38:ed:9a:eb:0d:1a:e0:39:be:cc:a2:f3:
59:96:d1:e6:f6:84:f9:d5:c0:5a:3d:56:64:3c:3f:4c:3a:a3:
79:e9:8b:79:f7:f6:d5:11:fe:c0:be:70:92:c9:58:91:7c:ec:
8a:84:bf:34:7b:4c:cf:c9:0c:00:1e:cf:6b:e9:fc:bb:10:81:
47:6b:48:cd:2d:f7:05:0c:a4:63:9c:37:a6:d6:13:85:cb:a0:
f5:75:f2:16:08:cf:64:84:48:69:7f:07:8d:00:0f:ca:ab:86:
2d:35:02:d0:2a:ca:40:fb:12:b1:74:78:da:75:9d:ee:a1:a5:
dd:eb:cf:97:ea:e9:52:a1:43:ae:ee:c4:9c:31:ed:1b:d3:fa:
d1:dd:62:c3:be:12:07:a5:7d:87:51:39:e8:93:ef:a3:d8:73:
48:3b:f4:fe:a6:94:f5:44:b6:1c:23:64:e8:d5:f7:0b:71:f8:
4c:70:15:5a:db:dd:c8:4e:65:39:71:2b:f9:57:54:97:e8:f2:
ca:22:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org