Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa
File: bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa (raw, json)
Hash identifier: MlN/gB2cuFhrPI8UoDRFI43SOOD1RGMIRqVHLNH5CKI=
Subject key identifier: 6C:01:24:EE:01:3D:79:84:4B:81:A1:91:D4:82:22:87:2F:9A:ED:7A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EC06D20
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa
Signing time: Mon 30 May 2022 14:08:14 +0000
ROA not before: Mon 30 May 2022 14:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 193.58.120.0/22 maxlen: 24
82.115.208.0/22 maxlen: 24
193.42.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 515927328 (0x1ec06d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 14:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c0124ee013d79844b81a191d48222872f9aed7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:3b:9d:17:35:bb:3f:80:a3:c0:ed:12:85:
e7:c4:a1:d9:62:26:6a:22:6d:5f:50:0e:de:3e:4d:
94:4b:b1:a4:01:9c:84:af:7a:46:7c:c0:09:78:aa:
1d:7a:ab:e6:c3:86:0f:a5:35:1b:9a:c0:0a:c8:ae:
4a:57:98:4a:7b:69:32:ae:84:7c:3a:9a:86:63:ba:
b5:0d:cd:20:12:73:33:79:13:e7:e6:58:5f:11:a0:
b0:53:2e:5d:46:f0:3d:29:4d:09:2d:98:72:b3:c9:
a0:0e:ce:97:dc:12:ae:37:11:4f:cb:c5:20:c1:6f:
53:3e:1b:ed:d6:1d:31:3d:af:eb:aa:7f:52:9c:94:
6b:86:30:aa:66:0e:1b:16:58:74:2b:3b:fb:41:c1:
fe:c1:11:9a:c5:5e:79:74:2a:96:e3:a4:7d:d4:36:
98:0d:14:bf:6d:f8:13:02:7d:13:75:0e:05:66:8d:
fb:c8:ce:75:b0:bb:2b:93:dc:40:e5:94:79:d4:1c:
49:e4:4c:61:92:36:ac:c9:3c:6c:64:df:9b:65:af:
9e:a4:04:22:2a:f7:bf:a6:c9:3d:66:c4:77:ab:0e:
8b:c4:d4:f3:7f:5f:31:84:9f:9d:a7:b4:b6:35:e0:
19:bf:bd:9b:52:b9:2d:c4:fa:b7:c6:16:c9:bb:de:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:24:EE:01:3D:79:84:4B:81:A1:91:D4:82:22:87:2F:9A:ED:7A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bAEk7gE9eYRLgaGR1IIihy-a7Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.208.0/22
193.42.32.0/22
193.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:3a:3c:1b:cb:f8:e6:80:88:f0:3a:e0:0e:48:1d:cc:e7:3b:
37:ca:51:3a:72:30:c0:25:eb:35:18:2b:f5:89:20:86:f2:dd:
f0:cb:b3:48:77:c2:8d:b9:b4:53:55:b4:1e:b0:3e:14:9f:8b:
ab:0e:8f:f0:30:72:cf:c5:4a:2f:03:01:11:76:91:fc:61:aa:
e3:06:d6:58:1c:dd:8a:a8:69:cf:b8:09:45:0a:2f:a1:c4:6e:
2e:f0:95:d1:59:f0:3b:fa:0d:43:ed:5f:2a:9c:9a:99:1f:32:
9b:49:93:73:c6:6b:15:8f:60:8d:1f:d1:4e:42:b0:c0:73:96:
9c:22:bf:f9:59:6c:2c:1a:60:12:3a:cf:46:f5:a5:d8:32:70:
89:b0:cd:2e:a4:21:c8:4a:c2:d9:d7:da:85:8e:29:93:d8:17:
fa:05:0f:27:4c:5a:fc:f1:90:1a:0c:fc:d1:5c:dc:99:c1:62:
b8:44:fd:ee:1b:38:0d:8c:78:b7:33:e0:51:a1:d5:8b:b4:3b:
03:95:9e:7b:14:81:6c:9e:5b:e2:87:e5:62:7a:3b:a4:39:f0:
ac:8a:9f:87:1d:0e:48:34:84:39:41:91:1d:cc:6e:88:9f:fe:
21:a3:6d:b5:2c:d0:23:46:6e:69:a3:3b:b1:a6:8d:be:65:8d:
44:af:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org