Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/SpvcQd4tDnQJSGls3GAlDwiVyDA.roa
File: SpvcQd4tDnQJSGls3GAlDwiVyDA.roa (raw, json)
Hash identifier: QC94Vn+358d+g0MFgME035G1X7c3x+odPrgMw4y8l/o=
Subject key identifier: 4A:9B:DC:41:DE:2D:0E:74:09:48:69:6C:DC:60:25:0F:08:95:C8:30
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: D601AD
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/SpvcQd4tDnQJSGls3GAlDwiVyDA.roa
Signing time: Thu 16 Jun 2022 17:51:44 +0000
ROA not before: Thu 16 Jun 2022 17:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139070
IP address blocks: 66.22.229.0/24 maxlen: 24
66.22.228.0/24 maxlen: 24
66.22.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14025133 (0xd601ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: Jun 16 17:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a9bdc41de2d0e740948696cdc60250f0895c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:b7:96:e0:5b:38:2f:49:23:50:5e:93:80:
8e:ab:3c:a3:ae:b3:a5:79:20:98:86:30:cb:c2:38:
5c:67:b4:97:7c:0c:39:c2:69:0b:5a:3f:2a:c8:e8:
45:da:71:f0:44:88:ee:c2:e6:9a:97:1d:6c:f3:f5:
78:29:be:c6:b7:f6:fb:63:76:b9:7d:0a:c1:1d:91:
5c:4a:24:32:e3:1c:0a:23:96:65:4d:12:c5:1b:f3:
9a:fa:2e:6a:43:40:b8:bd:59:22:60:f4:9a:90:d0:
82:c8:f1:30:fc:52:33:1e:a9:bb:8d:96:f4:a2:ad:
9a:35:f0:1b:54:2c:8a:ff:d2:a1:f1:6a:6f:41:21:
0f:6c:87:98:85:21:c0:ee:58:65:aa:5e:13:41:ae:
01:30:1d:cb:47:23:2f:13:f9:74:d2:91:c8:9b:88:
06:01:52:17:ad:db:25:e1:24:f7:f7:34:30:2a:b2:
4e:0b:9b:52:1e:31:09:e9:46:e5:07:65:57:2f:de:
c5:64:b1:20:d2:17:3f:d0:a8:d2:67:a4:63:d9:70:
25:72:47:e7:51:b2:e3:b5:8b:7b:57:dc:b4:0b:d3:
c2:3a:86:7c:c0:15:ac:a0:65:68:b9:24:de:33:43:
ce:92:70:2c:d7:3b:a1:d7:b4:a2:cc:5a:24:00:fd:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:DC:41:DE:2D:0E:74:09:48:69:6C:DC:60:25:0F:08:95:C8:30
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/SpvcQd4tDnQJSGls3GAlDwiVyDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.228.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:9b:01:49:d9:00:61:88:8c:ab:03:af:c9:d2:0e:f0:a2:7e:
4c:5c:e1:1b:68:67:3f:02:24:c6:bd:da:e8:f1:52:ab:5f:05:
6e:bc:11:a1:2a:78:34:e1:03:47:37:81:74:22:92:64:21:94:
d5:fb:34:ad:5d:37:14:b5:86:ca:78:2c:ec:d0:60:24:bb:c9:
fe:f1:f7:f7:03:a9:8d:1e:61:9a:99:f1:ab:eb:96:eb:00:e9:
69:f9:e9:26:0e:94:b1:b3:de:a7:56:32:21:ae:8a:e6:47:7b:
64:16:fc:2f:e3:56:4b:d5:3b:65:66:84:ee:64:9f:00:af:71:
9a:c9:9f:a6:f4:28:eb:8c:b4:8c:e1:d7:3e:5e:74:6d:fb:73:
89:48:65:21:2c:60:60:e2:72:f6:c0:60:7c:56:53:fc:18:fe:
e4:7d:b3:d9:bc:1f:fe:ab:2d:e8:0e:22:78:18:df:79:44:ed:
a2:be:cf:1e:c7:0b:83:24:1d:62:43:18:a4:51:c5:be:8a:5b:
77:46:28:05:ad:48:9e:0a:08:2e:57:8c:13:22:f6:1e:2f:c6:
bb:cc:95:4e:93:73:8f:55:3f:be:82:2f:72:c2:52:c3:76:da:
9a:97:4e:be:07:7c:af:d3:f7:4a:b6:a3:88:d4:c4:2b:03:6b:
af:38:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org