Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/tSe380MAFZYVYSnhgctTMD6ip9U.roa
File: tSe380MAFZYVYSnhgctTMD6ip9U.roa (raw, json)
Hash identifier: bpQzbfnm4IY+MB0gMxABgXZtrB0+vmrFmxpT5e5CDE0=
Subject key identifier: B5:27:B7:F3:43:00:15:96:15:61:29:E1:81:CB:53:30:3E:A2:A7:D5
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 07B476EF
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/tSe380MAFZYVYSnhgctTMD6ip9U.roa
Signing time: Sat 01 Jan 2022 08:59:45 +0000
ROA not before: Sat 01 Jan 2022 08:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208277
IP address blocks: 176.221.32.0/21 maxlen: 32
185.99.232.0/22 maxlen: 32
2a03:9c80:8000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129267439 (0x7b476ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: Jan 1 08:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b527b7f343001596156129e181cb53303ea2a7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:7a:62:56:7c:7b:64:15:e6:ce:68:bb:68:
07:09:4e:a4:1b:84:11:10:c6:62:d7:f9:10:8a:4f:
07:0e:37:d0:69:eb:f8:9c:c5:f8:89:96:93:3d:15:
b7:f5:d1:14:4f:98:d4:70:17:03:63:1c:de:62:e7:
05:63:a0:e9:14:c6:3f:46:7d:f7:5c:3e:7d:a9:22:
6a:b3:d8:68:da:55:07:8e:fe:f8:f7:d5:ba:e5:87:
f8:bb:24:31:89:79:ef:5e:9c:7c:20:a8:45:a3:fe:
9c:de:97:81:01:a9:df:9c:33:b6:b2:2c:7f:fe:81:
b2:6a:19:d9:49:54:27:f0:de:7a:3a:8c:1c:54:ac:
5c:24:23:d4:0f:78:cb:ef:ab:d9:15:1b:21:f6:7d:
3e:06:c2:e2:4d:aa:a8:2f:77:1e:77:69:33:ab:8b:
4d:50:ae:a4:74:d2:b7:07:21:66:28:07:b1:4b:53:
bc:ca:1a:e8:65:fb:b6:d9:e0:47:61:7f:85:74:7f:
2d:3a:f1:0a:b5:1a:3b:af:fd:16:7a:33:b5:2a:79:
2e:13:f2:d8:ff:b8:11:14:80:4b:57:6e:5f:28:4e:
c7:c1:d7:63:7d:93:06:8a:39:b1:60:a8:54:15:ba:
41:30:ad:5b:2a:ea:d0:e3:2a:ed:d2:56:f7:36:cb:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:27:B7:F3:43:00:15:96:15:61:29:E1:81:CB:53:30:3E:A2:A7:D5
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/tSe380MAFZYVYSnhgctTMD6ip9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.32.0/21
185.99.232.0/22
IPv6:
2a03:9c80:8000::/34
Signature Algorithm: sha256WithRSAEncryption
5b:06:cc:34:53:c4:74:c3:39:8c:9e:95:f9:6f:9f:7f:60:46:
66:9a:2a:67:a2:7b:f0:b7:1b:36:54:d8:c1:08:aa:a7:d1:5c:
01:49:a0:8a:69:5f:8e:69:90:a6:c6:ce:cc:2e:b8:59:cf:8b:
c5:fe:e2:7d:42:75:9a:c9:5a:93:35:a2:90:68:d6:c3:27:f7:
a7:4a:ff:4a:30:22:84:fc:a3:95:9b:29:87:5f:45:d6:09:36:
5d:32:23:ae:30:89:82:13:f5:c0:9d:0c:6f:d0:46:0a:e2:f4:
73:8a:bc:19:d3:61:3a:e7:b9:03:4d:41:36:65:ef:b4:70:6a:
80:78:7b:85:8e:b6:d8:9a:9f:e3:f7:4c:c4:c5:56:6f:ff:11:
2d:bc:94:3a:61:9a:ba:6b:a9:9b:23:59:67:2f:dd:8a:aa:a3:
63:0f:b9:25:02:35:ec:b7:10:ec:f7:6d:fc:92:af:ba:2f:15:
69:03:4b:6f:8d:40:44:98:d7:60:4d:10:ec:08:64:f5:f5:a0:
50:02:b7:9a:64:00:d3:ab:99:5d:e3:d4:ed:ac:90:87:8e:eb:
68:8d:f5:ec:ba:08:f6:ef:10:ce:b1:8b:97:41:49:41:31:0e:
33:d0:2b:16:5e:2f:9d:aa:1f:d5:b1:f2:da:fd:ea:1e:8d:fc:
99:f0:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org