Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AqM_49NTHHepBhMAlHZFdr7uDMA.roa
File: AqM_49NTHHepBhMAlHZFdr7uDMA.roa (raw, json)
Hash identifier: e88cQW3bIATXktn1S38vEU5TFF0RcHLcM1mHbLsks7s=
Subject key identifier: 02:A3:3F:E3:D3:53:1C:77:A9:06:13:00:94:76:45:76:BE:EE:0C:C0
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 1866BA41
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AqM_49NTHHepBhMAlHZFdr7uDMA.roa
Signing time: Fri 06 May 2022 14:38:28 +0000
ROA not before: Fri 06 May 2022 14:38:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56801
IP address blocks: 94.135.124.200/30 maxlen: 30
82.207.191.220/32 maxlen: 32
82.207.191.33/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409385537 (0x1866ba41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: May 6 14:38:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02a33fe3d3531c77a906130094764576beee0cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:91:5f:f3:e4:c9:b1:93:61:22:cf:1a:c5:
6e:68:cb:4d:76:1b:99:a7:bf:d7:1f:2e:e4:51:cc:
91:80:1c:ea:65:53:5b:3f:ac:05:aa:a7:bb:29:59:
ce:c8:12:8e:41:e5:b2:24:64:e1:f9:e9:64:15:a9:
b4:78:6b:31:f7:9c:f9:7e:fc:76:3f:aa:6f:47:56:
a9:77:16:38:94:fc:f5:2d:3c:0b:ad:66:2f:6d:4d:
72:23:5f:46:a6:eb:ca:9b:6a:65:03:50:a9:47:42:
b6:3b:35:95:97:3e:ee:12:31:81:e2:3f:14:e2:bf:
4c:b7:e7:31:18:68:07:a2:92:a8:82:f4:65:16:f8:
94:60:85:e4:4e:b6:eb:b8:d2:ac:bf:64:2d:c0:2d:
51:1e:48:18:8b:78:9c:47:91:ef:66:cb:8e:1d:68:
21:58:b3:1f:26:3a:2f:c3:d6:c6:73:03:c8:64:a6:
09:c2:80:f9:87:c0:70:a8:e2:21:7f:b5:07:94:a5:
5f:3b:fa:23:6d:18:d9:e9:1b:72:bb:07:31:c3:be:
01:a0:94:99:06:5b:71:a7:16:04:01:be:37:48:7e:
60:4a:56:e7:a3:74:09:6b:85:67:12:f7:b6:d3:2c:
64:12:29:46:33:25:a7:6e:b6:11:0d:d3:cd:85:6a:
fc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:3F:E3:D3:53:1C:77:A9:06:13:00:94:76:45:76:BE:EE:0C:C0
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AqM_49NTHHepBhMAlHZFdr7uDMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.207.191.33/32
82.207.191.220/32
94.135.124.200/30
Signature Algorithm: sha256WithRSAEncryption
9d:4f:13:83:59:08:f3:99:41:54:88:3f:28:91:37:36:6a:ab:
78:c3:4b:42:00:f9:7b:07:47:b5:b5:6c:58:85:7b:cd:42:94:
6a:f3:38:fe:fc:0f:89:6f:2c:d3:29:7a:93:14:de:39:da:b4:
19:61:27:87:bd:cc:89:49:b4:b8:4b:1b:fe:66:6a:4d:8f:63:
f5:25:15:7a:6f:7b:ae:3c:12:a5:7d:c5:5d:66:8e:51:bc:9c:
03:c3:d6:0a:28:e6:9c:99:9b:48:69:89:24:ce:e6:b7:a4:09:
e4:91:b4:43:a2:62:fd:c7:57:82:ae:93:b6:ab:1b:b2:78:03:
d4:b7:ea:3b:97:e1:b8:a4:01:b9:5d:f6:d9:03:98:e7:af:f8:
a9:81:7e:bd:60:4c:ce:ff:dd:21:8a:1b:2a:e8:20:9a:9b:ee:
0a:c6:3a:9d:b5:a3:b8:d8:af:b9:f6:79:f0:78:7a:f4:69:d9:
95:67:cd:1f:13:07:3a:93:2a:e6:b3:8f:60:83:18:85:51:1e:
fe:f3:71:91:08:c9:25:68:48:b9:e2:6e:c3:e2:ae:c6:f7:47:
65:43:41:11:56:16:6d:04:41:c5:ec:7c:78:e7:7c:b3:bd:2c:
7a:18:88:d0:2f:42:3b:ec:8b:49:82:d2:67:7c:4f:9f:f8:6a:
d3:da:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 15:16:14 2025 by rpki-client