Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/dhfN8NUrDfWTOQp5Z8MP7LK0HMo.roa
File: dhfN8NUrDfWTOQp5Z8MP7LK0HMo.roa (raw, json)
Hash identifier: 4leDOIioJu14P+iNks5Wy0fB5NbH2XhjoxS+h5HZe2o=
Subject key identifier: 76:17:CD:F0:D5:2B:0D:F5:93:39:0A:79:67:C3:0F:EC:B2:B4:1C:CA
Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial: 94435C
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/dhfN8NUrDfWTOQp5Z8MP7LK0HMo.roa
Signing time: Mon 30 May 2022 08:01:13 +0000
ROA not before: Mon 30 May 2022 08:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 66.22.244.0/24 maxlen: 24
66.22.192.0/21 maxlen: 21
66.22.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9716572 (0x94435c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Validity
Not Before: May 30 08:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7617cdf0d52b0df593390a7967c30fecb2b41cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:47:47:1d:73:35:6b:94:c7:fb:39:62:b9:
20:c2:15:0b:a1:34:c3:93:54:49:e8:be:a4:31:bb:
b9:02:66:3d:14:5b:72:b4:25:eb:ea:18:25:8a:55:
c4:79:ce:65:21:e4:ab:75:e0:07:22:87:0f:64:50:
bc:1f:a0:5b:ea:d1:6b:38:0f:aa:e1:af:ed:65:13:
f3:7b:f7:f1:84:00:3b:3c:90:1e:17:b1:66:77:dd:
9f:50:47:74:b6:32:1a:e1:fe:93:a7:58:5a:1f:da:
22:1f:74:a3:2f:c6:f8:01:ea:fb:36:eb:e6:64:09:
32:e6:d0:1a:da:24:f0:5a:75:24:6e:20:81:93:b7:
08:e8:c2:ef:37:0b:39:11:1b:4a:85:b7:c6:4e:fc:
b1:a3:3c:75:79:b0:7b:6e:40:3f:a9:80:31:fe:f9:
a4:cc:33:1e:29:21:06:aa:b5:16:e6:dc:f3:97:e2:
87:69:bf:71:b7:07:e8:f6:f4:d4:eb:f3:c3:e8:ab:
a8:86:38:66:ff:73:5b:7b:cb:70:92:83:3c:88:fa:
ec:28:d5:9c:b1:ec:ef:28:23:20:bd:5a:91:11:71:
5f:9d:1b:bb:77:25:45:25:88:fe:e8:04:cc:85:1e:
b5:42:7e:27:15:eb:9d:0d:bd:e7:ef:ac:39:dd:46:
71:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:17:CD:F0:D5:2B:0D:F5:93:39:0A:79:67:C3:0F:EC:B2:B4:1C:CA
X509v3 Authority Key Identifier:
keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/dhfN8NUrDfWTOQp5Z8MP7LK0HMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.22.192.0/21
66.22.220.0/23
66.22.244.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fd:ea:56:10:2b:f0:c6:dc:40:3c:26:72:58:99:e9:31:3d:
6d:e7:18:ca:0c:ce:27:1c:b4:65:27:8b:c0:f3:6b:95:75:71:
de:3b:12:ac:1f:fb:62:38:0b:61:29:02:7b:cb:62:5e:36:f1:
d0:55:25:b7:76:4a:a7:08:13:07:c2:30:2e:75:a9:8d:84:a8:
d0:7e:42:e9:63:a9:1a:77:63:c5:10:69:bb:88:99:ab:4c:42:
6b:85:51:4b:e3:4d:c3:24:81:bd:b6:e0:1a:87:5b:4d:91:86:
78:8f:57:3b:eb:3a:95:d1:89:f3:8b:93:e1:cb:3a:4b:22:e7:
11:77:99:3e:d2:76:0b:35:2f:5b:9b:3a:c9:f0:3e:1d:c6:06:
c8:30:4e:8a:9a:ba:ad:23:f1:eb:ee:2c:17:31:77:4e:06:d0:
b2:5d:3c:74:5e:43:08:23:2c:25:ee:45:fe:ac:03:a4:98:ee:
89:47:fc:fd:53:a9:a3:57:28:c1:3f:53:b5:53:c7:0b:48:1b:
4f:97:1f:bf:5f:58:0c:f5:b4:39:24:ac:3b:71:df:10:e3:c9:
60:3d:02:d1:6f:03:0f:a9:67:86:ea:0f:46:dd:0b:87:63:4e:
b3:93:bf:5c:ce:c4:4c:06:ba:ec:0f:b4:23:86:8e:02:82:4c:
63:b4:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org