Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/m4BETyY9SgYyfidr6aR6lPSkn18.roa
File: m4BETyY9SgYyfidr6aR6lPSkn18.roa (raw, json)
Hash identifier: 9LF/az35pDL89JAg1gWMUoeFv7q/apTWBZv/uevav8M=
Subject key identifier: 9B:80:44:4F:26:3D:4A:06:32:7E:27:6B:E9:A4:7A:94:F4:A4:9F:5F
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 01836A90CD776F9D89C5E89DB495566890E1
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/m4BETyY9SgYyfidr6aR6lPSkn18.roa
Signing time: Fri 23 Sep 2022 13:36:58 +0000
ROA not before: Fri 23 Sep 2022 13:36:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35228
IP address blocks: 82.132.138.0/23 maxlen: 24
82.132.216.0/22 maxlen: 24
82.132.220.0/22 maxlen: 24
82.132.224.0/22 maxlen: 24
82.132.232.0/22 maxlen: 24
82.132.228.0/22 maxlen: 24
82.132.240.0/22 maxlen: 24
82.132.236.0/22 maxlen: 24
82.132.164.0/23 maxlen: 24
82.132.162.0/23 maxlen: 24
82.132.160.0/23 maxlen: 24
82.132.172.0/23 maxlen: 24
82.132.168.0/23 maxlen: 24
82.132.166.0/23 maxlen: 24
82.132.174.0/23 maxlen: 24
82.132.184.0/22 maxlen: 24
82.132.182.0/23 maxlen: 24
82.132.180.0/23 maxlen: 24
82.132.199.0/24 maxlen: 24
82.132.212.0/22 maxlen: 24
82.132.210.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:90:cd:77:6f:9d:89:c5:e8:9d:b4:95:56:68:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Sep 23 13:36:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b80444f263d4a06327e276be9a47a94f4a49f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:e0:cf:17:37:3a:98:24:53:86:66:0d:cb:
28:17:3b:e3:40:12:90:a0:5d:5a:5a:9e:85:3b:4d:
bb:1d:53:78:5b:e4:3f:36:0d:fa:18:6e:03:74:35:
1b:a2:15:34:28:90:16:3b:c9:c8:cc:9b:4f:4d:a7:
51:94:99:bb:e9:25:e2:69:78:55:c6:c8:32:22:a1:
fd:80:fc:85:aa:b1:7c:eb:1b:77:66:eb:46:ae:cf:
7f:bb:92:c3:6f:4a:6c:af:08:9e:34:e1:ee:a5:7e:
ab:2c:3b:45:b7:31:c2:e2:a5:60:c0:14:38:4c:23:
ab:2f:df:f7:f5:56:69:93:e0:52:36:4d:9e:d3:65:
92:ed:d7:58:9a:d5:5b:85:f3:6b:6d:80:ee:a9:5f:
da:e8:e3:8a:08:2d:26:a9:ae:e0:fb:fb:7e:71:08:
23:c9:88:fa:e5:8a:54:49:c3:79:5c:23:6f:89:a1:
8d:a3:4e:46:48:23:25:b3:b7:00:30:c8:1f:f8:fb:
91:a5:cb:28:60:32:7b:5b:f2:00:0c:62:84:64:bb:
df:96:9e:88:94:6a:86:3f:c6:30:56:ee:d0:94:69:
9a:59:a5:18:91:d3:3b:e5:60:3c:95:2f:bc:9b:e5:
17:af:08:7b:a2:ef:02:0c:c5:4b:c5:a6:04:88:d2:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:44:4F:26:3D:4A:06:32:7E:27:6B:E9:A4:7A:94:F4:A4:9F:5F
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/m4BETyY9SgYyfidr6aR6lPSkn18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.132.138.0/23
82.132.160.0-82.132.169.255
82.132.172.0/22
82.132.180.0-82.132.187.255
82.132.199.0/24
82.132.210.0-82.132.243.255
Signature Algorithm: sha256WithRSAEncryption
67:43:51:bb:db:a7:e3:7a:ea:cb:80:47:4d:3a:3a:d3:37:1a:
bd:78:e5:47:76:13:2b:76:83:cd:0c:20:ec:31:f3:72:77:1d:
b1:4d:66:1f:91:18:bb:a1:8c:af:28:47:1a:20:6c:f3:4e:a8:
71:57:70:dc:3b:54:c8:a3:d0:63:25:ce:d9:fc:9a:85:23:ae:
74:c3:ca:12:6d:29:6a:be:99:c5:11:bd:31:0c:d6:db:20:be:
32:fc:d5:54:d9:79:1c:c8:1d:d9:58:5d:87:32:49:34:29:82:
2c:13:aa:f7:72:f9:c0:54:ef:bd:8a:0e:73:03:55:21:c0:19:
47:fb:5e:8b:30:42:8e:72:1f:73:3d:ee:36:cd:38:84:64:5a:
85:05:e7:b5:a2:7f:9f:67:df:2d:f3:b3:a1:dd:29:93:80:22:
10:bc:14:71:cc:53:58:fc:57:c2:0b:62:71:f3:83:eb:e5:b7:
ad:bb:63:41:40:97:ad:7d:32:d2:e6:9b:19:89:09:c3:19:1e:
23:94:b3:1c:b2:ce:eb:70:11:07:e4:50:04:b4:53:16:81:98:
c4:8a:3f:45:ce:9d:e5:7e:ce:a0:c3:91:7f:36:8d:ca:e2:d4:
de:2a:f0:f6:28:e0:e2:b8:7c:f9:47:bf:4d:8f:37:f0:1f:7c:
9e:bc:da:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:10 2024 by rpki-client on console-fra.rpki-client.org