Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Rt8N6MDt0RvwwSyZee0dquIaIzQ.roa
File: Rt8N6MDt0RvwwSyZee0dquIaIzQ.roa (raw, json)
Hash identifier: a/4rBehwaaCPO7pwshePV0yN7Y0ZdWC57EE1IAIKcIE=
Subject key identifier: 46:DF:0D:E8:C0:ED:D1:1B:F0:C1:2C:99:79:ED:1D:AA:E2:1A:23:34
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0184F0B677EE26F4EF6A70B3E6BD0DE4CDA5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Rt8N6MDt0RvwwSyZee0dquIaIzQ.roa
Signing time: Thu 08 Dec 2022 07:50:00 +0000
ROA not before: Thu 08 Dec 2022 07:50:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199260
IP address blocks: 82.177.30.0/23 maxlen: 23
195.136.78.0/24 maxlen: 24
195.136.12.0/23 maxlen: 23
195.136.158.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:b6:77:ee:26:f4:ef:6a:70:b3:e6:bd:0d:e4:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Dec 8 07:50:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46df0de8c0edd11bf0c12c9979ed1daae21a2334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:df:d2:f5:74:bb:f4:9b:e2:73:16:f6:47:
ec:34:0d:d9:dd:b2:cd:75:b1:18:a8:c1:1d:09:7b:
1f:10:cb:02:cf:3c:ae:2e:9d:10:b1:30:66:d7:ae:
43:59:8b:68:f5:45:73:01:8f:17:ef:9e:a6:00:60:
90:de:46:ac:bb:7a:cb:68:74:ef:e5:0b:a9:67:af:
b0:91:34:f6:37:e1:25:5a:b8:10:0d:1a:40:96:3e:
8c:63:c8:29:66:61:c5:ee:14:74:f0:7f:ff:ed:c5:
23:d0:3c:ad:19:c4:f5:ca:cf:cc:d9:37:9e:52:58:
b8:f3:b3:96:fb:2c:a7:00:96:3a:f5:bb:58:06:47:
66:52:5d:8d:01:c1:36:82:01:9e:d6:67:25:fb:d1:
bf:df:b0:ab:22:dc:37:37:2a:e3:5d:d8:9d:9c:50:
45:25:68:25:6e:5a:91:7c:ea:05:99:0f:2c:ef:f1:
07:3b:56:7f:9a:86:ba:17:35:ad:09:cd:bb:79:fa:
11:9b:80:93:2d:00:77:57:8c:ca:74:d1:6b:a3:84:
af:07:30:d4:09:64:dc:a7:2a:39:b4:cd:c5:97:aa:
50:5a:39:77:02:ed:ee:c3:7a:02:3a:68:e3:a6:f8:
c2:92:8c:ae:fd:1e:da:c1:0c:6d:7a:d6:64:14:e1:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:0D:E8:C0:ED:D1:1B:F0:C1:2C:99:79:ED:1D:AA:E2:1A:23:34
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Rt8N6MDt0RvwwSyZee0dquIaIzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.30.0/23
195.136.12.0/23
195.136.78.0/24
195.136.158.0/23
Signature Algorithm: sha256WithRSAEncryption
29:05:81:34:e0:ff:b3:46:19:be:98:56:a2:69:0a:38:42:16:
d7:2f:cf:b0:65:fe:5d:27:58:bc:33:a1:c1:fc:74:08:4b:c5:
82:c4:03:1b:dd:d8:3a:32:4e:dd:71:3d:57:89:8a:dc:de:41:
a1:b6:3d:7a:db:84:de:41:89:64:6a:d7:37:b3:a2:3c:7e:0c:
28:e9:9d:6b:f1:90:72:6b:ce:cd:84:85:58:14:e3:32:e1:07:
12:b7:43:39:63:07:f2:9e:d9:eb:9e:07:99:c9:46:96:95:47:
bc:b7:17:02:51:cf:f1:b9:5d:80:3b:d7:82:81:f0:a1:ed:ba:
9d:f8:8c:05:98:34:fc:83:1d:c1:9a:7b:fd:64:e8:80:80:c7:
ed:fa:4c:04:3f:b2:2e:1f:98:96:4d:82:5f:40:74:b8:b5:c0:
24:53:4d:80:7e:44:b8:95:3d:ed:28:11:5e:ab:9f:36:a1:8b:
d5:92:b9:ed:2e:e3:cc:e0:ed:ba:7f:f0:b9:0d:7f:67:f7:30:
e5:fe:34:7d:a5:78:6a:35:0c:f0:12:61:7d:31:c7:ba:4a:6c:
9d:b6:3e:06:78:bb:82:7a:cd:2a:00:cc:0e:38:c8:34:a1:cf:
f8:65:78:ba:b1:1b:04:bd:52:52:15:50:89:fb:a8:5a:51:91:
e6:a1:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org