Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CBeAlAYIxE30YkvAPqdCAP4_Qlo.roa
File: CBeAlAYIxE30YkvAPqdCAP4_Qlo.roa (raw, json)
Hash identifier: HTfxdhmQbETxmWTBNXtKs5fvn9gVV9ttnD4ppQynPOw=
Subject key identifier: 08:17:80:94:06:08:C4:4D:F4:62:4B:C0:3E:A7:42:00:FE:3F:42:5A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3BC3BD58
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CBeAlAYIxE30YkvAPqdCAP4_Qlo.roa
Signing time: Thu 05 May 2022 10:13:21 +0000
ROA not before: Thu 05 May 2022 10:13:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196928
IP address blocks: 82.177.138.0/23 maxlen: 23
82.177.163.0/24 maxlen: 24
88.220.182.0/23 maxlen: 23
88.220.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002683736 (0x3bc3bd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: May 5 10:13:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=081780940608c44df4624bc03ea74200fe3f425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:99:c1:49:88:61:cb:e0:44:16:80:f1:9e:fc:
9e:2f:16:63:91:c3:3c:e0:db:5b:b3:4f:2a:d4:f6:
07:88:45:5a:87:d6:6f:12:1a:02:7d:2e:9c:ad:a1:
9c:d1:ce:5f:36:7b:9c:db:07:3c:f5:9f:2c:d5:73:
91:9c:01:25:a3:35:39:10:b7:27:67:de:f9:3d:c0:
c2:fd:b4:cf:05:54:97:45:b2:e4:3b:0c:a7:f2:91:
45:f6:4f:cc:8b:20:b8:f0:85:1f:d5:24:f8:43:09:
47:7e:b6:ae:45:86:f5:05:43:23:7b:56:04:a5:8e:
9e:33:1c:51:19:98:47:56:9f:15:10:ef:01:e4:2f:
77:ad:82:0a:d4:bf:4b:61:84:15:68:b0:69:fe:0a:
cb:6e:4a:aa:de:df:ec:7b:03:24:5e:d2:7d:82:04:
1a:b6:f3:5a:2b:8d:35:eb:3d:47:be:bd:1d:4d:53:
11:8d:d8:2d:3e:be:a9:5c:4f:93:13:92:59:ce:60:
7d:0a:de:7c:8d:61:75:ef:ea:64:69:e9:20:ae:28:
6a:cc:04:6d:52:11:55:dc:be:63:81:4f:b6:8b:dc:
d6:e3:b6:80:58:4e:3c:34:2e:34:28:22:b0:4d:6c:
58:95:c1:5e:16:bb:ea:48:b7:17:41:7d:c3:96:de:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:80:94:06:08:C4:4D:F4:62:4B:C0:3E:A7:42:00:FE:3F:42:5A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/CBeAlAYIxE30YkvAPqdCAP4_Qlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.138.0/23
82.177.163.0/24
88.220.98.0/23
88.220.182.0/23
Signature Algorithm: sha256WithRSAEncryption
27:0d:c3:2a:92:6c:04:52:7d:fe:46:ae:f1:6c:f7:df:73:25:
f8:c1:3a:31:00:8a:a8:6d:46:c0:96:0e:b2:55:0d:a6:cd:68:
5c:08:1c:c6:49:e4:ce:f9:5b:ea:62:af:14:87:37:68:3e:21:
8c:ad:b5:94:6f:b6:de:5f:8f:9c:21:30:29:1e:89:0c:17:62:
cb:6c:51:d5:30:d3:a2:c3:14:3f:8e:ab:a8:4b:14:41:4e:24:
59:8e:02:5d:71:52:d7:34:64:b1:e0:08:0a:45:8a:07:65:65:
6c:c3:2e:7b:07:52:b5:a0:db:c9:70:ea:bc:fc:8c:35:68:18:
7f:3a:20:23:f3:a5:ee:45:a7:45:e2:d8:ab:68:a2:30:a7:48:
72:5f:5c:e3:93:7a:7c:dd:96:2b:ce:b7:08:7a:33:b4:34:cf:
32:2f:0d:ec:e5:d8:a7:91:40:ff:81:15:fb:0a:2d:07:70:80:
a0:61:ea:3e:f7:54:e8:6b:83:07:dc:5d:d6:52:4c:bd:fb:b7:
df:b6:a7:21:46:bb:d0:90:c9:5f:9d:17:a5:6a:9d:db:22:75:
43:60:1e:7f:6d:9c:9a:98:c1:dd:98:5b:a4:81:61:5e:69:b6:
fa:0a:f9:aa:cf:51:4d:97:00:85:a8:ff:23:ba:69:51:ab:7d:
24:db:2f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org