Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/SPrQTIFtWs81-qyGU8EB8saIs7s.roa
File: SPrQTIFtWs81-qyGU8EB8saIs7s.roa (raw, json)
Hash identifier: lsq5ADSX17Uekr19sNr6rgPT1cQ1buTIO1Z7L3wE9GU=
Subject key identifier: 48:FA:D0:4C:81:6D:5A:CF:35:FA:AC:86:53:C1:01:F2:C6:88:B3:BB
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 1BFEF5DF
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/SPrQTIFtWs81-qyGU8EB8saIs7s.roa
Signing time: Sat 01 Jan 2022 06:57:05 +0000
ROA not before: Sat 01 Jan 2022 06:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2108
IP address blocks: 82.132.0.0/17 maxlen: 17
161.53.0.0/16 maxlen: 16
31.147.0.0/16 maxlen: 16
193.198.0.0/16 maxlen: 16
2001:b68::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469693919 (0x1bfef5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Jan 1 06:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48fad04c816d5acf35faac8653c101f2c688b3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:52:3e:c3:4d:c1:cc:be:54:5f:b4:96:4b:
34:0e:75:4b:f2:49:ac:9f:60:c6:22:26:73:ab:97:
43:91:c1:d5:ef:22:bc:19:a4:87:5f:15:3c:ad:6f:
a0:a9:ad:82:97:f3:e5:1b:6c:9b:ee:53:70:48:8c:
88:91:f3:9b:46:f3:da:a2:93:dd:f8:04:2a:bf:5b:
4c:79:8f:ce:7f:4a:4d:1c:3b:d1:64:2e:d9:7f:4f:
ff:c2:c4:c3:0f:48:e7:46:56:f5:71:95:72:70:03:
65:76:c0:8f:f7:e8:99:b7:63:71:ca:82:e3:1b:3f:
3b:c0:ae:30:ad:34:c9:45:8f:6e:52:93:74:a6:8f:
3d:2c:7b:62:b2:78:f8:8b:c6:28:52:88:3f:25:13:
90:a8:25:25:88:8d:36:9d:ec:a2:49:8c:00:cf:62:
3e:26:f8:4c:ff:6f:01:2a:f1:39:26:c4:e2:44:26:
c2:19:0c:d2:0f:dc:d1:c3:af:07:d2:6d:82:f1:2b:
74:72:05:41:58:2a:29:e9:32:29:cd:f3:ac:c2:8d:
70:ad:b4:f3:d8:39:c1:42:8e:59:de:e7:fe:16:b0:
84:7b:eb:b7:79:65:c8:db:b2:7a:78:2d:bc:20:0b:
a6:4d:ca:c1:b7:05:cc:5d:ee:4f:3f:98:b3:0b:93:
e2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:D0:4C:81:6D:5A:CF:35:FA:AC:86:53:C1:01:F2:C6:88:B3:BB
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/SPrQTIFtWs81-qyGU8EB8saIs7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.147.0.0/16
82.132.0.0/17
161.53.0.0/16
193.198.0.0/16
IPv6:
2001:b68::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e5:03:11:dc:63:2e:a8:16:65:c9:67:98:67:57:3a:5e:6b:
88:55:28:98:d2:f0:6f:c4:23:7c:e3:f6:45:00:51:bc:7b:11:
97:8d:64:fe:c2:bd:3a:0b:3b:2b:12:86:1a:2d:b9:f4:82:c4:
c1:3a:53:2b:89:8a:2a:5c:c1:21:0f:9a:b6:9b:09:a0:e0:7c:
4a:da:7b:ae:63:08:c0:89:02:ab:e8:91:63:6a:c7:85:a4:9e:
de:41:17:92:0f:b3:47:50:3d:15:c9:f6:7e:8c:54:e1:8f:8b:
0d:ad:11:2e:99:09:60:0b:bc:97:b1:f8:2e:2f:60:c8:eb:29:
6f:59:34:bc:56:1e:81:20:1d:c7:8c:99:42:30:b8:8c:c3:5c:
e3:77:98:ab:30:17:55:1e:1f:1a:16:33:da:3d:13:3e:88:d7:
9e:a8:4e:4d:d9:97:12:d4:49:4e:0a:6a:9a:5e:13:2a:56:58:
ad:eb:f8:06:6b:93:7e:e6:57:30:d4:95:1c:2c:e5:db:02:62:
7c:d4:38:0f:21:8e:5c:ab:29:fe:aa:5d:24:98:9e:ff:4d:76:
61:4c:85:36:fe:6f:bb:05:d5:d8:52:0c:af:3b:46:18:2e:e2:
bd:17:56:8c:bf:c0:3c:c7:36:d4:dd:38:d5:63:1d:0c:60:ec:
24:b5:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:23 2024 by rpki-client on console-ams.rpki-client.org