Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CjPD2uzOvqJKjUgB4G8aQ99a0e0.roa
File: CjPD2uzOvqJKjUgB4G8aQ99a0e0.roa (raw, json)
Hash identifier: p/hNmAbdvgtc+gfNfSqcF288xLBze6vpLVLsGXW0o8w=
Subject key identifier: 0A:33:C3:DA:EC:CE:BE:A2:4A:8D:48:01:E0:6F:1A:43:DF:5A:D1:ED
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 07DDFCC5
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CjPD2uzOvqJKjUgB4G8aQ99a0e0.roa
Signing time: Sat 01 Jan 2022 15:02:34 +0000
ROA not before: Sat 01 Jan 2022 15:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.115.217.0/24 maxlen: 24
82.115.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131988677 (0x7ddfcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 1 15:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a33c3daeccebea24a8d4801e06f1a43df5ad1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:01:88:c7:b5:49:b1:d3:a5:7f:7d:94:ca:
4e:2b:de:40:32:39:d3:1d:3e:d7:b3:62:de:04:c9:
4c:0f:36:67:fb:e4:d9:f6:68:24:d1:9a:ec:aa:07:
d4:7c:2c:a9:8e:e1:44:6a:eb:d2:87:02:21:dd:ec:
3a:96:a5:e9:2b:bc:b5:7d:34:12:0b:eb:2f:52:6d:
2c:4f:e7:30:f3:bf:fb:9a:16:23:d0:6f:e8:30:71:
b1:66:12:a3:eb:da:b0:4c:8b:c9:42:ca:a0:fd:25:
78:7d:8b:bd:8a:39:d3:5c:33:f0:0a:bb:8c:f7:93:
e6:05:42:a7:0a:f9:7c:6c:3d:cb:42:f2:95:b0:60:
30:60:b1:45:6b:21:fe:35:eb:26:62:71:bc:5e:b4:
1b:27:32:59:92:51:c9:86:52:0f:50:ec:67:53:21:
18:8d:a9:9f:55:2e:8c:a0:59:56:29:ee:76:84:85:
61:53:ea:e9:cc:52:ae:ef:3b:d7:34:a2:5c:93:ca:
ef:2d:d4:ac:0f:c7:2c:00:40:5f:cd:6b:d3:4f:e7:
d5:29:4b:50:6a:51:3e:35:1e:11:a4:6f:2e:34:73:
63:02:87:ec:9d:d2:f7:6a:6d:78:7b:1f:f7:41:14:
a9:b7:f2:da:c0:c0:69:b0:62:3e:12:11:5a:6d:ba:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:C3:DA:EC:CE:BE:A2:4A:8D:48:01:E0:6F:1A:43:DF:5A:D1:ED
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/CjPD2uzOvqJKjUgB4G8aQ99a0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
82.115.219.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cb:11:c2:aa:bd:2d:6a:9c:63:7c:ae:77:bf:0b:f2:71:12:
f6:a0:79:ae:c7:19:a7:b8:f9:14:02:47:61:92:54:ae:6e:2f:
2a:3a:ec:68:8e:71:ae:2d:99:87:42:6b:0a:f3:29:d1:bc:43:
ff:f1:a3:46:24:fe:0a:d3:3f:78:3a:4c:90:d4:76:1d:e7:fb:
69:d4:be:b1:af:83:4a:7f:2d:fe:6d:4a:9a:b8:1d:e5:ba:6f:
72:08:7a:19:ba:5b:d0:0d:d0:33:ba:ec:5f:63:c8:22:87:fe:
50:4f:22:50:93:fc:ab:ab:6c:a8:cf:aa:36:ea:0b:6f:7c:68:
ac:cc:fc:99:7d:43:a9:53:45:d6:44:29:2e:31:64:3c:e6:d0:
fa:85:23:8e:dd:6f:7d:ce:79:db:49:1e:a8:4d:96:cd:ee:6a:
b3:ff:41:29:41:98:e0:f8:ab:ee:49:53:a2:e6:d3:45:55:18:
5c:e7:01:62:5b:b2:12:c5:a0:17:b6:56:fb:43:d7:1d:78:8d:
98:f9:08:ab:ef:15:68:6b:f3:23:f6:a9:95:37:2a:81:b8:16:
91:87:1f:09:85:66:5a:7d:b9:10:04:c4:9d:09:83:17:5e:1f:
ee:2a:9d:d4:de:a2:83:6b:d3:26:89:c5:3a:f1:55:54:6c:b1:
69:b6:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:56 2024 by rpki-client on console-ams.rpki-client.org