Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/rGQ9saTFFpQiHA-jFMn_bHsVamI.roa
File: rGQ9saTFFpQiHA-jFMn_bHsVamI.roa (raw, json)
Hash identifier: FlItzPWrkgLcJitdc9ZXfWf5nnEUenQLASdtVUYN4mU=
Subject key identifier: AC:64:3D:B1:A4:C5:16:94:22:1C:0F:A3:14:C9:FF:6C:7B:15:6A:62
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 0182119BF6871BF9F627E7358CEE06197FB2
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/rGQ9saTFFpQiHA-jFMn_bHsVamI.roa
Signing time: Mon 18 Jul 2022 14:00:10 +0000
ROA not before: Mon 18 Jul 2022 14:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29017
IP address blocks: 185.181.116.0/22 maxlen: 24
91.197.228.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:11:9b:f6:87:1b:f9:f6:27:e7:35:8c:ee:06:19:7f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jul 18 14:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac643db1a4c51694221c0fa314c9ff6c7b156a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:a5:86:9a:3e:45:63:45:8f:1b:73:b6:c7:
94:88:b6:41:7b:cb:4b:b3:0a:b9:3f:b6:e5:e1:52:
78:0c:5d:8d:56:10:0b:64:91:3f:7b:eb:1b:b2:09:
6e:2a:87:ce:91:37:7f:03:6c:85:c6:be:50:bc:98:
88:f3:5c:bb:52:7d:db:74:1a:e0:c5:63:bb:58:80:
d0:d0:a6:f5:e1:ff:b3:e2:aa:df:22:f8:2e:c7:0e:
3f:6b:38:58:80:ed:b9:7c:67:da:bc:83:72:ca:ad:
eb:9a:c5:68:d1:5a:7f:70:f0:e7:40:ac:83:02:01:
26:7f:49:26:b3:6c:df:e7:20:ca:bf:a2:a9:56:0d:
89:df:a8:1f:61:7a:ea:67:80:25:5e:3b:ad:4d:b6:
a9:2d:08:ae:c6:04:71:b5:9b:cc:de:65:09:d0:df:
dd:48:2d:04:8e:fc:c4:5f:a3:7f:91:0e:36:2f:7d:
4d:37:a2:4e:19:ea:d0:52:c1:4b:c3:9c:00:32:4b:
37:b5:d5:bb:f4:22:2a:a1:fd:43:cd:b6:17:74:65:
cb:98:a0:bc:c8:9f:01:68:93:57:94:fb:66:b6:81:
ce:d3:ce:dd:22:81:0a:4b:f7:87:97:83:60:24:f4:
a1:68:c6:97:ec:69:68:4f:70:07:57:9f:78:bb:ae:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:64:3D:B1:A4:C5:16:94:22:1C:0F:A3:14:C9:FF:6C:7B:15:6A:62
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/rGQ9saTFFpQiHA-jFMn_bHsVamI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
20:1a:98:16:94:9c:37:91:72:20:90:d8:98:a9:d4:8c:9f:0c:
5c:c0:e9:26:6a:e0:4b:98:4d:b7:d3:8e:78:ad:3f:c3:cd:ea:
55:22:e9:f0:8f:03:b3:45:55:63:10:bc:13:9f:10:7b:00:12:
c1:ef:4d:18:e2:58:83:a5:21:b9:51:10:c4:05:95:d3:28:6e:
b3:7c:4b:ac:72:0e:f3:b3:d3:b3:db:42:1b:c1:a9:c5:87:92:
4d:df:7f:de:f9:5c:9a:75:86:59:dc:21:01:3a:4f:74:a0:66:
0d:08:53:97:01:75:97:4b:4d:f6:2c:2a:85:dd:99:43:a7:81:
d9:7a:48:b2:52:a3:78:74:36:83:e2:25:59:0e:de:a3:b1:6e:
8f:19:93:f4:d5:7a:46:1d:3e:79:e0:73:64:ab:de:a8:d3:01:
32:cd:20:e5:e3:e3:f6:22:05:35:12:cc:8f:05:0e:97:d9:cc:
dc:47:1b:5d:3f:a4:7b:91:fb:03:16:35:32:3d:ab:31:01:64:
29:b9:15:54:5b:25:b1:ab:4c:06:18:92:b7:4b:ae:40:47:31:
2a:13:00:09:12:92:3a:fa:63:7c:f0:e2:5f:dc:2a:6d:73:86:
98:34:9c:62:62:6b:97:46:63:50:83:40:a4:3b:8b:d7:34:70:
df:c5:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:24 2024 by rpki-client on console-ams.rpki-client.org