Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/aApeDov2WnwU9BUzSukLT4TqhME.roa
File: aApeDov2WnwU9BUzSukLT4TqhME.roa (raw, json)
Hash identifier: 1eiLuLq6hqA/rP6lpLpegqNu9Kzs/YZZulO2eMF4hL4=
Subject key identifier: 68:0A:5E:0E:8B:F6:5A:7C:14:F4:15:33:4A:E9:0B:4F:84:EA:84:C1
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 018308A6F6BBA163EAD6132E5DA7EB313F44
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/aApeDov2WnwU9BUzSukLT4TqhME.roa
Signing time: Sun 04 Sep 2022 13:18:23 +0000
ROA not before: Sun 04 Sep 2022 13:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 185.83.147.0/24 maxlen: 24
185.83.146.0/24 maxlen: 24
185.83.144.0/24 maxlen: 24
185.83.145.0/24 maxlen: 24
185.174.30.0/24 maxlen: 24
185.174.29.0/24 maxlen: 24
185.174.28.0/24 maxlen: 24
2a0b:8100:9::/48 maxlen: 48
2a0b:8100:4::/48 maxlen: 48
2a0b:8100:f::/48 maxlen: 48
2a0b:8100:a::/48 maxlen: 48
2a0b:8100:d::/48 maxlen: 48
2a0b:8100:8::/48 maxlen: 48
2a0b:8100:3::/48 maxlen: 48
2a0b:8100:e::/48 maxlen: 48
2a0b:8100:1::/48 maxlen: 48
2a0b:8100:c::/48 maxlen: 48
2a0b:8100:7::/48 maxlen: 48
2a0b:8100::/29 maxlen: 29
2a0b:8100:2::/48 maxlen: 48
2a0b:8100:5::/48 maxlen: 48
2a0b:8100::/48 maxlen: 48
2a0b:8100:b::/48 maxlen: 48
2a0b:8100:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:a6:f6:bb:a1:63:ea:d6:13:2e:5d:a7:eb:31:3f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Sep 4 13:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=680a5e0e8bf65a7c14f415334ae90b4f84ea84c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:6f:d4:70:c9:45:31:bc:78:30:7b:e9:95:
e5:26:06:35:38:1e:22:e6:5b:98:38:8b:b5:6f:e7:
71:76:ec:f8:84:3b:9a:9b:43:34:35:cb:c9:96:6c:
d9:7c:2d:24:e3:e5:73:0a:0f:32:0f:c0:89:d5:4c:
85:9f:82:c7:86:28:58:3f:84:0a:3e:e0:db:c0:be:
44:bc:fb:b3:0e:2a:a9:51:1c:e6:e0:08:83:53:a3:
bd:d6:bf:24:84:75:35:0d:d9:51:d9:1c:16:3b:c2:
10:36:96:02:65:f0:3f:87:bf:8e:d3:54:25:07:e1:
11:45:73:e8:7c:f2:22:e9:a3:23:46:60:c1:ee:80:
00:1f:89:65:26:54:5e:ba:69:50:b3:0d:9a:c2:fb:
be:52:8f:6d:54:77:e1:8d:3e:ad:4b:99:17:53:3e:
42:16:17:fd:06:81:34:f8:ae:3a:46:8f:bb:66:3b:
ab:bc:50:57:7e:21:86:17:e5:f3:7f:1b:d9:a9:5b:
50:7b:8e:0c:68:7a:f0:44:69:c3:ff:9d:59:34:e3:
8b:ef:c9:f6:69:4b:f9:ac:c8:18:60:e8:ed:a8:af:
34:3f:3c:fa:fc:d7:82:79:94:0b:07:50:58:9c:35:
4f:88:4a:e7:b3:6b:0f:bf:05:28:64:85:0b:56:1f:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:5E:0E:8B:F6:5A:7C:14:F4:15:33:4A:E9:0B:4F:84:EA:84:C1
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/aApeDov2WnwU9BUzSukLT4TqhME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.144.0/22
185.174.28.0-185.174.30.255
IPv6:
2a0b:8100::/29
Signature Algorithm: sha256WithRSAEncryption
76:ef:b0:e6:aa:ec:4d:cf:b4:c9:05:1d:c6:d4:62:7b:95:0b:
1d:9c:fc:1a:f5:76:ab:51:03:12:29:f1:e2:ee:24:ac:a2:a6:
ff:8e:db:aa:96:55:0e:70:c8:b9:e6:dc:6a:ce:60:02:a7:54:
bd:aa:19:bb:dc:aa:14:05:03:cb:27:cc:13:26:d9:fe:3c:8d:
e5:1d:2e:b4:b4:98:58:9c:c1:92:e0:e2:a3:3d:ce:ea:12:b2:
98:ec:78:71:64:2e:76:4e:e8:bc:41:37:f9:fd:58:b6:58:33:
be:c1:0c:6a:99:9c:04:e5:6f:e2:15:ba:cd:2c:e0:8d:63:d3:
7e:76:41:10:04:be:df:2a:cc:83:6b:b0:e6:4c:d8:d3:b3:31:
8b:08:3c:92:63:50:82:80:4a:ce:92:4a:14:ba:0c:33:41:1c:
7f:a1:2e:71:32:c2:fe:06:4d:e7:f3:5e:cf:d3:98:99:f7:04:
fd:c3:5a:50:ce:c6:c1:7f:3d:98:e1:23:bb:aa:f1:b9:39:ad:
92:70:7a:a3:71:9c:4f:5d:c6:8c:20:02:d6:79:1e:c5:a4:52:
57:7f:b6:9b:15:44:77:8f:e2:ff:ef:e1:88:ce:0a:6b:28:d8:
95:41:42:3b:c2:a9:d8:f8:b3:38:f1:c0:d6:2a:f6:28:a5:74:
ee:7b:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org