Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/9SSTJoKAZvXPWtoSftDCXDxOEeg.roa
File: 9SSTJoKAZvXPWtoSftDCXDxOEeg.roa (raw, json)
Hash identifier: hxFN8WKDLQOZlY5SaGTyqzjURZGTiTRjInsklVmEQrU=
Subject key identifier: F5:24:93:26:82:80:66:F5:CF:5A:DA:12:7E:D0:C2:5C:3C:4E:11:E8
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 08FAB6A0
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/9SSTJoKAZvXPWtoSftDCXDxOEeg.roa
Signing time: Sat 01 Jan 2022 08:54:14 +0000
ROA not before: Sat 01 Jan 2022 08:54:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198968
IP address blocks: 164.138.212.0/23 maxlen: 23
164.138.208.0/22 maxlen: 22
164.138.215.0/24 maxlen: 24
164.138.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150648480 (0x8fab6a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Jan 1 08:54:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5249326828066f5cf5ada127ed0c25c3c4e11e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:b1:21:83:6e:95:b8:5b:94:ef:48:51:a7:
9d:61:5a:34:e4:3c:d4:9e:d9:77:a1:1f:ea:7d:7f:
f8:aa:65:87:38:29:8f:55:7d:5e:84:99:f0:51:49:
3f:aa:2f:4d:9a:9e:2f:0b:4e:a2:4b:c2:35:6a:3a:
63:38:bf:9a:10:c7:f1:ce:80:c5:61:3a:eb:12:06:
da:77:4b:87:f3:dd:d8:04:7a:2b:4c:d5:3e:0c:1a:
26:53:f0:54:ca:1e:98:f0:9a:91:c6:d7:72:53:3e:
61:f3:fc:b4:86:c3:3b:e9:f6:c5:20:b7:2f:0b:17:
48:90:c5:40:f8:64:db:c1:14:b6:37:fc:75:12:3a:
7d:0a:20:0c:37:8c:40:e0:8a:82:83:39:db:ff:89:
20:c9:f1:f7:87:81:26:55:42:71:d1:f6:5b:13:3c:
4d:3f:e6:41:3e:36:c4:6f:a4:68:ba:94:ef:82:6c:
25:0f:09:e3:85:e7:9b:39:ea:17:f6:8e:79:09:df:
23:34:33:44:bd:db:cf:ee:e0:af:f0:8d:ce:c5:b0:
92:47:06:1a:b9:79:ec:ee:9c:a7:26:b7:e9:3f:94:
22:16:82:35:ea:37:71:e3:b0:d1:90:b5:8c:b2:96:
73:7e:34:b3:0d:4f:ca:a6:58:88:18:f8:a0:ab:7f:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:24:93:26:82:80:66:F5:CF:5A:DA:12:7E:D0:C2:5C:3C:4E:11:E8
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/9SSTJoKAZvXPWtoSftDCXDxOEeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.208.0/21
Signature Algorithm: sha256WithRSAEncryption
18:9b:7b:cc:29:82:5c:b2:7d:b2:18:67:20:6d:2c:4e:28:45:
0c:ba:5a:08:f9:c2:ec:7c:6f:ff:63:93:52:3e:b4:7f:dd:ef:
04:59:24:08:e3:14:70:2b:47:1d:96:a5:ea:ba:ee:ea:66:91:
be:33:ba:ad:ab:53:b7:f6:2f:7d:c0:b5:e7:4d:f9:6d:fb:90:
3b:3d:5d:19:61:1c:84:ee:59:a0:20:2f:71:6e:86:74:50:f9:
f3:d7:a6:ef:ef:7e:c1:e6:2c:ba:33:62:ab:9f:6b:cd:7c:cb:
22:da:14:b9:d7:49:3e:cd:1f:2e:67:59:d2:4d:21:9c:09:1f:
4c:33:42:c5:7a:01:5f:e6:a5:2e:d3:c4:b1:0d:af:71:27:87:
06:23:1d:f6:52:88:18:a8:14:6d:9f:7f:08:4e:35:c4:b5:e3:
10:da:27:76:13:8c:58:89:4d:94:31:d3:0f:0a:93:a1:10:7a:
23:85:40:fa:83:33:b8:75:93:2a:26:0d:71:19:e9:d4:70:51:
22:26:7c:d1:93:50:d0:d9:fa:61:9e:d8:14:85:f8:e8:65:8a:
a2:b3:bd:a0:cd:b7:e7:f2:92:8d:41:82:c7:0e:6d:d4:b0:31:
6f:da:42:91:96:c1:9a:6c:af:c9:91:62:04:d7:a9:21:77:04:
14:35:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org