Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/sfv62J6rMyIhoiYGHCkBrgT24Z0.roa
File: sfv62J6rMyIhoiYGHCkBrgT24Z0.roa (raw, json)
Hash identifier: S2xDqXomsP6lOBhJCheFZV/Vdjq3EKIxCUNnbl1WhyY=
Subject key identifier: B1:FB:FA:D8:9E:AB:33:22:21:A2:26:06:1C:29:01:AE:04:F6:E1:9D
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 34E843C6
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/sfv62J6rMyIhoiYGHCkBrgT24Z0.roa
Signing time: Sat 01 Jan 2022 08:53:38 +0000
ROA not before: Sat 01 Jan 2022 08:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12445
IP address blocks: 82.115.160.0/19 maxlen: 19
82.115.176.0/23 maxlen: 23
82.115.176.0/24 maxlen: 24
82.115.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887636934 (0x34e843c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Jan 1 08:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1fbfad89eab332221a226061c2901ae04f6e19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:85:db:9d:b1:da:17:2c:e5:88:08:c3:ab:
9f:5e:d9:2c:55:17:e4:9e:ff:5b:7e:22:84:f7:04:
38:0d:4c:3b:dc:33:b6:a1:12:04:b9:cd:85:1c:68:
5a:78:b3:02:7a:d0:ea:a4:29:18:a8:05:99:83:5b:
08:ef:9f:ce:84:60:0e:70:72:a1:ce:21:1d:27:6d:
f3:c6:ca:03:4b:a9:7a:5b:30:fb:fd:03:32:cf:93:
39:46:8d:64:c8:62:f5:f2:64:a7:6d:0a:94:7b:eb:
ed:56:72:18:f0:f8:e1:66:2f:26:00:95:e1:91:c3:
aa:63:f6:92:27:5f:0e:9e:21:54:37:bf:db:46:77:
17:1a:f9:d9:fe:2f:19:e9:76:a0:6c:d7:fe:ec:c4:
4f:9f:ef:92:88:ac:85:d4:ad:44:12:cb:0d:01:b9:
ae:8b:e2:a1:db:4e:d5:fc:b1:1f:83:d6:73:79:16:
2e:4e:85:fc:0c:2b:c5:f6:50:e9:25:aa:1d:9d:c3:
10:37:88:9f:73:63:de:fa:3f:93:fd:a5:99:cb:23:
da:d1:11:5f:26:35:dc:b5:a3:dd:c8:8c:d5:74:72:
37:26:bb:af:dc:42:d0:83:41:95:50:bd:07:dc:d7:
2f:99:d4:ef:1c:12:25:c0:4b:de:6b:0a:2d:5e:6c:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:FA:D8:9E:AB:33:22:21:A2:26:06:1C:29:01:AE:04:F6:E1:9D
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/sfv62J6rMyIhoiYGHCkBrgT24Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.160.0/19
Signature Algorithm: sha256WithRSAEncryption
80:83:c1:73:33:9b:df:bf:bd:4c:92:7e:7e:99:79:62:5d:af:
bf:d2:4b:ca:0d:be:68:70:c2:19:30:34:17:c9:94:ff:da:bf:
67:01:5d:5b:00:63:af:e0:b1:a4:cb:04:dc:8d:26:67:6b:e4:
fc:45:e9:7e:cf:cd:70:2b:d9:c7:23:62:1c:07:0b:f5:53:aa:
c7:b7:ac:c3:f7:5d:5d:3f:5f:1a:c9:dd:7f:ef:87:77:06:d1:
c0:30:df:96:af:63:4b:84:af:c7:f6:26:5b:e4:ed:9e:b7:02:
5c:8d:57:e1:c5:36:cd:cd:a4:69:2c:2b:a6:38:07:a2:57:c6:
73:86:d9:7f:6b:ee:25:89:99:53:81:cd:95:fc:b1:c8:83:cb:
1c:d3:72:31:c3:d5:61:82:90:af:b5:28:10:2c:89:10:65:52:
cb:c9:62:d8:9f:7b:7a:50:c5:11:1a:4a:b0:05:33:5f:b6:9f:
8a:0c:fd:82:27:33:6b:41:4a:3e:74:35:c4:b9:a8:19:99:bd:
61:30:8b:2b:cc:c7:3c:b6:a8:78:52:3e:2d:de:d4:b4:2d:53:
57:16:a2:a3:a2:3d:50:b4:a8:35:63:af:a7:f9:29:0e:3b:d7:
ac:35:83:b0:f7:ee:ef:05:62:c2:36:31:3b:d7:96:06:9a:04:
b0:3e:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:06 2023 by rpki-client on console-fra.rpki-client.org