Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8tCtp5zpP66RLVaurnd3CJhInM4.roa
File: 8tCtp5zpP66RLVaurnd3CJhInM4.roa (raw, json)
Hash identifier: aS5guENQUpb6+UcjXiSWq5yQ5k78WujUPkEyymNg5mY=
Subject key identifier: F2:D0:AD:A7:9C:E9:3F:AE:91:2D:56:AE:AE:77:77:08:98:48:9C:CE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018379F257E0171DC772DF09C9D7A2A2EA0A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8tCtp5zpP66RLVaurnd3CJhInM4.roa
Signing time: Mon 26 Sep 2022 13:17:48 +0000
ROA not before: Mon 26 Sep 2022 13:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
185.218.139.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:f2:57:e0:17:1d:c7:72:df:09:c9:d7:a2:a2:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 26 13:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2d0ada79ce93fae912d56aeae77770898489cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:e9:2e:47:33:89:44:d2:3d:ab:42:e3:f4:
58:d9:03:da:ca:7d:c7:2c:46:34:e9:6b:cf:65:88:
07:0f:e8:26:d7:39:08:a8:d3:ad:59:bd:ea:88:d0:
c9:42:e7:41:1e:2f:de:8d:4a:82:65:df:1a:2c:9c:
7f:22:4e:8d:93:91:1a:50:1c:ad:5c:2b:13:17:b7:
97:5a:fa:15:77:bf:72:00:81:31:30:af:af:4a:8e:
7e:83:af:6b:56:7d:48:99:00:7b:1e:b8:a2:da:05:
71:8d:7e:c0:ff:c3:8b:f6:63:32:7a:4d:5a:be:12:
0f:a7:a6:9c:16:94:e5:b9:3d:3e:f2:43:01:a7:e8:
d9:45:20:a8:62:6e:10:f0:32:b9:eb:64:4b:ed:a1:
51:d0:92:e8:03:a9:c9:99:0b:99:55:8a:b8:b1:64:
e2:c6:bd:19:fb:70:8d:1b:88:d8:88:10:24:b9:80:
2c:aa:6b:c6:8d:d1:b9:df:3f:6f:c1:eb:41:3b:4e:
a5:8a:4c:fe:0e:ad:37:3b:dd:3c:74:8d:c3:c0:e2:
01:9a:f6:82:4f:2c:b1:db:eb:25:fb:20:a5:e5:05:
23:46:4a:08:e0:6f:6a:3d:27:d1:24:ef:19:d6:ba:
26:c4:4c:14:c1:1a:de:b4:56:aa:b6:00:8a:6b:23:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D0:AD:A7:9C:E9:3F:AE:91:2D:56:AE:AE:77:77:08:98:48:9C:CE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8tCtp5zpP66RLVaurnd3CJhInM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
164.40.185.0/24
185.218.137.0/24
185.218.139.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:2e:f1:e7:f4:ad:7d:02:83:c1:f4:b8:ee:c6:89:28:36:23:
e9:e4:a9:20:e4:0f:57:9e:2a:44:62:e8:ce:c7:96:f3:78:6c:
09:d5:f2:b6:03:4f:ff:95:fb:4c:32:8d:a5:1a:66:13:91:a1:
82:8e:fc:16:24:4e:46:b8:9d:65:2f:22:9b:2d:08:d5:88:74:
0f:dc:8f:eb:bb:f8:ac:f0:b0:eb:e2:a8:72:b4:d4:ac:30:ef:
bd:6c:5c:1c:c2:f6:d7:89:64:a6:bc:79:4c:5a:db:32:fa:ed:
56:9f:02:39:56:30:26:2d:19:62:2e:98:53:d0:5f:38:f9:6f:
d7:d0:e8:b9:6a:b6:c0:4e:3f:d5:74:0c:1d:3c:55:7f:f4:d4:
96:7d:e7:da:da:bd:c3:92:2e:6e:ec:54:43:b4:99:7d:a0:7e:
a1:e4:9e:7e:fe:d2:d7:95:71:b6:22:71:9d:38:ca:c0:e0:9c:
2f:65:9c:1d:6a:4f:a8:de:69:a0:86:3a:ee:4b:9f:0b:03:b9:
07:5b:3c:b0:37:e1:00:95:7a:f5:a9:7e:7d:e5:28:3c:5e:15:
3e:a2:0e:ff:9c:68:c9:e1:f7:12:8a:f0:06:d4:fe:d9:8b:53:
ec:8f:98:46:f5:18:64:f0:ea:cb:3a:1d:33:be:4e:60:e0:1a:
29:9f:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org