Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/ApjvU_I6efFDAGSAoX-VhiZ-vtM.roa
File: ApjvU_I6efFDAGSAoX-VhiZ-vtM.roa (raw, json)
Hash identifier: UoYZIjTtO9/HLdps4hoXTDrdUYsiV3o7ZgrrvNhHbF4=
Subject key identifier: 02:98:EF:53:F2:3A:79:F1:43:00:64:80:A1:7F:95:86:26:7E:BE:D3
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 0630B6E9
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/ApjvU_I6efFDAGSAoX-VhiZ-vtM.roa
Signing time: Sat 01 Jan 2022 01:56:22 +0000
ROA not before: Sat 01 Jan 2022 01:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56791
IP address blocks: 185.45.100.0/22 maxlen: 32
176.32.128.0/19 maxlen: 32
176.119.197.0/24 maxlen: 32
2a00:9e80::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103855849 (0x630b6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Jan 1 01:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0298ef53f23a79f143006480a17f9586267ebed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:4b:86:9c:e3:18:1e:1e:0c:e6:98:1e:ff:
1f:0f:d7:26:bc:39:04:06:df:55:a8:67:0a:85:b3:
0d:a6:4d:d5:54:76:af:26:5e:f0:00:e2:66:da:b0:
8d:c6:54:a6:f5:52:6b:f7:2b:51:77:99:61:08:d2:
f6:94:73:bc:f6:9f:78:22:ac:15:d2:99:ac:18:fc:
a8:29:2f:f8:db:15:fe:6f:91:60:02:73:9f:8d:4d:
65:75:9c:8f:47:fa:7c:1f:e7:7f:f8:b6:9d:73:9e:
30:95:a3:f5:32:c8:13:83:bd:63:96:fc:9a:d5:e7:
83:f5:21:f6:a5:89:6e:3b:cd:69:29:7f:9e:f2:d6:
8f:32:3b:57:f2:f6:c9:ac:b1:4c:04:c3:57:93:f0:
46:a3:fb:c3:10:76:2e:79:20:51:e8:01:43:bf:f9:
eb:a2:4d:30:23:f6:94:32:66:27:0c:93:f0:61:89:
00:e6:a9:4e:9f:d8:ad:d8:bc:41:73:69:fc:0a:6a:
7b:52:98:2f:1e:5f:64:c8:a6:eb:03:c8:77:b3:aa:
bd:ef:59:e1:f8:eb:b8:89:1e:20:f8:0b:2d:d3:d1:
06:f8:4e:30:54:88:e0:f0:0e:23:ee:49:51:36:b6:
c9:68:71:29:2f:ac:5c:c6:66:88:5f:9c:02:1c:47:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:EF:53:F2:3A:79:F1:43:00:64:80:A1:7F:95:86:26:7E:BE:D3
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/ApjvU_I6efFDAGSAoX-VhiZ-vtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.128.0/19
176.119.197.0/24
185.45.100.0/22
IPv6:
2a00:9e80::/29
Signature Algorithm: sha256WithRSAEncryption
42:1f:85:ca:a2:82:1f:02:72:34:0d:27:9e:91:6d:e1:0e:5c:
08:55:8f:8c:c1:23:cd:3f:cc:67:da:ca:39:33:7d:75:90:92:
91:7f:e9:4c:41:78:33:7f:d9:a2:b5:0e:4e:40:62:3c:89:bc:
10:43:4a:87:97:d4:aa:5b:78:a1:f0:8c:6d:89:2b:5f:15:bc:
9d:da:16:df:ba:67:f5:07:6e:51:54:8c:7a:21:8d:c0:c9:21:
8d:aa:2f:4f:41:11:72:ef:44:39:1b:a1:25:17:7b:af:f5:5f:
5d:a6:3b:2d:36:1d:79:a3:4a:bc:72:d0:d7:fc:9b:5d:1c:15:
6e:91:6a:37:03:6b:25:99:43:b3:04:2d:d4:55:cb:eb:72:cf:
83:d0:76:a1:61:a5:6f:fc:9c:bc:7d:18:48:97:4a:4b:ba:d6:
3b:c6:62:e6:62:bf:45:3d:4e:99:84:22:22:e9:6d:8b:57:5b:
37:34:83:7e:9a:d8:f4:f2:66:0a:a8:a5:de:36:d5:0a:a5:0a:
b7:60:73:8d:0d:05:63:ac:b4:de:0a:55:93:1a:23:fe:84:7f:
36:46:bf:27:e1:c7:b0:34:4c:cd:07:58:2c:13:74:25:1a:e8:
90:f2:13:45:98:1a:06:f7:0c:eb:1b:39:aa:cc:3c:46:95:6f:
da:c6:03:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:43 2024 by rpki-client on console-ams.rpki-client.org