Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/OIbwC5h3yVsCPySw6quNH2HHL9E.roa
File: OIbwC5h3yVsCPySw6quNH2HHL9E.roa (raw, json)
Hash identifier: 3yo0TKToxpNpPC1wy6XQi4QMVCwDsOGgI9GEoTzrbBs=
Subject key identifier: 38:86:F0:0B:98:77:C9:5B:02:3F:24:B0:EA:AB:8D:1F:61:C7:2F:D1
Certificate issuer: /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial: 1986246A
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/OIbwC5h3yVsCPySw6quNH2HHL9E.roa
Signing time: Sat 01 Jan 2022 09:56:58 +0000
ROA not before: Sat 01 Jan 2022 09:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50818
IP address blocks: 82.196.16.0/22 maxlen: 24
82.196.20.0/22 maxlen: 22
2a03:42c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428221546 (0x1986246a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Validity
Not Before: Jan 1 09:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3886f00b9877c95b023f24b0eaab8d1f61c72fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:7a:74:6c:e3:dc:55:24:1b:88:47:44:18:
5d:6d:7f:6e:f8:7b:61:bb:18:8b:40:72:66:e1:90:
84:91:9a:00:b3:00:3a:97:38:d1:ef:a9:f6:1e:52:
4f:00:6f:d9:cf:10:8f:9a:41:2b:95:dc:65:af:65:
6b:b7:eb:b6:ae:9d:3d:c5:e5:88:91:e0:9b:6a:7c:
13:0d:46:45:c0:92:0a:0d:9f:7e:62:04:77:d3:5f:
9b:74:8e:d2:30:e6:40:c4:54:95:20:a2:c7:80:d7:
2a:01:61:50:37:86:be:85:05:c0:53:13:07:c5:12:
22:06:3d:7e:9a:d2:25:73:ba:1e:d7:61:56:85:50:
b1:8b:da:89:17:f1:bb:d2:75:9c:61:45:04:e5:db:
29:95:2a:2e:30:1d:78:04:83:a9:f0:ff:4f:ff:2b:
ad:14:4d:6a:91:87:db:4e:ba:f8:dc:13:63:7c:94:
c9:ce:8b:6e:42:88:39:f0:f7:c0:ba:fe:90:2b:ea:
54:b2:0c:90:bd:27:4f:b5:17:47:eb:d9:8e:91:25:
51:4a:6f:a2:f4:2f:ef:fd:b0:00:52:99:38:da:67:
15:4a:5c:31:60:64:2b:e7:62:b8:8d:9e:e1:96:a6:
f8:95:b4:6c:a0:84:16:36:47:36:92:3d:bb:89:97:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:F0:0B:98:77:C9:5B:02:3F:24:B0:EA:AB:8D:1F:61:C7:2F:D1
X509v3 Authority Key Identifier:
keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/OIbwC5h3yVsCPySw6quNH2HHL9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.196.16.0/21
IPv6:
2a03:42c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:a9:f7:9a:55:17:4d:55:5e:de:21:b6:77:c0:ee:c5:37:e6:
49:48:3f:88:53:72:0b:31:fa:5d:e6:22:c2:48:5f:9f:a7:a7:
7f:60:78:6c:88:bc:af:d8:27:67:d4:3b:7a:5a:43:f4:e3:19:
9c:28:60:bc:14:79:c8:91:b7:5c:9e:ad:ba:4c:3c:1d:d3:95:
aa:1e:fa:01:14:f5:97:cf:53:da:ae:42:18:51:19:fb:e9:40:
89:ca:78:b2:28:fe:5e:5a:0b:27:07:1f:25:b3:58:04:d5:7f:
b9:72:4d:dc:af:16:5a:7c:de:07:6d:72:98:e3:c4:0d:cf:40:
34:2e:b4:05:a3:cc:38:ac:db:63:ab:64:fc:17:ba:f9:43:13:
8b:a1:9c:bf:69:5c:ee:c8:2e:49:a3:b6:ee:b6:d4:1f:8d:5c:
c3:06:84:94:96:16:9f:39:81:5b:23:56:95:57:0c:37:23:0c:
14:90:5d:4f:d1:b3:27:1a:f9:82:3c:66:86:c7:0b:b8:de:9e:
2f:06:b9:93:db:f8:4c:17:42:91:1d:28:ba:66:11:bb:0f:37:
0c:36:4b:ed:67:79:0f:25:22:3c:fe:22:42:29:f2:b4:6a:0b:
72:fc:34:d3:97:66:ec:a8:7a:80:9d:b3:06:a6:f9:c8:aa:08:
0e:9a:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:49 2023 by rpki-client on console-ams.rpki-client.org