Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7rlk9im_k6FpPysQ4qJx3dBl_Ag.roa
File: 7rlk9im_k6FpPysQ4qJx3dBl_Ag.roa (raw, json)
Hash identifier: MC/p2EUevgcNcyCrRqTK7ViS7eM7RkEYiNmtdqlSEsw=
Subject key identifier: EE:B9:64:F6:29:BF:93:A1:69:3F:2B:10:E2:A2:71:DD:D0:65:FC:08
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0182E9338D50E9FE295137C9063E21C168A6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7rlk9im_k6FpPysQ4qJx3dBl_Ag.roa
Signing time: Mon 29 Aug 2022 10:44:06 +0000
ROA not before: Mon 29 Aug 2022 10:44:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9910
IP address blocks: 188.253.4.0/22 maxlen: 22
188.253.8.0/21 maxlen: 21
188.253.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:33:8d:50:e9:fe:29:51:37:c9:06:3e:21:c1:68:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 29 10:44:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eeb964f629bf93a1693f2b10e2a271ddd065fc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:6f:1c:a6:50:2b:50:96:ab:59:36:e3:72:
7c:a3:55:7b:83:31:24:e9:e0:8b:56:0d:61:45:83:
42:d1:29:8f:56:48:52:62:4e:0c:d3:2b:76:d8:1c:
78:24:6c:94:18:73:63:bf:8f:dc:7a:36:f3:1f:90:
00:8f:c1:0b:14:0e:f8:03:2c:39:ff:73:e5:4f:1d:
94:61:3d:37:ec:b5:7a:6f:94:ff:4b:11:5b:48:4e:
0b:cc:e2:7d:96:b0:a9:e0:37:c8:8d:4b:83:28:77:
10:43:67:19:07:6f:25:4f:84:9c:46:de:23:b8:d7:
8b:e3:fc:06:90:b2:88:5a:da:1f:aa:18:f2:7d:6a:
05:0c:8d:96:a5:a7:01:5c:6b:ed:0f:bf:39:38:ef:
c4:a0:3b:ae:b0:13:53:86:82:97:a6:7f:a4:dd:f0:
bd:0a:b8:4c:16:7a:ae:e7:89:8c:8c:0c:46:94:d6:
27:f4:4c:34:2f:17:21:ff:2c:1f:e3:53:e5:05:0d:
b5:05:6b:c3:c7:a0:b3:6d:13:53:f6:62:d7:66:02:
34:57:e0:b7:8c:b9:b5:31:b7:c5:dd:b2:db:7e:72:
8a:73:af:16:c6:d0:0b:c4:de:ba:ef:0a:3f:bb:3d:
a0:5a:40:03:61:e3:b8:4f:8e:fe:26:0f:0b:75:08:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:64:F6:29:BF:93:A1:69:3F:2B:10:E2:A2:71:DD:D0:65:FC:08
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/7rlk9im_k6FpPysQ4qJx3dBl_Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.4.0-188.253.31.255
Signature Algorithm: sha256WithRSAEncryption
98:ee:26:5b:9b:b9:31:70:d8:94:5a:be:ae:1b:57:c6:db:f1:
8a:99:95:60:7b:7f:26:87:69:e6:22:82:f6:a5:c1:2e:3e:62:
a9:fe:01:0c:d4:68:03:0f:46:bc:65:68:39:37:23:e0:4e:7f:
60:b2:51:6c:09:af:f6:14:fd:de:c5:ac:61:3b:ba:e8:f9:d5:
72:35:71:d5:fa:62:2b:e0:17:30:4c:69:66:d7:f8:76:12:45:
65:e3:77:d2:16:d1:4b:a1:38:41:eb:54:60:56:dd:d2:a2:ef:
68:1e:e2:69:3d:b1:1b:a4:d4:f7:9c:68:cf:7c:66:a8:27:44:
7c:dd:13:e7:70:c4:dd:8c:ed:70:52:c7:d4:ed:db:37:06:27:
c7:b4:e1:df:51:b9:b6:24:22:7f:c4:99:c7:3a:c9:ba:26:06:
b2:60:15:3a:54:5e:95:cc:91:64:48:02:71:7f:6d:5f:a2:01:
6a:f7:60:6f:d5:48:64:d3:da:10:07:44:74:53:18:6d:16:eb:
c1:e5:5d:11:ec:df:a9:e3:1c:f6:db:f8:49:03:49:48:0d:82:
1b:b9:a8:59:8e:6d:ba:00:8a:bc:16:72:44:6c:5f:6e:71:03:
bd:e8:00:93:e4:ec:1b:9e:49:05:f9:6f:db:74:24:3a:48:40:
d7:a5:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org