Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ADuE2Rb_Rr_Z7FAEpH5y2ILjm_g.roa
File: ADuE2Rb_Rr_Z7FAEpH5y2ILjm_g.roa (raw, json)
Hash identifier: To32kLWKr05dfOGkBSbFWhfTtqgvkAxa4wyH3xjTSDQ=
Subject key identifier: 00:3B:84:D9:16:FF:46:BF:D9:EC:50:04:A4:7E:72:D8:82:E3:9B:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182CE8F0C3B38B4D1E0B8FFFA8A707C89D7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ADuE2Rb_Rr_Z7FAEpH5y2ILjm_g.roa
Signing time: Wed 24 Aug 2022 06:34:17 +0000
ROA not before: Wed 24 Aug 2022 06:34:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 83.219.96.0/24 maxlen: 24
193.37.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:8f:0c:3b:38:b4:d1:e0:b8:ff:fa:8a:70:7c:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 06:34:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003b84d916ff46bfd9ec5004a47e72d882e39bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:22:a1:87:6b:f4:71:3a:27:d5:5e:97:3b:
2f:d7:49:3d:f3:b9:96:c1:44:ae:c5:9e:9e:84:12:
fa:ff:f8:57:f4:f3:93:b6:79:66:69:92:2e:d7:ea:
f8:ee:03:37:10:c8:a3:af:2a:58:b5:e9:09:6f:a6:
93:ab:f9:82:ff:c7:7c:e3:75:e4:dd:2f:0c:66:05:
04:36:4c:82:14:e3:1c:fd:cb:ce:e1:8b:98:34:3e:
b1:54:11:78:ff:88:be:a1:01:f2:4c:51:5a:db:8e:
4f:91:52:6e:95:98:1f:fe:d5:45:c0:8b:f1:fb:29:
89:58:b5:11:9a:a8:06:7d:9c:ba:9e:6f:e9:79:58:
d5:9c:c4:18:74:c9:f7:0a:6d:76:e6:10:ac:60:8c:
43:8e:14:18:ae:53:e4:da:44:22:d7:80:4d:40:41:
ca:d1:6d:e0:d9:88:b0:c9:f8:33:60:f3:67:53:34:
07:9e:ba:7c:b9:21:a4:19:c8:58:e4:f1:d1:d9:9a:
f7:94:85:12:b4:bd:97:f1:bb:01:44:22:66:fe:a7:
50:f2:95:0d:1e:83:9d:ac:ba:80:c7:a0:60:71:18:
ba:b6:c5:6a:97:c3:36:5a:e7:d9:e3:4d:1f:b2:20:
ed:ff:9d:b3:76:37:62:30:c6:48:95:22:c2:42:40:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:84:D9:16:FF:46:BF:D9:EC:50:04:A4:7E:72:D8:82:E3:9B:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ADuE2Rb_Rr_Z7FAEpH5y2ILjm_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
193.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d9:fd:46:ee:d1:d6:d4:40:d7:64:56:da:11:fc:16:0b:6d:
2c:33:22:35:26:93:1e:48:70:e6:22:cd:0c:d8:fb:e2:4f:e3:
74:fb:da:72:91:90:c4:e9:34:60:5c:54:ca:92:4e:f8:48:a0:
2f:f5:75:a9:f8:a9:d6:40:d8:3f:46:22:50:92:24:26:c4:8c:
1b:1c:63:19:ee:ae:dc:4e:12:e6:0e:3b:bd:9a:43:39:bc:22:
5a:94:0b:62:21:a6:62:2f:a6:9c:e4:78:ed:9b:cd:24:fd:25:
13:66:9d:f0:50:c3:c1:d0:df:6d:b1:cc:e0:d8:36:ac:60:b9:
ac:3b:c6:e5:0b:8a:b0:a8:d5:46:e7:bc:93:ad:41:1b:cc:68:
20:ae:23:dc:3d:7c:ea:12:e9:41:7c:4b:24:ad:e2:6b:ed:cf:
d9:94:92:1c:25:7d:10:a2:f6:c9:78:95:7b:8c:dd:76:f1:c8:
49:a0:dd:bc:4b:6b:43:aa:94:ac:8c:a4:d3:a8:53:73:d2:2d:
fe:3a:c9:9c:9a:e2:6a:95:aa:45:d2:29:ac:1e:df:6b:7e:27:
8b:54:e3:5c:05:1f:29:dd:52:7b:20:20:59:ed:20:3d:c0:40:
11:d5:7e:b2:ef:ef:f4:f4:71:c0:4f:4a:e1:63:0f:60:9e:82:
18:7b:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org