Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8TKbrkuHH9SeQpj9RbN4IjY3Owc.roa
File: 8TKbrkuHH9SeQpj9RbN4IjY3Owc.roa (raw, json)
Hash identifier: QyF0D7rTm207GGFAJ3l5/xr7/FeFshg6W5Np2fI2dzs=
Subject key identifier: F1:32:9B:AE:4B:87:1F:D4:9E:42:98:FD:45:B3:78:22:36:37:3B:07
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: BDADAE
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8TKbrkuHH9SeQpj9RbN4IjY3Owc.roa
Signing time: Tue 07 Jun 2022 17:15:03 +0000
ROA not before: Tue 07 Jun 2022 17:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19527
IP address blocks: 66.22.229.0/24 maxlen: 24
66.22.228.0/24 maxlen: 24
66.22.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12430766 (0xbdadae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jun 7 17:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1329bae4b871fd49e4298fd45b3782236373b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:e4:89:5c:a0:3a:7d:ff:13:6f:56:a8:03:
79:e1:ef:e4:a7:09:b8:5b:97:03:4b:1b:48:34:12:
32:a5:26:19:9d:c6:4a:be:96:00:07:13:c3:42:20:
90:bf:ef:56:6b:3a:d0:01:5b:fa:60:95:03:03:da:
90:d1:f2:30:94:75:77:f2:01:6d:a3:32:7c:1d:ea:
fa:6f:79:8e:fa:07:67:8e:eb:19:77:55:52:ae:21:
8a:2f:e1:5a:82:33:e4:4a:6c:77:21:80:aa:01:1e:
c5:ff:0b:05:b5:02:29:5e:56:dd:b8:57:b5:fd:19:
3e:7e:2a:29:df:d3:53:ae:d7:66:c0:1e:16:61:17:
71:81:c1:fd:ec:06:ac:c9:f8:61:16:20:f6:92:22:
b0:1b:f1:28:eb:54:dd:30:1c:9e:d2:8b:70:69:0c:
6d:f8:43:60:25:34:1c:fc:6b:4c:ac:df:3c:f0:6b:
1e:b6:b1:c2:3a:2a:ef:27:d8:f6:20:18:b8:97:23:
14:9f:65:25:bd:e1:0c:b6:36:c1:f1:d9:b0:ac:97:
32:82:5c:1f:82:93:63:68:4d:b9:86:c8:ae:16:25:
3e:66:b1:ed:ca:92:5c:2a:4a:eb:43:33:05:6d:7b:
6b:19:06:1b:a3:56:85:ff:ba:05:26:25:4c:24:82:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:9B:AE:4B:87:1F:D4:9E:42:98:FD:45:B3:78:22:36:37:3B:07
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/8TKbrkuHH9SeQpj9RbN4IjY3Owc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:3f:9a:14:9e:40:ba:c4:d2:f2:ea:72:c2:8b:1a:8f:c5:7c:
76:64:a0:0f:3e:ed:c1:eb:42:9e:38:c6:b4:6c:69:57:fd:7d:
14:bd:9d:a9:c3:90:a7:d9:7f:1b:e1:c5:09:5a:56:02:08:38:
ac:62:fc:c9:b5:e3:7c:84:a9:03:ad:21:b3:86:cd:45:36:c9:
d8:bf:ba:c5:94:7c:a9:a9:eb:a8:f0:b6:de:f2:93:61:98:94:
00:b0:0c:4f:cf:02:cb:e0:46:3e:f8:84:74:9d:5f:0e:42:5a:
f1:4a:67:96:01:12:5f:fa:fa:78:7b:46:94:e6:10:01:d8:23:
82:d9:3e:51:88:ce:9d:96:cf:22:af:83:fb:c7:0c:81:18:79:
a6:c7:df:79:90:a3:52:76:fd:6c:13:07:37:47:61:47:13:fe:
1a:aa:ff:23:69:6d:b9:1d:f6:c3:17:4c:fa:ff:3f:08:85:40:
fa:40:9a:3c:53:89:11:38:5f:b2:77:f9:8f:76:c4:7c:60:70:
f9:b2:d5:11:30:77:e2:1c:ff:c4:04:97:9c:f2:21:fe:05:c6:
d7:8e:4d:fb:7c:50:2a:33:75:50:0d:6c:cd:b3:dd:35:7b:f3:
2c:25:8e:80:e9:f9:ea:86:4c:c4:39:1e:e6:b8:56:6d:d1:3e:
a2:ae:b8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org