Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/35d3bXCVtuKcZvgqmq7Yx_8qwso.roa
File: 35d3bXCVtuKcZvgqmq7Yx_8qwso.roa (raw, json)
Hash identifier: pBRU+HLKo+zYoyaOCfEXY7JLb5Ec10qkAO9xr0SkDuA=
Subject key identifier: DF:97:77:6D:70:95:B6:E2:9C:66:F8:2A:9A:AE:D8:C7:FF:2A:C2:CA
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 381D5DC6
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/35d3bXCVtuKcZvgqmq7Yx_8qwso.roa
Signing time: Wed 09 Mar 2022 14:39:08 +0000
ROA not before: Wed 09 Mar 2022 14:39:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43647
IP address blocks: 82.148.0.0/21 maxlen: 24
89.232.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941448646 (0x381d5dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Mar 9 14:39:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df97776d7095b6e29c66f82a9aaed8c7ff2ac2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:e0:d6:92:b7:3e:8e:4c:c0:3e:be:a6:93:
47:50:08:cd:6e:83:c6:cd:ca:49:f3:2b:13:f8:d0:
1d:c0:45:b4:be:b7:22:af:20:0e:06:8f:13:cc:7b:
5d:a3:dc:e7:f6:fa:11:c0:e2:14:93:26:c2:80:70:
84:d3:2a:5a:58:1b:46:4e:63:01:b4:a6:2b:ca:1c:
93:52:35:c1:25:71:22:4b:b0:b7:e5:db:bc:70:1a:
2f:a7:87:e9:d7:c5:0e:a9:56:b7:27:45:b6:55:fd:
fc:ec:c3:8b:19:23:47:64:d5:38:94:87:36:24:a4:
2d:f3:18:3e:02:63:a0:74:ee:03:bf:82:bf:88:d2:
ba:b4:66:c4:6b:54:7e:af:4c:be:90:3d:1b:35:e4:
4c:97:ee:99:36:6e:2d:5a:c1:c4:cf:5d:80:b6:55:
35:0f:5e:c3:39:da:ce:9a:ae:ac:9f:ec:8a:86:88:
a5:8b:0a:98:cd:87:0d:aa:e5:aa:c6:96:bb:7b:4e:
b4:dc:c9:d7:c9:fb:05:ef:f6:33:7c:56:cf:77:ff:
2c:15:c9:89:de:db:d2:ea:e4:93:db:64:7c:bc:28:
65:93:0b:fc:b8:c5:f8:a7:6c:e9:c7:52:47:ce:4b:
77:fe:8b:9c:62:05:d4:e3:dd:60:01:f8:e9:ca:26:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:97:77:6D:70:95:B6:E2:9C:66:F8:2A:9A:AE:D8:C7:FF:2A:C2:CA
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/35d3bXCVtuKcZvgqmq7Yx_8qwso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.148.0.0/21
89.232.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:72:81:fd:86:6f:e3:ad:0c:a4:6d:00:1b:2b:27:4a:32:85:
dd:22:54:49:11:30:83:3a:f9:0b:8f:e7:b8:e6:e0:96:8e:a6:
80:f5:33:2a:39:0a:93:59:71:f5:b3:00:d6:62:58:33:dc:2d:
9f:cc:34:a6:1d:ba:76:96:b5:a4:89:ca:7e:a9:25:24:b6:85:
3c:7b:7e:52:41:14:81:e1:f9:43:63:76:5c:7f:dd:00:28:b6:
5a:6c:b4:cb:dd:b7:7c:74:08:98:33:a4:6f:ed:b4:64:32:6c:
ce:ca:3a:64:90:d2:b0:3d:56:ac:a1:bd:eb:99:75:2a:c0:6e:
22:d4:9d:d1:fa:78:53:e6:da:08:d9:6a:f3:22:1a:23:93:28:
a2:da:92:a8:4c:5e:29:e3:e6:9b:02:e2:b0:9b:83:6d:e9:fe:
38:07:82:b6:77:95:fa:e0:d7:fb:d6:db:ae:f2:11:7c:12:04:
03:51:01:f7:64:12:ec:64:1c:84:35:a3:41:cb:3a:b2:c7:4c:
41:84:c9:8e:ce:80:cd:50:75:e7:f8:86:25:10:fe:12:e3:b4:
85:8a:3e:06:e2:57:50:08:df:a4:31:c5:57:d5:1e:3e:34:30:
62:0c:22:71:c8:26:f8:53:ef:65:56:84:e1:ea:34:b3:ae:97:
08:d3:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org