Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/yLuXhMAqjDL-8UZR33sTzU30U-o.roa
File: yLuXhMAqjDL-8UZR33sTzU30U-o.roa (raw, json)
Hash identifier: xVOyddmEu68V9J3Dfx/ZXHlNkTF8CndCzeDvAPdu/RI=
Subject key identifier: C8:BB:97:84:C0:2A:8C:32:FE:F1:46:51:DF:7B:13:CD:4D:F4:53:EA
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 35F2FEBE
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/yLuXhMAqjDL-8UZR33sTzU30U-o.roa
Signing time: Sat 01 Jan 2022 03:02:15 +0000
ROA not before: Sat 01 Jan 2022 03:02:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35782
IP address blocks: 82.150.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905117374 (0x35f2febe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 03:02:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8bb9784c02a8c32fef14651df7b13cd4df453ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:bb:82:14:bf:00:6b:40:03:8f:64:02:f0:
76:68:fe:a9:cb:e3:aa:7b:dc:0c:a9:08:4b:59:b5:
5f:a4:55:81:38:1e:8b:5e:4f:42:ba:69:74:2f:38:
2b:42:f6:3c:f8:72:0a:a7:79:49:b4:03:b3:1c:4b:
8c:f3:9c:8f:05:f3:46:27:ae:3f:c4:c5:81:ec:4b:
95:65:47:b2:90:c6:47:06:76:c9:1c:d8:72:3c:81:
18:a6:20:c2:b4:86:75:8c:76:1e:70:5a:2e:40:13:
48:8c:ac:c8:86:39:a4:a7:ac:07:9a:bb:b8:b5:92:
8c:88:5f:6a:e5:a2:30:81:b5:de:a5:da:91:ea:4d:
5e:ef:2a:29:e0:92:a7:5c:80:1f:ba:86:61:04:7d:
ea:12:4f:6a:e6:59:db:53:d1:4b:6c:06:4c:86:39:
6d:f5:23:90:66:45:bf:d2:46:72:8e:f8:c4:18:d9:
3d:76:2e:b7:56:60:ef:0c:c2:e6:f9:76:1e:f4:dc:
ad:ed:5a:31:50:a4:02:8c:8a:0e:95:32:32:2a:e5:
ec:1c:25:cf:48:82:dd:60:c3:d2:de:53:62:bf:0a:
d2:1a:38:92:83:e6:db:72:15:7c:6f:41:59:d3:68:
9f:19:12:bf:f2:8d:28:b8:41:20:f2:9b:b3:cc:f7:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BB:97:84:C0:2A:8C:32:FE:F1:46:51:DF:7B:13:CD:4D:F4:53:EA
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/yLuXhMAqjDL-8UZR33sTzU30U-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d8:d9:d9:80:d2:25:0d:0a:f3:43:d9:5b:51:4d:4c:61:5e:
37:73:89:44:fa:8e:2a:cd:8d:82:f7:fb:fa:81:cb:fa:b2:e1:
b7:4e:61:8a:88:47:e2:4d:3d:86:6b:ee:5e:38:c8:ad:b3:dd:
37:76:40:88:f8:72:de:29:02:59:03:b8:a6:0a:a0:e9:a7:a7:
fe:54:74:70:0c:2d:1c:f1:ff:fe:38:55:fa:c4:1d:36:92:07:
ad:75:34:ab:5b:78:3c:a1:6f:1b:86:6f:7e:b2:64:dd:e6:97:
d7:13:3d:bf:73:cd:1f:0a:e7:b5:55:ed:c8:f5:4f:2c:45:3e:
51:b5:04:ff:ea:bd:34:a8:98:21:8f:e8:c1:de:7b:d1:32:1f:
e7:2e:92:78:06:36:eb:6f:06:ea:69:4e:8c:1e:53:fb:c7:79:
95:88:d7:df:54:c4:3f:d2:a7:f7:7a:dc:a1:80:c6:27:7b:46:
32:3a:2f:5b:ab:d7:62:e2:8f:3b:8e:d2:9d:19:11:6c:ab:a7:
15:0a:08:07:05:db:1d:11:80:50:96:09:cd:5e:e9:96:2d:82:
48:86:87:d9:f4:e6:e4:01:04:27:d6:7c:72:f9:2d:f1:41:b4:
33:84:af:c5:a8:6d:57:d3:33:2f:5f:ae:8f:5d:47:f9:54:e5:
6b:55:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:54 2023 by rpki-client on console-ams.rpki-client.org