Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/xG2pZc8ora4QqX6F7JmstcCgp6U.roa
File: xG2pZc8ora4QqX6F7JmstcCgp6U.roa (raw, json)
Hash identifier: 82zKvBG79k4A9rrvrMLWBE8Ky1tUFGt7bx3Un0F0MpU=
Subject key identifier: C4:6D:A9:65:CF:28:AD:AE:10:A9:7E:85:EC:99:AC:B5:C0:A0:A7:A5
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0D227700
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/xG2pZc8ora4QqX6F7JmstcCgp6U.roa
Signing time: Sat 01 Jan 2022 00:50:13 +0000
ROA not before: Sat 01 Jan 2022 00:50:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15681
IP address blocks: 83.137.240.0/24 maxlen: 24
194.29.97.0/24 maxlen: 24
194.29.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220362496 (0xd227700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 00:50:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c46da965cf28adae10a97e85ec99acb5c0a0a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:4f:9e:a4:11:99:4f:cc:1d:ad:ac:4a:9c:
f1:23:a3:66:a6:96:40:3a:7e:b8:23:42:49:89:67:
18:dc:28:23:3a:28:d7:c6:78:71:0b:fc:84:eb:b2:
91:45:b5:5a:26:fa:41:f0:82:bd:10:61:26:c3:d4:
2c:25:b0:75:43:59:06:b9:0d:b4:91:45:e3:f3:31:
95:34:9b:31:05:66:e7:3d:c6:b1:93:f0:1c:1c:2a:
57:b1:7f:d6:27:6a:35:81:d9:09:f9:93:8f:b8:35:
b9:55:c0:3c:a4:3f:7e:0e:f5:40:ee:b0:21:d3:ba:
8c:f6:a2:00:9e:9b:48:66:c1:78:2a:24:16:df:ef:
04:76:9a:94:b6:b3:45:65:2d:28:f9:52:19:b1:75:
5c:f5:39:87:f0:a2:69:05:14:dd:4c:cb:fa:4e:5c:
92:9b:e0:f5:11:8c:63:59:3b:94:00:21:e9:8d:09:
2a:cd:a2:55:21:a4:30:ab:a5:66:85:59:dc:4f:3f:
ad:60:5c:9d:4a:4f:dc:69:c3:54:56:d4:f6:74:04:
5b:ee:14:17:ff:d1:82:03:3d:5a:40:41:99:4f:5d:
87:d4:65:be:bc:0c:bd:86:20:e1:d0:ba:71:c4:81:
02:ef:2e:87:63:5e:3d:2c:6f:a3:89:4c:37:44:56:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6D:A9:65:CF:28:AD:AE:10:A9:7E:85:EC:99:AC:B5:C0:A0:A7:A5
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/xG2pZc8ora4QqX6F7JmstcCgp6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.240.0/24
194.29.97.0-194.29.98.255
Signature Algorithm: sha256WithRSAEncryption
5d:a3:6c:22:a3:2c:94:65:dc:5d:37:0f:b9:60:ed:33:78:9a:
6d:db:c4:71:e8:aa:30:9c:18:fd:18:b2:ce:23:c4:d9:e8:1f:
69:3f:c7:31:0f:84:68:63:10:d8:f9:35:7d:47:96:40:03:91:
8c:72:0b:66:95:29:53:d9:1c:f2:9d:81:fa:d4:2f:47:ef:f6:
6d:2d:36:e2:15:f4:d0:f2:09:0e:54:ca:0f:10:5b:1a:06:f7:
b0:f3:b5:cb:f9:e7:41:3d:2d:3f:a1:56:8e:c3:08:c9:01:ef:
d9:ef:2e:0f:2b:9d:b1:b6:28:d4:36:d3:8e:38:1b:b1:e3:04:
0d:05:01:88:4c:5f:5e:19:48:fc:bb:99:44:61:85:17:19:f6:
3b:08:d1:bd:6f:49:78:18:d1:6d:b0:82:85:8a:5d:0a:4b:60:
25:00:71:47:e3:1c:0d:4b:48:1d:fa:14:48:61:da:6b:f3:0e:
20:9e:6d:02:09:9d:16:ec:8d:53:64:1f:73:5e:8a:c9:d1:21:
f1:68:e9:95:00:d0:d3:d8:ef:f2:ee:e1:78:79:9f:56:b6:1a:
7e:d4:21:6a:97:a7:5e:94:81:9b:68:1e:af:b8:72:5c:b1:20:
88:3f:75:69:c0:74:aa:d6:1d:67:76:ff:21:b0:cb:08:10:74:
f9:0e:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:49 2023 by rpki-client on console-ams.rpki-client.org