Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o8tWs06mzhedvcrZq7rb0JuVp_k.roa
File: o8tWs06mzhedvcrZq7rb0JuVp_k.roa (raw, json)
Hash identifier: TTkH5z2B4RePbeFS4YgwBOfb0GG2BbyiBcryWGdz1O8=
Subject key identifier: A3:CB:56:B3:4E:A6:CE:17:9D:BD:CA:D9:AB:BA:DB:D0:9B:95:A7:F9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 13A266FF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o8tWs06mzhedvcrZq7rb0JuVp_k.roa
Signing time: Tue 04 Jan 2022 16:54:47 +0000
ROA not before: Tue 04 Jan 2022 16:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209945
IP address blocks: 2.56.0.0/22 maxlen: 22
5.252.168.0/22 maxlen: 22
92.118.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329410303 (0x13a266ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 4 16:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3cb56b34ea6ce179dbdcad9abbadbd09b95a7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:92:0c:e5:c7:72:1e:1c:e4:61:86:ac:c9:
b7:4d:5d:a8:fb:3a:0a:60:61:73:71:fb:43:dc:19:
21:67:5b:e8:e5:ec:c3:44:84:16:9e:15:0b:c1:2a:
0c:43:e4:1b:34:1f:ac:9e:05:97:cf:60:31:b5:ee:
49:26:c4:cd:38:0d:52:ab:4f:33:fa:c5:8c:0c:6a:
5c:65:a3:ab:4d:37:4e:e0:16:06:da:ac:12:e5:2b:
3b:3c:98:ad:86:9c:78:29:72:2c:74:0b:0e:b7:0a:
ea:11:ac:5a:5f:24:ea:11:91:94:18:ca:fc:8e:df:
25:bd:99:48:9e:e0:bf:25:ba:49:98:2b:e3:03:56:
75:28:3f:0c:07:f0:1a:19:a3:f3:db:bc:2c:63:c7:
d8:5e:fd:96:58:3d:8b:6e:08:b2:5c:eb:70:f2:98:
73:54:d7:50:43:f0:a3:55:32:2c:24:5b:eb:26:9d:
16:82:a7:e0:d4:47:58:89:0e:08:e7:c8:3a:2f:4e:
7b:3c:66:12:70:3e:8f:21:63:43:25:24:bc:b4:fb:
f1:11:51:63:0f:15:ab:f5:11:d6:8d:dd:c0:cc:42:
71:80:e1:eb:47:21:f9:e7:90:b8:81:14:22:c2:b2:
2a:1b:9b:2e:73:31:56:08:19:35:87:ea:aa:1f:d1:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:56:B3:4E:A6:CE:17:9D:BD:CA:D9:AB:BA:DB:D0:9B:95:A7:F9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/o8tWs06mzhedvcrZq7rb0JuVp_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.0.0/22
5.252.168.0/22
92.118.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1f:42:49:67:ad:05:c5:f5:4f:8b:13:51:4c:b8:7c:e8:1e:
45:21:43:99:ff:f6:24:5c:c2:39:b7:80:8b:ff:4d:09:14:6c:
78:41:69:28:fb:3e:77:4c:b3:85:0a:08:24:b4:91:4a:a5:d2:
9f:66:a2:55:0d:06:50:76:3f:f1:0c:1d:8a:bd:71:0e:bc:f6:
e9:c8:9a:f7:c0:02:a8:f8:63:5b:29:56:0a:6a:e2:50:f5:92:
32:a1:d4:6c:96:60:63:9e:16:23:b0:cc:2f:78:d1:49:b1:95:
aa:9f:06:d1:50:81:ea:21:26:5d:b2:56:8c:47:46:e5:6b:15:
3e:64:9f:2f:b8:69:95:de:40:41:c9:ea:4b:50:e1:97:7e:e9:
ef:43:ad:27:79:9a:b3:1f:42:cf:cc:60:b1:d3:70:86:8f:fb:
60:b2:c2:5c:b5:54:37:08:98:7a:ca:af:c4:9b:35:5c:6e:2f:
f7:c9:45:82:87:67:1c:18:c4:f2:4f:92:8b:ce:56:49:7e:aa:
0b:b7:d8:fd:ea:d9:89:9d:a7:9e:fe:be:cb:87:2a:ca:19:b1:
85:40:bd:4b:e2:b3:4e:5d:5f:09:4f:93:af:a9:c1:41:ed:bb:
ca:94:88:6b:ab:de:d5:01:b8:2e:b6:c8:0c:63:08:91:d7:44:
44:d7:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org