Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/AzezQBILuXkJNypZQGIXNrANi8I.roa
File: AzezQBILuXkJNypZQGIXNrANi8I.roa (raw, json)
Hash identifier: hSd8hIyK6dj1XttDnJvQDHDN7b9mB4Tv6VXHXFrCLxI=
Subject key identifier: 03:37:B3:40:12:0B:B9:79:09:37:2A:59:40:62:17:36:B0:0D:8B:C2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0184E79E475CCF1F88F64631E28AC821A382
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/AzezQBILuXkJNypZQGIXNrANi8I.roa
Signing time: Tue 06 Dec 2022 13:27:00 +0000
ROA not before: Tue 06 Dec 2022 13:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212552
IP address blocks: 212.90.102.0/23 maxlen: 24
103.75.196.0/22 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:9e:47:5c:cf:1f:88:f6:46:31:e2:8a:c8:21:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 6 13:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0337b340120bb97909372a5940621736b00d8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:b1:aa:35:03:3b:76:21:81:97:14:1c:93:
90:b4:8f:71:f5:cc:fe:1c:7b:04:1e:ea:22:22:86:
0c:85:89:e0:c6:2e:ba:ae:a8:a8:9d:bf:d6:68:29:
be:47:71:c9:0a:91:24:f5:4d:cd:b4:ab:da:e7:81:
f5:0e:11:79:32:ec:18:95:1b:78:9e:24:e2:c5:d6:
f6:5f:f6:7e:8e:a8:0f:e0:99:17:0f:5a:ff:42:b0:
78:c3:89:64:5e:be:47:42:4c:10:54:a3:bc:91:14:
07:b8:78:97:41:5d:01:81:d3:f7:a0:aa:e9:38:54:
ed:77:15:cb:5c:80:95:df:9e:f3:73:65:fd:0d:cf:
9b:6c:4c:4c:e7:0e:59:99:41:fe:27:2c:e9:23:5b:
88:d0:6d:21:7d:33:fe:22:1b:87:df:3d:b1:0b:4d:
d2:7c:aa:e7:b3:73:1f:b9:29:0d:e9:55:d2:b3:a9:
d3:fc:7b:61:92:30:c8:86:cc:07:a1:41:4a:46:41:
b7:8c:12:f1:41:ca:65:22:04:6b:44:1e:c6:d0:3e:
68:09:e1:94:89:64:22:bf:91:76:c9:07:f8:4f:ce:
39:89:bb:c2:69:fb:c8:7d:76:cc:58:12:1f:7d:ac:
0a:02:9b:96:07:b1:c6:46:c0:69:67:75:42:f7:5f:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:37:B3:40:12:0B:B9:79:09:37:2A:59:40:62:17:36:B0:0D:8B:C2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/AzezQBILuXkJNypZQGIXNrANi8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.16.0/24
82.115.20.0/23
82.115.24.0/22
103.75.196.0/22
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:43:a8:d2:49:4a:e1:64:ee:94:7d:c3:2b:92:f9:cb:9a:67:
b3:9b:e5:4f:5a:fb:5a:17:3c:1a:bb:5c:4c:69:87:05:d6:45:
91:0b:82:7c:35:74:34:78:c3:bf:f4:a0:c8:91:b6:f7:9a:42:
bd:63:13:c5:27:9c:1f:35:49:3a:a6:e9:8a:80:d2:fa:2e:a6:
93:c4:e7:11:5e:ab:43:3f:b7:05:80:cf:49:f1:9d:94:81:83:
c2:12:a6:b9:41:25:4c:ad:ba:04:05:ce:c2:0b:2b:2a:57:35:
d5:d9:ea:ce:80:4f:b5:d2:b1:c1:dc:b9:ff:e9:d1:e7:34:95:
45:bf:b3:5e:06:66:9d:04:e9:85:84:8f:85:c7:75:a2:e8:0e:
c6:9c:d0:f0:9e:da:6c:ea:5d:bc:bd:5a:3e:0f:61:13:e3:3f:
79:fd:f0:e9:18:b7:12:73:01:05:bb:4a:cc:3c:4e:a0:29:5b:
10:5f:4b:d4:4c:71:1c:d1:0c:c7:16:2c:e1:ff:ac:30:4b:4d:
52:15:2e:ee:4f:94:22:fc:41:68:a7:90:e8:9b:7a:0d:61:07:
ea:d8:6e:7a:56:14:18:fb:dd:d5:b5:b2:d8:59:9f:a4:54:a0:
0f:1a:3a:9e:c8:7e:f8:9e:6b:0b:52:9d:90:40:4e:66:8e:2f:
0d:b6:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org