Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I_XBZpGYCal-kCtYwcDJOboAIf8.roa
File: I_XBZpGYCal-kCtYwcDJOboAIf8.roa (raw, json)
Hash identifier: p7ge1Gsoez6Skh6ktNAwP2mEZcBKXudPbYHLgTIfREQ=
Subject key identifier: 23:F5:C1:66:91:98:09:A9:7E:90:2B:58:C1:C0:C9:39:BA:00:21:FF
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 03BD6564
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I_XBZpGYCal-kCtYwcDJOboAIf8.roa
Signing time: Sat 01 Jan 2022 12:54:41 +0000
ROA not before: Sat 01 Jan 2022 12:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62105
IP address blocks: 82.163.40.0/21 maxlen: 21
185.47.132.0/22 maxlen: 22
2a01:90a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62743908 (0x3bd6564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Jan 1 12:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23f5c166919809a97e902b58c1c0c939ba0021ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:ca:16:50:30:6d:db:e3:37:4c:41:4b:9f:
bd:cf:e8:e3:ab:80:2a:35:40:9c:98:89:38:45:4e:
2a:ea:57:b0:69:e6:f6:94:d0:13:15:3e:38:5e:b0:
ca:4f:a5:ec:e2:08:ee:97:00:ef:c5:ff:59:cd:36:
52:b6:ad:4b:0c:1e:74:67:bf:c7:71:34:f4:21:b5:
35:ee:02:ee:ca:5e:64:ed:73:22:17:84:00:7e:38:
23:dd:a1:36:6b:9e:b8:62:7e:00:03:1e:b8:2f:0d:
58:4b:cf:72:27:54:dc:fb:0e:9a:12:ba:85:d8:de:
e1:7d:05:4b:2f:e0:56:27:ab:33:8c:17:e9:fd:9b:
54:5f:a0:98:06:ef:dc:b9:20:5d:e3:2e:8d:62:a9:
16:bd:84:5f:b9:b7:57:07:97:08:d7:8c:27:38:09:
d9:ef:90:c7:3c:09:f6:16:2c:7c:2a:d2:88:aa:fd:
f0:f1:d6:4c:1a:ed:49:90:2a:22:da:18:d6:dc:fe:
af:fa:21:f0:de:da:2b:de:a1:46:43:98:f9:a1:49:
f9:45:79:de:2e:bf:1e:6b:cd:a6:84:fe:a6:87:6e:
61:6f:cf:b6:ed:43:94:85:b6:71:63:98:64:46:01:
ce:02:aa:cb:24:2a:79:38:10:87:7a:4f:2f:76:27:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F5:C1:66:91:98:09:A9:7E:90:2B:58:C1:C0:C9:39:BA:00:21:FF
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/I_XBZpGYCal-kCtYwcDJOboAIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.40.0/21
185.47.132.0/22
IPv6:
2a01:90a0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e5:d5:9a:1a:43:dc:e7:44:64:7e:e5:eb:60:e3:bb:a7:e0:
a6:ad:40:ad:02:9c:dc:1e:b9:17:cc:17:f0:c8:d2:4f:73:8d:
4b:a5:d4:d4:e2:0c:f4:1d:9a:e6:47:a9:fe:0f:f8:f8:7c:de:
92:84:c0:5c:10:65:46:ac:7d:db:c8:30:c0:10:30:f6:61:cf:
3d:b4:9d:95:27:c0:f3:e5:83:ae:ee:c1:fb:25:e7:1d:e0:0a:
2e:e8:d2:40:64:2a:b5:95:4e:7b:5e:f6:51:8e:ad:2d:85:21:
55:9c:f7:eb:35:69:8a:b6:77:fc:40:40:b7:e7:b8:16:61:75:
23:5a:4c:b3:ac:f9:2c:26:f6:ec:27:2c:53:75:8c:ef:72:ce:
45:92:86:ab:87:7e:3e:15:02:08:12:6a:c3:91:ed:86:64:a3:
df:52:ae:3a:7e:41:a2:8b:fb:81:e8:1d:00:cc:1f:16:5a:24:
49:e9:59:4a:c8:1d:96:38:5e:5a:83:8f:00:37:eb:c5:71:5e:
26:86:f4:63:2b:4f:ba:ce:74:e7:87:0b:db:c1:53:b2:8b:f9:
9c:23:69:85:93:0a:5a:ce:93:fe:c1:13:74:34:db:08:81:a7:
59:2a:d2:52:5c:be:a2:fb:13:81:c9:63:67:6c:d9:e7:74:50:
5f:f6:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:04 2024 by rpki-client on console-ams.rpki-client.org