Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iP09YRAVatY2pX9jbzWP9r5iBiM.roa
File: iP09YRAVatY2pX9jbzWP9r5iBiM.roa (raw, json)
Hash identifier: M7wcT6yPS3l/Vbjmm8dwGIhU37NG0ffJX3Cg/0IiSp4=
Subject key identifier: 88:FD:3D:61:10:15:6A:D6:36:A5:7F:63:6F:35:8F:F6:BE:62:06:23
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0AA5FDAB
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iP09YRAVatY2pX9jbzWP9r5iBiM.roa
Signing time: Sat 01 Jan 2022 12:00:00 +0000
ROA not before: Sat 01 Jan 2022 12:00:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9121
IP address blocks: 82.222.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178650539 (0xaa5fdab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 12:00:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88fd3d6110156ad636a57f636f358ff6be620623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:7d:92:86:99:1d:57:1b:30:f2:28:e1:ed:
e5:1b:bb:20:8c:fd:7d:8c:59:d2:4b:90:bd:a8:72:
01:00:4e:5f:9b:a8:25:91:67:d0:fb:ca:db:3f:96:
f8:f4:7b:9f:41:6d:11:40:a2:57:3f:e6:7f:88:1c:
36:73:1f:e9:76:f3:a7:ab:a6:5d:6c:fe:db:0b:31:
89:e1:d4:4f:fd:72:d5:3f:d7:c7:7e:98:10:fe:89:
53:ce:07:97:1c:2c:94:d0:4f:3a:a4:7c:59:6b:e8:
35:eb:4a:71:f4:f6:16:7e:12:66:a3:28:9f:29:9f:
0f:42:a4:38:14:7d:9f:82:48:d9:10:fe:da:c8:50:
f1:6a:d0:54:60:a6:10:2c:05:c3:78:12:9d:9d:ee:
15:8a:42:57:91:9e:f8:d0:67:fc:27:27:48:41:3a:
0b:4e:f8:8b:13:0c:e4:66:8a:e4:e7:b7:af:34:23:
ec:eb:68:05:f6:40:11:05:eb:a5:34:a6:c6:f9:b8:
b7:a2:60:41:e1:41:ca:43:cf:7f:33:99:78:17:50:
75:28:27:8c:d2:f7:fa:46:c1:8a:c3:5f:a1:c3:b4:
70:21:ed:85:4c:18:26:92:b6:3b:3b:92:23:6a:40:
3c:e8:6f:9b:f5:6f:56:4d:16:ec:b9:6b:4b:37:0d:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:3D:61:10:15:6A:D6:36:A5:7F:63:6F:35:8F:F6:BE:62:06:23
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/iP09YRAVatY2pX9jbzWP9r5iBiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.222.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:23:82:c7:33:62:d0:f7:5b:b0:67:65:29:cb:ed:bf:db:34:
62:ac:88:9c:1a:b4:ff:c9:16:1d:c6:ea:8f:4f:36:dd:98:5a:
a0:92:42:9d:27:05:ce:d3:5d:59:fb:3b:73:24:c9:e5:d1:e0:
ae:02:de:94:0b:8e:3e:f9:d7:50:6a:fc:f4:f4:8c:dd:00:08:
3c:fc:e1:e3:e7:d7:1e:41:36:22:b6:24:43:92:20:7b:ac:7d:
6a:eb:b8:da:84:a1:f0:be:60:db:ca:71:99:56:21:8b:3b:54:
d9:98:0b:3a:0f:72:96:c5:6d:f4:68:75:97:d5:e0:d5:c8:15:
f3:0c:89:7b:43:53:f9:3d:f8:df:67:37:bb:f1:88:27:44:b2:
87:40:ca:62:64:2c:88:eb:83:97:46:3c:93:52:97:84:14:29:
46:7c:91:4b:67:f6:be:fa:b4:c0:cd:e7:05:8d:a2:f9:e7:6a:
65:40:61:0f:f4:37:d6:61:50:0f:f4:5f:de:f9:32:d0:53:73:
c2:e8:ef:cc:92:5a:2d:54:25:9c:9d:7e:09:43:33:06:20:06:
29:d4:84:04:03:5f:12:7c:e1:23:2c:35:97:64:d6:2b:1e:98:
7b:c3:11:e2:67:21:a5:a9:12:b3:7a:a6:82:64:46:10:12:b3:
58:f5:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:18 2023 by rpki-client on console-ams.rpki-client.org