Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kTXPwKVjjqK1IhNMvloy6Gqiw9c.roa
File: kTXPwKVjjqK1IhNMvloy6Gqiw9c.roa (raw, json)
Hash identifier: Pg3jFHnlsWEHZcaptnIg2w4NNtCllfm7aQ7HJHK/cas=
Subject key identifier: 91:35:CF:C0:A5:63:8E:A2:B5:22:13:4C:BE:5A:32:E8:6A:A2:C3:D7
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10BE672A
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kTXPwKVjjqK1IhNMvloy6Gqiw9c.roa
Signing time: Sat 01 Jan 2022 13:02:19 +0000
ROA not before: Sat 01 Jan 2022 13:02:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199980
IP address blocks: 82.160.170.0/24 maxlen: 24
82.160.168.0/23 maxlen: 23
82.160.180.0/24 maxlen: 24
88.199.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280913706 (0x10be672a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9135cfc0a5638ea2b522134cbe5a32e86aa2c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:f6:ee:88:85:80:db:ce:e4:ff:53:9e:dc:
02:32:f4:42:b1:63:31:5b:7d:f1:6c:6c:40:d9:f2:
7a:e3:52:42:dd:5d:47:a7:8e:f5:34:dc:03:6a:74:
e0:c7:ca:8b:25:5e:66:97:38:37:30:df:05:6a:6c:
b3:f9:66:53:39:ed:b1:f9:89:3c:c6:da:1b:71:2b:
2d:d4:e5:52:f6:95:a8:8c:d4:43:a9:5a:68:e0:a1:
49:27:92:b5:84:7f:7d:74:60:92:0b:3b:f4:42:1a:
61:08:ac:a5:b5:ac:98:c7:78:97:93:2d:44:3a:6d:
c6:62:cf:db:32:0c:fb:f2:4a:99:72:72:53:db:c1:
18:8c:56:33:f8:4e:e6:e5:49:ec:00:23:8a:ba:d7:
62:e2:8b:25:fe:2a:72:ad:9f:24:ff:eb:17:7c:1f:
9a:c6:07:22:60:45:dc:13:75:78:d3:17:b4:c2:bd:
db:b0:72:5f:24:e6:63:41:50:54:2f:7b:a1:29:27:
47:2b:6b:91:e0:47:6d:08:e6:84:29:15:a3:ee:4f:
c6:ab:1b:9d:49:c1:21:bc:21:b3:69:56:83:3e:8c:
59:6d:b8:ad:1a:b4:ec:48:9d:3b:43:22:03:08:ef:
7f:5c:da:62:85:7b:4f:ad:8c:1b:88:85:06:c9:1f:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:35:CF:C0:A5:63:8E:A2:B5:22:13:4C:BE:5A:32:E8:6A:A2:C3:D7
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/kTXPwKVjjqK1IhNMvloy6Gqiw9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.168.0-82.160.170.255
82.160.180.0/24
88.199.116.0/22
Signature Algorithm: sha256WithRSAEncryption
73:d7:79:ca:19:57:8b:c2:cd:41:f5:59:b3:65:1a:ce:21:3c:
ec:79:73:d2:69:6a:cc:5f:77:d0:ee:c5:01:be:00:51:93:7b:
bf:cd:d0:89:90:0a:ac:3f:26:58:a8:cc:e6:00:08:53:34:93:
66:0a:0e:fb:6d:72:2e:33:30:6f:e7:ce:52:4c:36:2b:56:aa:
9c:8a:9c:c1:45:fb:09:05:fb:ad:a9:e2:e0:32:17:18:80:06:
14:fc:cd:c0:9b:58:28:28:34:69:84:10:84:00:b5:3d:ce:41:
7d:97:2e:d4:56:b2:7d:41:dd:ff:34:75:31:7f:27:d5:9b:38:
87:9c:d5:40:1a:a8:e1:b0:1f:4e:b7:88:8c:ce:73:2e:75:3e:
2e:30:5b:1d:a8:5d:8b:b5:e3:88:3e:56:0d:c9:e3:a5:d7:9b:
e2:6b:04:7d:54:d0:02:98:c6:6c:d5:9d:b2:0c:7d:8f:7a:33:
44:c0:11:70:b1:66:ee:dc:8b:38:67:48:69:53:b7:d3:0a:bb:
8c:08:76:52:5c:8e:58:bb:d0:79:ee:84:e8:3d:43:42:9d:28:
99:a8:9c:f5:1a:b8:4b:f8:6b:b5:63:63:1f:3a:a6:02:17:6a:
c7:a8:a5:53:ae:74:b4:b5:6e:ba:8f:6a:18:41:6d:b3:ce:17:
a8:ab:95:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:56 2023 by rpki-client on console-ams.rpki-client.org