Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/aipixxyrF29cdM1r6nc4tABzsv0.roa
File: aipixxyrF29cdM1r6nc4tABzsv0.roa (raw, json)
Hash identifier: duxjuv5gs/U62rRzKn+dfDI+PnMxCBGKZGGWhpYkGTI=
Subject key identifier: 6A:2A:62:C7:1C:AB:17:6F:5C:74:CD:6B:EA:77:38:B4:00:73:B2:FD
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 014E13
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/aipixxyrF29cdM1r6nc4tABzsv0.roa
Signing time: Fri 20 May 2022 00:34:00 +0000
ROA not before: Fri 20 May 2022 00:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47610
IP address blocks: 137.226.0.0/16 maxlen: 16
134.130.0.0/16 maxlen: 16
134.61.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85523 (0x14e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: May 20 00:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a2a62c71cab176f5c74cd6bea7738b40073b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:e0:e9:2e:c7:61:e0:5d:fd:6b:fc:36:29:
5e:3a:f2:0a:df:56:ef:b1:be:50:ee:14:b5:e1:6d:
69:c5:aa:a9:df:c4:fe:ad:f4:1e:e8:e3:2c:95:1a:
fb:f5:a5:40:1f:25:bf:c0:98:4e:1b:05:98:41:d4:
ea:05:80:19:cf:e3:db:48:48:9d:0b:91:be:37:f2:
9c:51:49:f8:3f:a4:c5:8b:8f:36:f0:f2:a5:3c:e6:
b7:d3:14:b0:2a:5e:5c:ec:9a:1a:b1:cf:49:eb:74:
16:b7:a7:91:4a:d2:30:9b:64:e1:20:82:70:9d:64:
f2:93:ca:24:99:0f:bd:db:5f:f6:3a:e5:fd:5e:b8:
8b:99:0f:c7:6c:b1:7b:6a:ab:ce:2a:57:62:9b:38:
61:bc:d1:d3:b6:ff:f4:24:fc:28:4e:8f:17:c7:b9:
bb:6e:b7:3f:e3:be:42:8b:2b:64:86:7d:79:96:33:
0a:ab:6f:5b:80:43:6f:67:07:41:9c:e7:5d:fd:1f:
96:e9:00:66:2c:9b:54:0a:7b:d2:89:d4:e7:f9:9b:
50:59:42:59:03:e8:6e:60:7b:9b:f7:ed:32:27:a2:
84:81:24:54:84:a2:6f:9f:99:6e:47:a3:1f:66:7c:
e1:b6:54:52:96:ed:4a:1c:e7:f1:45:45:b6:7a:c5:
fc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2A:62:C7:1C:AB:17:6F:5C:74:CD:6B:EA:77:38:B4:00:73:B2:FD
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/aipixxyrF29cdM1r6nc4tABzsv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.61.0.0/16
134.130.0.0/16
137.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:1c:d1:a7:41:71:1b:07:d8:ea:5f:ec:9b:f0:e3:f1:fb:60:
45:8d:ab:2b:f0:ce:d6:7b:90:ec:22:a4:df:e6:61:65:f7:e3:
f7:ab:07:b3:64:ec:41:ec:ab:ae:5f:aa:13:28:41:ba:9b:f5:
af:92:59:64:19:e0:f0:91:fe:c3:de:2b:bb:ca:49:32:97:7e:
6e:23:44:d6:96:bf:72:45:dd:b7:48:4f:1b:52:b7:ca:b5:a0:
66:93:0f:75:18:12:13:97:3e:c3:6d:7f:8c:9e:32:3d:2f:1a:
e5:4f:09:e6:57:0c:79:85:39:c6:b9:91:59:8d:0e:55:9a:c0:
55:45:80:a1:df:d0:4c:7d:bf:af:0f:fc:48:2f:6a:84:55:cd:
35:14:56:0b:91:7a:97:ac:99:7e:d4:69:4a:37:7f:f8:e3:4a:
e5:12:47:3f:1a:b6:50:8e:6b:4b:c4:d6:e9:a9:80:df:54:75:
18:1b:b1:d4:c9:b0:6b:3c:03:28:7e:77:94:aa:71:ff:a3:fd:
61:ad:32:20:ba:0f:89:93:36:36:84:6e:4c:f3:e1:96:2a:c5:
05:0c:3f:55:36:b4:4c:7f:40:51:9c:d0:28:12:25:02:4e:d1:
73:da:de:ac:52:91:55:c1:38:ef:71:7b:25:ab:76:46:c4:17:
d6:a3:0f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:36 2023 by rpki-client on console-ams.rpki-client.org