Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0zuNoY_Fs153JB_QbPQtfa7oC24.roa
File: 0zuNoY_Fs153JB_QbPQtfa7oC24.roa (raw, json)
Hash identifier: Y17x30E61FG25shzAe1P36fBBp7ru4OpJNvjez7Rv7c=
Subject key identifier: D3:3B:8D:A1:8F:C5:B3:5E:77:24:1F:D0:6C:F4:2D:7D:AE:E8:0B:6E
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 018C6D25D9C0B840A9ECB92C9D1E36A63A33
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0zuNoY_Fs153JB_QbPQtfa7oC24.roa
Signing time: Fri 15 Dec 2023 11:04:06 +0000
ROA not before: Fri 15 Dec 2023 11:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.56.0/21 maxlen: 24
82.206.64.0/21 maxlen: 24
82.206.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:25:d9:c0:b8:40:a9:ec:b9:2c:9d:1e:36:a6:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Dec 15 11:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d33b8da18fc5b35e77241fd06cf42d7daee80b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:33:ef:ba:89:fa:b1:33:76:16:83:4c:b7:
4a:b4:fa:40:91:f5:da:69:9f:3d:08:7d:06:72:5b:
25:de:68:f7:77:05:14:28:51:41:e4:51:48:ba:3a:
a5:74:c7:32:b2:5b:44:f0:d2:ad:ef:72:3c:6c:d0:
19:34:9c:ba:0b:35:58:c6:f3:49:39:2b:0c:4e:fb:
02:c3:4b:82:5d:b8:27:e8:42:32:de:f9:6d:f4:a9:
25:93:0e:1b:eb:75:fc:6c:9b:e0:ab:12:71:02:6e:
6d:91:e9:c7:f0:e5:b8:61:38:88:d2:ae:90:ea:73:
d6:8a:ec:79:cb:0d:8e:3c:1e:9a:7e:02:7c:6b:cf:
e5:8c:fb:c5:07:1b:80:ec:02:c0:0f:46:dd:00:c1:
99:9f:cc:7d:52:1a:ec:75:be:a4:f5:b0:ab:0c:8d:
b0:aa:14:49:fe:9f:39:cb:ca:cc:17:85:64:2f:e2:
65:5d:23:9b:87:82:2b:c4:ad:48:57:62:a4:9b:71:
d2:29:63:cc:6f:c2:f5:d9:05:62:17:91:07:12:19:
b4:83:5c:d5:6a:fd:a0:c0:a2:7f:4c:42:8e:1b:6a:
e4:4e:48:9f:27:68:1f:c2:e4:8d:f9:60:ab:96:18:
04:cc:15:64:d4:c3:d3:7c:6c:c4:51:a3:8b:4e:13:
17:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:8D:A1:8F:C5:B3:5E:77:24:1F:D0:6C:F4:2D:7D:AE:E8:0B:6E
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/0zuNoY_Fs153JB_QbPQtfa7oC24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0-82.206.79.255
Signature Algorithm: sha256WithRSAEncryption
51:5b:78:bd:90:ec:36:73:5b:ca:2d:9b:25:cc:8e:5c:dd:24:
1b:ec:48:03:1c:b6:1e:47:2c:12:67:f0:b3:c5:cf:2a:b9:cc:
6d:d9:5c:6e:f4:69:b1:54:b9:9d:3d:21:45:25:c7:68:89:70:
39:8b:62:c7:d9:eb:f0:26:23:af:76:02:b0:f5:de:dd:03:e1:
cb:80:6c:86:f3:a7:e0:7c:60:df:ac:bd:b6:56:0b:f8:05:b0:
dd:03:c6:79:1f:b8:c0:a5:42:8c:92:ce:49:b1:b3:e4:8c:8b:
6a:91:47:23:7d:27:6f:78:7e:b6:ca:c7:0f:70:01:7c:55:1e:
62:b0:66:4f:48:5c:fc:e9:1d:f2:a2:1f:0a:70:b4:fa:1b:b3:
ba:34:43:24:fe:54:05:fb:37:e3:66:2a:b3:02:63:54:95:99:
5a:24:34:85:e4:f7:0f:67:e6:b2:4c:57:8a:5d:60:8d:94:3b:
69:5d:65:cc:67:f9:7a:fd:65:41:34:fa:91:1a:70:8d:04:c8:
14:0d:64:1c:76:3e:1b:89:c5:ca:82:e2:b6:61:7b:c2:f0:53:
1b:64:3a:42:34:c8:ad:91:17:bb:4c:28:51:68:65:4d:6e:04:
31:f5:81:99:6d:73:9a:a7:81:ef:f4:19:61:f4:f8:1c:13:55:
79:22:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:02 2025 by rpki-client