Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Kc3d6wVj1KRq78-pdxmLM9xhOsg.roa
File: Kc3d6wVj1KRq78-pdxmLM9xhOsg.roa (raw, json)
Hash identifier: Fwv/zi7Y3Jahkq2CyY4Ko4zGSXQxBtLGX91Y234IZEg=
Subject key identifier: 29:CD:DD:EB:05:63:D4:A4:6A:EF:CF:A9:77:19:8B:33:DC:61:3A:C8
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 08753547
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Kc3d6wVj1KRq78-pdxmLM9xhOsg.roa
Signing time: Wed 09 Mar 2022 00:32:57 +0000
ROA not before: Wed 09 Mar 2022 00:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62075
IP address blocks: 82.115.216.0/24 maxlen: 24
45.140.210.0/23 maxlen: 24
2a0e:c6c0::/32 maxlen: 32
2a0d:2d42::/32 maxlen: 32
2001:67c:18d4::/48 maxlen: 48
2a0d:2d45::/32 maxlen: 32
2a0d:2d44::/32 maxlen: 32
2a0d:2d43::/32 maxlen: 32
2a0d:2d40::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141899079 (0x8753547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Mar 9 00:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29cdddeb0563d4a46aefcfa977198b33dc613ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:11:ba:2e:7b:c1:cb:c9:f2:52:71:34:3b:
48:47:5c:52:47:e3:e4:37:92:63:1c:46:1a:de:29:
2e:3b:f3:21:86:fa:98:68:2d:bf:7e:38:44:8f:75:
6a:fb:1c:10:93:a8:65:3f:f1:b1:85:82:35:1f:5b:
ac:7d:29:40:f4:78:85:ad:84:5d:20:65:85:a0:15:
b7:f7:e1:3d:04:da:a9:41:d0:5d:13:87:c2:c2:38:
d7:10:48:cc:97:62:9f:61:e7:5b:4e:c0:b7:9a:96:
91:87:27:0d:4f:2e:f0:73:e6:d6:4f:0e:08:65:93:
6c:3a:50:82:c9:f2:4c:71:d5:9c:e8:3f:5c:e3:5e:
64:ef:0b:41:42:44:a5:00:b2:51:b0:10:ce:a5:68:
f3:75:da:c3:00:3c:60:e7:8c:b9:e2:2d:57:53:98:
3e:45:64:87:ec:65:95:f2:c6:57:db:b0:9d:43:04:
5d:9f:fb:89:a5:0c:31:53:51:3f:07:e9:72:44:15:
4a:c8:a0:c5:40:8f:6d:37:19:25:44:75:9b:19:32:
8b:ab:a9:5d:ab:ae:1f:77:09:c8:77:21:ae:b0:45:
24:de:08:fc:46:fa:6a:18:4a:5a:c4:c1:8a:4e:ad:
e0:da:65:20:d1:50:0a:4a:b7:71:b2:2b:55:71:0f:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CD:DD:EB:05:63:D4:A4:6A:EF:CF:A9:77:19:8B:33:DC:61:3A:C8
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Kc3d6wVj1KRq78-pdxmLM9xhOsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/23
82.115.216.0/24
IPv6:
2001:67c:18d4::/48
2a0d:2d40::/32
2a0d:2d42::-2a0d:2d45:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
93:fd:f6:2d:ee:6f:bf:07:52:40:ef:61:f7:6d:06:ab:2a:f7:
c8:93:4c:d7:db:c0:d2:29:ae:0b:64:b6:99:15:78:1d:f4:9c:
6b:95:aa:73:49:a4:d5:e0:34:0c:9d:a4:4e:42:40:b0:af:8c:
09:14:f3:8d:c3:19:0d:de:7b:5e:db:c6:19:a4:a0:01:8c:67:
cf:5a:56:aa:7a:48:8c:3e:7a:4b:17:2f:fa:f5:ec:84:a4:fe:
34:a3:38:cd:b7:d2:e1:f3:bc:f6:87:61:b8:87:ca:c2:c1:80:
51:d0:fe:5f:51:6c:7d:17:41:7f:f2:4a:47:fd:0c:22:76:12:
3e:8f:f3:c9:94:d9:15:3a:2b:0f:f8:49:4f:33:4b:dc:29:f3:
c6:90:9a:39:22:1d:ae:28:43:6e:93:eb:a9:a5:a3:1e:8f:4a:
fb:06:cd:74:32:65:2b:00:58:47:84:7b:fd:f0:6c:f7:b8:f2:
63:2e:6b:0d:2a:ad:6a:65:0e:54:31:0a:df:87:09:6b:5d:4e:
97:a8:84:e3:bc:e5:bd:1d:dc:d4:a3:4f:79:39:3a:27:8c:fd:
c6:88:34:6d:f8:68:31:3d:40:0f:54:e2:a0:e6:b5:a1:fc:21:
83:5a:15:7b:ba:4e:14:2b:af:7e:5d:8a:cb:4d:0a:e1:1c:61:
63:00:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:56 2024 by rpki-client on console-ams.rpki-client.org