Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9XleNT3DVdTqAZ_nh4v7bp6fTio.roa
File: 9XleNT3DVdTqAZ_nh4v7bp6fTio.roa (raw, json)
Hash identifier: ZiKFaWbc07+5RPLfOfwDzMlVybQ2FNUS7Kpa2ID4dAY=
Subject key identifier: F5:79:5E:35:3D:C3:55:D4:EA:01:9F:E7:87:8B:FB:6E:9E:9F:4E:2A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A7E4D02
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9XleNT3DVdTqAZ_nh4v7bp6fTio.roa
Signing time: Sat 01 Jan 2022 04:52:02 +0000
ROA not before: Sat 01 Jan 2022 04:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196928
IP address blocks: 82.177.138.0/23 maxlen: 23
88.220.182.0/23 maxlen: 23
88.220.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981355778 (0x3a7e4d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5795e353dc355d4ea019fe7878bfb6e9e9f4e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:62:11:ff:dc:de:04:85:50:ad:f9:3f:fc:
b0:b5:25:eb:38:23:8b:63:58:e8:ad:4c:33:10:df:
ca:3a:87:bf:5b:89:1a:d9:5e:06:84:95:96:12:c9:
a6:92:9d:db:04:2f:d2:48:b5:be:1d:40:d4:57:41:
a2:26:de:fb:fa:df:af:49:b6:1f:fb:ee:c7:8c:14:
cc:4b:bc:ec:58:da:9a:c8:ea:63:bc:93:8a:9a:69:
d9:6d:09:f6:bb:67:cd:b4:fa:e9:26:6e:fb:bd:ca:
ad:2a:06:72:a9:00:06:fe:17:91:fc:58:7f:32:42:
44:c7:b1:c9:5c:d7:9a:1e:02:a7:a2:8d:94:a0:16:
90:7a:a4:5d:e8:a2:5b:d0:2c:7c:8c:35:1c:ae:05:
31:bd:d9:9f:64:20:de:5b:c4:8f:8f:2f:29:0a:77:
ab:97:cc:1f:ff:f2:ab:f7:66:94:c6:cc:8d:10:5e:
1f:a1:ef:66:22:ae:e8:74:90:0f:75:38:47:b4:97:
ef:56:79:ad:96:31:c4:88:3d:3f:f7:4a:f0:97:3c:
32:8b:35:79:ab:48:f5:3b:60:78:f2:af:1f:b5:5b:
3c:eb:02:7c:67:51:d3:03:d6:82:f5:dc:a4:fe:f6:
8a:be:7b:3f:25:43:9f:c4:2a:00:93:42:13:3c:44:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:5E:35:3D:C3:55:D4:EA:01:9F:E7:87:8B:FB:6E:9E:9F:4E:2A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9XleNT3DVdTqAZ_nh4v7bp6fTio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.138.0/23
88.220.98.0/23
88.220.182.0/23
Signature Algorithm: sha256WithRSAEncryption
70:18:03:96:78:df:99:e8:76:4a:a6:7b:f5:25:23:94:c2:1c:
8b:fa:37:be:22:4d:b2:ba:5e:8c:5b:2e:87:ca:f6:1a:6e:69:
89:8f:83:28:f9:81:6a:11:c0:02:e7:8f:d8:4a:91:2f:38:f2:
dd:50:24:d8:70:44:18:2c:85:56:ea:8e:ac:37:1a:0e:70:3c:
66:1b:29:ff:c9:20:fe:8a:78:e6:df:c1:a1:51:6c:3f:f2:fd:
2e:2e:4d:2d:50:a5:a7:24:91:0e:85:09:0f:c4:cc:f7:c3:76:
89:b2:dc:b1:52:18:3f:5e:40:ff:70:10:2e:4a:13:2c:c6:61:
59:fc:ef:86:e7:a5:e8:f7:3e:90:60:42:12:23:b1:6d:ca:99:
78:ad:ad:a6:7e:91:28:06:a2:11:8d:3e:f1:63:04:ac:b9:b7:
e8:51:15:a3:64:4c:c2:08:4f:46:a9:e1:4e:64:ee:4b:39:99:
54:16:06:a4:ce:38:ba:24:63:54:17:3b:e0:64:17:0b:8d:c0:
cb:86:73:4e:07:87:cb:70:f6:cc:49:84:3a:a2:a6:bf:e3:ec:
93:f0:76:56:b1:df:21:de:90:75:87:c2:59:70:bd:76:34:cd:
e2:02:32:3c:fe:39:31:46:bb:da:20:e7:d0:14:c0:1f:d0:3a:
b0:a1:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org