Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/C_RcFYakVF2-wo-WRmWtpXLju6M.roa
File: C_RcFYakVF2-wo-WRmWtpXLju6M.roa (raw, json)
Hash identifier: F2mkvhd0dpnjO+A1BD3+yuW/NxYA5ej+ri7CwXDjPSk=
Subject key identifier: 0B:F4:5C:15:86:A4:54:5D:BE:C2:8F:96:46:65:AD:A5:72:E3:BB:A3
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 01837DFB0D75E6390C595C9635BB673D26DA
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/C_RcFYakVF2-wo-WRmWtpXLju6M.roa
Signing time: Tue 27 Sep 2022 08:05:48 +0000
ROA not before: Tue 27 Sep 2022 08:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35228
IP address blocks: 82.132.138.0/23 maxlen: 24
82.132.216.0/22 maxlen: 24
82.132.220.0/22 maxlen: 24
82.132.224.0/22 maxlen: 24
82.132.232.0/22 maxlen: 24
82.132.228.0/22 maxlen: 24
82.132.236.0/22 maxlen: 24
82.132.240.0/22 maxlen: 24
82.132.244.0/22 maxlen: 24
82.132.248.0/23 maxlen: 24
82.132.164.0/23 maxlen: 24
82.132.162.0/23 maxlen: 24
82.132.160.0/23 maxlen: 24
82.132.168.0/23 maxlen: 24
82.132.166.0/23 maxlen: 24
82.132.172.0/23 maxlen: 24
82.132.170.0/23 maxlen: 24
82.132.174.0/23 maxlen: 24
82.132.182.0/23 maxlen: 24
82.132.180.0/23 maxlen: 24
82.132.184.0/22 maxlen: 24
82.132.199.0/24 maxlen: 24
82.132.198.0/23 maxlen: 24
82.132.210.0/23 maxlen: 24
82.132.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:fb:0d:75:e6:39:0c:59:5c:96:35:bb:67:3d:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Sep 27 08:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bf45c1586a4545dbec28f964665ada572e3bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e2:de:79:5d:76:53:2f:97:3a:a6:fb:7b:89:
58:5b:b3:30:b3:d0:93:7a:2f:04:ea:12:84:2f:a1:
33:4a:7c:b2:44:e2:03:83:9c:aa:c4:37:fe:f9:07:
2e:b7:06:bc:08:37:b3:18:ac:9e:eb:aa:e0:14:4f:
7e:50:cf:8d:81:92:10:95:06:02:4f:95:32:df:8a:
12:6a:93:29:3f:e9:03:aa:65:fc:b0:7a:b0:bd:91:
78:7d:cf:02:6a:25:31:cb:39:c0:bc:13:49:36:7c:
37:3d:fc:f4:26:b6:0f:0d:0b:15:e1:d0:86:94:44:
fa:91:13:93:f2:56:7e:98:9e:ec:14:65:ec:0b:1f:
78:a2:2f:13:f5:d6:4c:f8:28:69:c6:74:4b:13:6c:
2c:e6:68:79:de:53:54:b2:9c:76:b2:f2:30:f6:ee:
4c:04:e9:ef:a7:9b:30:bb:cb:61:7b:0d:d5:72:02:
0a:02:8f:8a:21:15:85:32:af:93:8c:a4:b5:02:27:
86:3f:21:0c:88:f5:e5:e1:fb:72:b0:77:15:7b:1d:
8b:6b:12:23:b5:26:97:a6:56:9c:aa:2c:6c:9d:67:
b7:7e:1e:94:9b:89:2e:7c:e3:3d:06:65:3e:24:a2:
ea:0d:67:63:b7:48:98:c3:b0:b5:e3:c0:4b:dc:30:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:5C:15:86:A4:54:5D:BE:C2:8F:96:46:65:AD:A5:72:E3:BB:A3
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/C_RcFYakVF2-wo-WRmWtpXLju6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.138.0/23
82.132.160.0/20
82.132.180.0-82.132.187.255
82.132.198.0/23
82.132.210.0-82.132.249.255
Signature Algorithm: sha256WithRSAEncryption
83:da:30:70:ff:9e:e8:47:96:4b:b0:c0:8b:74:b9:f8:e3:78:
27:31:e2:06:15:aa:a3:74:0f:b0:60:9f:45:3d:b9:4f:37:cf:
44:c5:9a:ca:7b:9c:1f:d4:d5:96:1a:fb:a1:19:3a:a2:67:5e:
3c:87:af:b5:51:10:f6:6a:39:a0:6d:c6:ef:f7:7c:c3:8e:3e:
52:f0:a9:14:ed:c5:f8:20:c2:54:9d:3d:4a:cf:b1:de:29:56:
88:9e:81:01:87:e8:bc:37:a2:c8:0f:b6:b5:a4:2e:b9:32:c4:
57:a7:eb:d8:64:ea:7d:45:bc:68:fa:f2:ca:93:74:44:73:d1:
4e:c3:af:48:a0:ad:19:15:94:b9:7b:02:98:5d:8b:bd:46:3c:
87:5b:07:a6:e6:68:11:09:df:a8:95:5f:40:82:25:7f:b0:f8:
95:31:0a:1a:6e:72:6e:f6:10:f3:df:75:51:4d:f9:ad:6d:ac:
23:a6:dd:bb:19:cd:e8:4c:36:8c:27:ec:89:8f:af:74:69:78:
2a:f2:53:cd:41:48:2d:a9:76:d9:29:f7:9d:41:b7:79:4b:b5:
62:95:9f:2a:10:64:f1:fe:b6:84:5a:af:e7:98:80:72:5b:f7:
f4:b9:d7:5f:9c:2d:28:f7:e4:d2:af:34:72:a6:ed:ec:9e:03:
ea:ca:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org