Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WEdhbQk6xJW4K9Ih6CTz5m_qq2s.roa
File: WEdhbQk6xJW4K9Ih6CTz5m_qq2s.roa (raw, json)
Hash identifier: ClKBAsoP2RFATwNDBlwX4PgkrL0TsEbOKZm6yB0uQZI=
Subject key identifier: 58:47:61:6D:09:3A:C4:95:B8:2B:D2:21:E8:24:F3:E6:6F:EA:AB:6B
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 187B2F6C
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WEdhbQk6xJW4K9Ih6CTz5m_qq2s.roa
Signing time: Sat 01 Jan 2022 09:03:18 +0000
ROA not before: Sat 01 Jan 2022 09:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61369
IP address blocks: 88.202.208.0/22 maxlen: 22
88.212.156.0/22 maxlen: 22
185.8.132.0/22 maxlen: 22
83.151.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410726252 (0x187b2f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 1 09:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5847616d093ac495b82bd221e824f3e66feaab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:8a:c9:3e:54:75:d6:29:ce:f9:01:2e:e2:
26:37:d4:89:2b:f5:7d:68:42:0c:ff:0a:7a:7b:d3:
20:50:05:c1:16:21:57:0d:37:d9:6e:ee:a7:50:ee:
c2:7b:e2:82:35:36:3c:af:86:59:b5:54:3e:fe:4f:
26:d4:27:0a:7a:2b:56:9d:2b:ea:7c:dd:12:cb:03:
e3:31:db:e6:68:b0:23:33:a3:83:b5:99:e3:85:b0:
1f:a8:68:7b:b2:22:4c:45:c5:ac:96:b1:61:61:11:
3a:95:f4:73:9d:0a:42:01:2b:73:86:de:37:48:78:
92:e5:2b:3a:f6:a0:cd:a5:43:19:da:94:8d:de:c4:
d3:7a:52:ad:af:83:ca:3f:5e:72:0e:07:00:be:0d:
e1:e4:bf:77:0d:89:10:08:93:5b:c4:e9:33:27:9a:
55:d5:8e:d1:4c:55:a2:b4:6d:6d:0a:ca:f2:f5:eb:
86:4b:4d:2f:17:35:8f:54:41:62:d7:0c:a3:f8:cf:
a1:b1:3d:a2:64:6b:3d:95:a7:7e:34:93:17:99:4e:
4b:03:00:03:b0:52:7b:ed:b7:a8:ec:30:f6:bd:39:
52:a6:90:a5:f7:09:46:40:d1:0f:78:ea:94:fb:e9:
ce:2a:28:ee:56:0e:1d:96:c8:ba:6d:c9:a5:16:fd:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:61:6D:09:3A:C4:95:B8:2B:D2:21:E8:24:F3:E6:6F:EA:AB:6B
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/WEdhbQk6xJW4K9Ih6CTz5m_qq2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0/22
88.212.156.0/22
185.8.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:9c:43:e8:69:4e:8f:93:77:f5:d1:4b:6e:3d:9d:c4:26:38:
c5:c7:86:fd:02:02:77:24:9b:f3:54:bd:95:7a:07:da:c3:3b:
0b:75:9f:de:de:a0:03:23:5b:3f:3e:4c:e5:c0:96:6a:b7:e9:
f2:2b:53:78:8d:4a:b4:9f:2c:08:0b:d8:35:dc:9b:8e:5e:7e:
ef:33:d3:3c:77:c5:cd:0f:96:c3:88:72:f2:5e:0f:f0:97:d8:
01:06:d0:47:99:78:28:b6:55:ad:a6:e1:f4:f6:1c:7a:af:af:
80:57:1e:c1:b1:17:12:e8:12:b8:64:c4:eb:8d:19:99:40:e9:
fb:83:f5:8e:a1:0e:b4:b3:fc:07:47:70:28:dc:36:d6:37:47:
04:90:92:d3:b0:09:89:9d:b3:2c:f4:db:b7:70:58:f0:bd:ef:
59:63:a2:f9:63:a4:71:c8:1a:0b:52:6d:c0:91:3d:bb:c5:fe:
14:b1:24:5c:63:b1:6a:d8:38:5a:b4:86:7a:2d:5f:70:0d:2a:
a3:0c:66:43:ac:d0:9f:68:32:9a:0f:44:68:fd:ea:d1:6d:2f:
05:d1:2a:d0:c4:08:e2:61:c8:f7:ef:fd:b6:3e:3f:eb:c8:af:
38:cf:81:6d:21:af:2c:cb:4e:cd:6d:d6:f3:be:63:bc:1d:b8:
be:22:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:41 2024 by rpki-client on console-ams.rpki-client.org