Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/_i4VHBNbHt7c_jeDKIynNkKFewI.roa
File: _i4VHBNbHt7c_jeDKIynNkKFewI.roa (raw, json)
Hash identifier: lAiX8c5JLGMejkKnd0a2oc3v4f2YUZTWnQuO+5B8bQ4=
Subject key identifier: FE:2E:15:1C:13:5B:1E:DE:DC:FE:37:83:28:8C:A7:36:42:85:7B:02
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 01855D3F1878E31E127BFEABCE6B50E54D89
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/_i4VHBNbHt7c_jeDKIynNkKFewI.roa
Signing time: Thu 29 Dec 2022 09:38:14 +0000
ROA not before: Thu 29 Dec 2022 09:38:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:3f:18:78:e3:1e:12:7b:fe:ab:ce:6b:50:e5:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 29 09:38:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2e151c135b1ededcfe3783288ca73642857b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:a4:b1:3d:0d:79:54:df:61:a8:6f:84:1e:
72:04:0c:79:d2:e2:bc:36:f9:6b:d2:ea:46:2c:31:
8e:3c:b6:5c:07:35:7d:93:7d:1a:af:b2:cd:11:04:
25:00:ea:35:16:68:2b:4e:03:ec:cc:30:2e:9b:8d:
d9:c1:91:6a:9d:c4:6b:a7:b5:2b:09:44:e3:0a:2c:
6b:5f:86:04:4d:30:86:75:56:18:3b:4d:93:ab:72:
2c:48:f1:1b:33:b5:1e:ca:39:11:f9:5d:f9:0d:d3:
3b:64:49:1d:99:20:aa:9b:2b:a0:7a:3f:53:19:ea:
01:e2:32:e2:e2:b3:ec:06:93:0c:5c:a9:da:68:cd:
77:6e:8e:d4:65:17:32:5d:5f:ae:ce:22:cf:ad:09:
b2:60:00:6f:27:1f:67:62:64:1e:9f:ca:b0:65:42:
ce:93:f3:b1:1b:d0:21:43:8b:ac:08:4c:74:aa:48:
7c:95:3d:87:d6:7c:b4:60:c4:15:ca:dd:44:97:c5:
79:7e:96:6f:64:b0:41:51:f4:df:38:d0:be:2e:4c:
2d:ec:c6:2d:a2:f0:5f:4d:44:79:34:bf:50:1b:2c:
78:7e:9e:4a:87:38:1e:8d:4a:01:e4:90:9f:8b:a9:
b7:83:1c:15:b0:1c:f7:e9:0a:7b:c6:2b:a4:db:f1:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:15:1C:13:5B:1E:DE:DC:FE:37:83:28:8C:A7:36:42:85:7B:02
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/_i4VHBNbHt7c_jeDKIynNkKFewI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.211.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d6:a7:93:8f:a8:b7:91:f7:cb:e3:84:34:6b:42:7b:ee:f2:
15:0e:9f:aa:d8:6d:7f:2c:cf:a0:64:0a:25:74:3f:49:11:c2:
e3:1c:56:3c:5a:a4:1b:ec:ef:b7:68:86:b4:33:fa:dc:3f:f3:
ef:8a:28:83:85:33:de:44:d1:74:4e:75:65:4b:0b:df:a0:6b:
0a:83:99:02:4f:8d:5a:51:7a:b1:30:04:61:fc:78:3d:0d:1d:
9a:a3:96:ce:f4:0e:c8:68:a0:10:b1:6d:a7:2b:75:b0:df:fe:
72:31:88:40:0a:c0:b7:78:ec:40:5c:15:4c:63:65:6d:f2:ec:
76:9e:31:c3:40:7a:f9:75:c7:b6:2d:98:ae:58:ad:ff:84:1e:
fe:48:bd:be:d6:ad:68:9e:fe:af:13:db:78:d5:ce:4d:3c:bb:
fb:2a:46:bb:53:9e:2d:7a:9c:c7:20:0b:86:a1:7b:a6:a3:5a:
60:41:13:83:65:62:1a:e1:50:48:9e:55:48:f2:41:3f:d6:46:
cf:ae:ac:b7:02:bb:b0:5f:81:e1:49:3d:a0:43:df:d9:fd:5c:
30:1c:75:42:f9:40:00:93:a3:12:60:6a:e7:4f:06:0d:87:f4:
a5:95:2d:72:98:c7:65:86:d9:14:f6:02:82:c9:f1:37:f1:9b:
40:05:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:00 2024 by rpki-client on console-fra.rpki-client.org