Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RA0zHUUha_mM5si7rpNedVzGS8c.roa
File: RA0zHUUha_mM5si7rpNedVzGS8c.roa (raw, json)
Hash identifier: Bna2Tz0DAu80KnrMKYlO+whMOh61Rm7JbEzU5FgCoZM=
Subject key identifier: 44:0D:33:1D:45:21:6B:F9:8C:E6:C8:BB:AE:93:5E:75:5C:C6:4B:C7
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183287DF1FB229C8A1C82239883BE386EF9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RA0zHUUha_mM5si7rpNedVzGS8c.roa
Signing time: Sat 10 Sep 2022 17:41:26 +0000
ROA not before: Sat 10 Sep 2022 17:41:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 212.87.212.0/22 maxlen: 22
2.58.196.0/22 maxlen: 22
2.58.200.0/22 maxlen: 22
2.56.246.0/23 maxlen: 23
147.78.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:28:7d:f1:fb:22:9c:8a:1c:82:23:98:83:be:38:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 10 17:41:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=440d331d45216bf98ce6c8bbae935e755cc64bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:82:17:fb:d5:3b:07:62:2a:0c:da:e8:89:
f7:d0:df:72:76:da:9e:fb:1d:2a:2d:84:24:1a:e6:
48:79:71:5d:43:f0:9e:ce:81:7e:f3:cc:27:7e:86:
78:9b:9a:5e:88:dc:70:97:e3:b0:b2:76:dc:6f:d9:
62:7f:a7:f2:d6:2f:21:0e:4b:fa:da:1a:40:78:e8:
03:93:64:7e:4a:66:fd:9a:61:c8:ec:b5:ca:b4:bb:
eb:64:65:dd:b7:95:ce:a6:73:8f:f3:30:da:ac:a9:
fd:57:31:c8:12:af:10:b2:90:ab:4f:20:7f:4b:6a:
0f:a2:ba:73:a3:73:21:76:3f:1b:19:5f:a5:7e:39:
ab:9e:b0:a4:3c:b6:61:da:33:9a:09:bc:41:62:96:
5b:b4:c6:a0:91:f0:05:2a:24:cf:56:b3:c6:58:38:
7b:ab:bd:e7:77:cb:6b:33:66:7a:ca:de:76:e6:63:
ed:d0:50:af:5e:38:1d:c9:dc:e9:1b:09:aa:77:b4:
f1:75:7c:9e:4d:61:9f:08:23:cb:d8:df:69:7b:22:
2b:2c:89:25:20:83:9b:0f:21:8c:ee:91:6a:9d:a4:
96:f7:01:36:5a:57:6c:4d:17:4c:f0:47:a0:d3:98:
82:62:85:99:8a:ff:29:2a:3f:54:09:d1:91:f1:c1:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0D:33:1D:45:21:6B:F9:8C:E6:C8:BB:AE:93:5E:75:5C:C6:4B:C7
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/RA0zHUUha_mM5si7rpNedVzGS8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/23
2.58.196.0-2.58.203.255
147.78.124.0/22
212.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:7f:1f:21:7b:84:e8:7c:6e:82:7c:17:13:93:f2:6b:9a:68:
1f:68:2e:90:0b:56:29:ff:43:95:a5:77:af:8f:2b:4b:57:17:
59:56:0f:e2:01:8d:8c:3c:52:89:98:1c:15:dd:8f:64:4b:24:
1f:48:29:7b:38:ff:14:04:02:3a:a2:21:37:d5:a3:d9:8e:1b:
e7:40:25:f9:95:22:da:60:16:72:91:e5:2a:17:19:d4:10:2f:
e6:72:ca:f6:e5:0c:55:ca:ea:c5:b3:18:3d:ed:b6:92:99:ee:
ed:b0:21:38:36:b2:17:23:3e:b3:df:07:be:df:7c:90:54:b5:
eb:ec:bc:27:81:1a:be:7e:8e:27:44:85:1c:3b:bd:92:ff:24:
ca:e5:04:aa:44:d8:ab:21:b4:89:99:c5:b3:1e:97:d4:69:cb:
93:8f:2e:e8:b2:28:0c:0d:72:bf:43:58:7b:a2:bb:8c:41:a9:
a7:51:9c:7f:f6:85:3a:6f:79:fa:9c:28:78:9a:70:ee:96:3f:
63:96:7a:c7:eb:0b:96:ed:79:04:c6:80:a5:33:0c:b3:54:e3:
f1:e3:16:72:d7:c6:df:7a:bd:50:15:85:fe:04:4f:fe:77:01:
e9:e6:d7:58:51:c0:85:87:19:1f:a8:65:bf:a6:e9:28:fa:66:
56:79:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org