Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a7bz3akC5SXnPfIC8rBTuQ-QrXQ.roa
File: a7bz3akC5SXnPfIC8rBTuQ-QrXQ.roa (raw, json)
Hash identifier: IYgo2utEt2i5Li1sy5yS8FwjTxiB5ftYWeX7Oci5yp0=
Subject key identifier: 6B:B6:F3:DD:A9:02:E5:25:E7:3D:F2:02:F2:B0:53:B9:0F:90:AD:74
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018456D398ED867D61A313CB248B4FF6EB39
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a7bz3akC5SXnPfIC8rBTuQ-QrXQ.roa
Signing time: Tue 08 Nov 2022 10:40:18 +0000
ROA not before: Tue 08 Nov 2022 10:40:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.94.168.0/22 maxlen: 24
195.211.188.0/22 maxlen: 24
2.56.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:d3:98:ed:86:7d:61:a3:13:cb:24:8b:4f:f6:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 8 10:40:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bb6f3dda902e525e73df202f2b053b90f90ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:4d:04:0c:e8:16:63:09:10:c8:62:8e:25:
dd:0f:cb:d5:e6:49:1d:ef:e7:f2:64:28:50:1e:59:
95:58:56:25:f9:ca:1c:8a:f2:fc:97:d8:3b:55:d3:
f5:be:fb:aa:5d:17:ee:9d:e0:8c:24:db:3b:d3:60:
da:06:6f:30:77:39:0a:c4:66:c6:37:5b:97:4b:08:
7d:4d:75:0c:4e:a1:ac:55:a2:0f:06:68:dc:30:91:
29:ab:2c:35:04:67:38:c2:1c:52:7f:74:61:d5:6e:
ca:70:9a:7d:20:03:b5:d6:ee:3f:e7:02:eb:b1:7c:
e0:3b:ff:b7:b2:3a:b9:a1:34:66:40:cf:79:b6:b1:
92:b5:f0:80:53:66:76:a7:af:05:6d:06:d7:1d:86:
f3:e2:e9:bc:cd:cf:fe:de:2b:4f:6c:66:cd:5c:da:
af:d0:34:42:72:b3:21:48:34:04:86:90:fa:47:0f:
03:15:10:ff:1c:f0:8e:6d:ff:1c:77:3a:32:9c:cf:
ac:69:fb:a7:a1:0a:b8:14:ea:15:8a:f7:2d:30:22:
9f:16:a8:9a:bd:17:79:91:7a:8a:62:2d:d7:49:e8:
dc:3d:e8:c7:4d:ec:84:a3:57:bc:11:68:72:34:9e:
10:34:2c:58:41:03:6f:29:90:fd:80:42:3d:8b:95:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B6:F3:DD:A9:02:E5:25:E7:3D:F2:02:F2:B0:53:B9:0F:90:AD:74
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a7bz3akC5SXnPfIC8rBTuQ-QrXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.94.168.0/22
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:79:b1:85:92:b2:c2:9d:35:8b:3b:47:c2:2e:55:a1:fe:9c:
c9:ad:cc:08:fb:f0:17:5c:20:0c:59:99:f4:23:c5:d9:92:33:
47:68:a1:5b:13:44:ec:84:56:84:08:6a:db:34:3c:ae:7b:58:
87:f8:c4:6b:b8:5e:40:3d:7e:e4:4a:2e:b7:20:c6:73:e2:6b:
c7:88:4d:4b:14:1a:46:b4:d2:67:7f:ea:9f:9a:84:8b:65:ce:
42:d7:81:2f:30:5a:f2:8b:6b:aa:0a:d2:5b:b1:7d:da:e8:dd:
26:6f:8a:ea:f0:e7:75:80:b3:66:98:60:51:87:20:0f:f2:06:
a5:96:72:1c:3e:31:1a:83:f9:a2:f3:50:4f:fa:55:4f:80:89:
64:dc:ca:04:9d:a5:11:01:58:a9:cd:5b:75:be:af:46:ea:91:
58:7b:65:ee:6b:56:17:ba:d0:c7:c6:75:d9:d3:57:bc:b0:53:
6f:57:8c:e6:07:1c:86:7e:8e:58:be:54:ec:b2:bd:a6:8d:de:
e7:3d:dc:76:c4:f1:7e:b2:12:23:a6:20:5e:d4:d1:bf:77:bc:
38:49:f7:c8:16:f9:59:45:38:3c:ae:23:a3:af:9c:8d:1f:1a:
38:f3:07:e3:c7:12:d1:fd:b6:ac:a9:f3:6f:33:6f:25:80:4f:
b3:9d:65:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org