Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/nAczA6rjp0ff-3J7Kg-3TQYYZpw.roa
File: nAczA6rjp0ff-3J7Kg-3TQYYZpw.roa (raw, json)
Hash identifier: mfIIXcB5h+OVWp/mHrln77AyMpGL5tpkdd/cy+bWLZ8=
Subject key identifier: 9C:07:33:03:AA:E3:A7:47:DF:FB:72:7B:2A:0F:B7:4D:06:18:66:9C
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0CE63815
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/nAczA6rjp0ff-3J7Kg-3TQYYZpw.roa
Signing time: Wed 27 Apr 2022 10:46:49 +0000
ROA not before: Wed 27 Apr 2022 10:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6805
IP address blocks: 89.204.128.0/19 maxlen: 19
89.204.128.0/21 maxlen: 21
89.204.130.0/24 maxlen: 24
89.204.135.0/24 maxlen: 24
89.204.136.0/21 maxlen: 21
89.204.144.0/21 maxlen: 21
89.204.152.0/21 maxlen: 21
89.204.153.0/24 maxlen: 24
185.98.140.0/22 maxlen: 22
82.113.96.0/20 maxlen: 20
82.113.96.0/19 maxlen: 19
82.113.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216414229 (0xce63815)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Apr 27 10:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c073303aae3a747dffb727b2a0fb74d0618669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:51:1c:0a:28:d9:0d:2d:99:03:59:4a:f2:
57:bb:6d:8b:ea:f3:08:aa:7d:a4:3a:4e:6c:e4:a1:
56:35:71:18:56:49:70:3b:ae:5f:5a:7a:fd:1b:14:
d8:bc:3c:71:af:86:e6:c0:f0:d7:15:5b:26:dd:bf:
ec:83:f2:91:20:8b:e3:8f:31:4b:15:51:64:47:c3:
4e:94:a0:2b:c5:8e:75:f4:14:e0:99:f0:7c:cd:e3:
34:b3:b9:75:aa:94:38:ea:10:84:c6:90:d8:26:f4:
42:df:b9:22:dc:50:ed:a6:c3:d9:a5:57:04:9f:ad:
3b:86:02:13:cc:6d:ef:fe:b1:30:50:7a:3e:31:7b:
65:2b:dc:f4:c6:6a:cd:d0:bf:91:2f:61:65:bb:7d:
f3:1f:d4:ee:e2:15:42:09:6e:b0:a5:ed:e7:10:c2:
d4:2e:79:de:8b:c4:07:85:d1:82:46:77:a6:74:09:
c9:bb:0b:37:df:37:ef:8e:72:4d:dd:16:a9:b5:1c:
4d:25:00:e8:87:d3:dd:10:57:6a:c1:ed:0d:6d:2b:
ab:d4:bd:5f:e4:10:6a:c9:01:a0:1f:87:29:eb:fb:
ab:f5:7e:9a:bc:60:7b:5b:0f:12:ec:9c:e7:8d:6a:
4e:44:41:83:51:43:d2:c6:72:c5:f4:a3:0c:be:5a:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:33:03:AA:E3:A7:47:DF:FB:72:7B:2A:0F:B7:4D:06:18:66:9C
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/nAczA6rjp0ff-3J7Kg-3TQYYZpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.113.96.0/19
89.204.128.0/19
185.98.140.0/22
Signature Algorithm: sha256WithRSAEncryption
04:51:37:c6:68:73:78:f9:69:5a:f0:fa:d3:73:a1:df:e3:47:
fe:88:aa:04:cf:1f:73:a3:94:e7:9c:97:20:d7:6a:86:72:8e:
65:65:af:5c:34:2b:02:12:70:5a:70:d3:5d:6c:02:e1:11:89:
a3:75:a7:68:e6:bc:a4:5c:c1:30:28:b4:e7:11:92:67:64:25:
40:e8:bf:e7:45:2f:ee:90:1c:6f:a2:fb:1c:04:76:7d:fc:2a:
6f:92:a0:4b:9a:e2:57:42:6e:2b:b3:f9:32:a3:e2:bd:54:6e:
ae:53:f3:4e:0f:39:9c:e8:76:c9:75:ca:37:14:e2:d3:78:13:
40:d3:df:cf:be:d6:3f:c2:31:18:96:08:88:8f:45:40:88:7b:
9f:62:d8:6b:54:a5:75:84:a0:80:ea:32:95:ca:66:2b:dc:bf:
38:b8:80:12:70:99:1c:a1:3f:b7:dc:d9:bb:49:bf:6c:61:59:
14:b5:59:2a:77:af:0c:3f:e3:ab:a2:43:2a:04:42:71:66:12:
85:78:2c:d0:40:f9:d6:08:df:d9:22:cb:2b:7d:53:ca:5e:ab:
6a:44:84:c3:b2:f7:79:ae:28:e7:73:33:68:7d:e8:e8:0c:15:
f7:75:c6:42:fd:31:23:15:ee:bc:26:a2:ff:9a:b1:38:e0:ac:
be:8c:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:35 2024 by rpki-client on console-ams.rpki-client.org