Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/10To_1ax0b2PnrqXDBaLWg4aqfE.roa
File: 10To_1ax0b2PnrqXDBaLWg4aqfE.roa (raw, json)
Hash identifier: 30cCncAJIC0Hua3u9N5e2yntbNAp8tt0i6JdTqHF4wY=
Subject key identifier: D7:44:E8:FF:56:B1:D1:BD:8F:9E:BA:97:0C:16:8B:5A:0E:1A:A9:F1
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0AAC3BDD
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/10To_1ax0b2PnrqXDBaLWg4aqfE.roa
Signing time: Sat 01 Jan 2022 08:57:45 +0000
ROA not before: Sat 01 Jan 2022 08:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51813
IP address blocks: 37.61.182.0/23 maxlen: 32
81.18.140.0/23 maxlen: 32
46.20.76.0/22 maxlen: 32
193.150.108.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179059677 (0xaac3bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 08:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d744e8ff56b1d1bd8f9eba970c168b5a0e1aa9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:93:18:f2:7e:2d:12:5e:b0:20:bd:3a:fb:
81:bf:d3:a7:17:63:20:2f:f2:c7:01:55:78:46:b3:
b8:9d:cc:14:8d:95:e1:de:10:b4:ad:6c:60:fc:d3:
a4:08:1e:06:c6:9e:eb:e4:d7:c5:e8:b3:bc:20:97:
67:28:26:41:78:65:45:f2:75:dd:57:ad:85:49:95:
60:5d:22:dc:da:bd:11:48:13:2f:46:a6:14:15:7f:
40:a7:a9:d8:f7:d9:fd:e9:f7:16:e4:10:bd:fd:80:
54:7b:7f:26:c1:15:bc:6d:f4:ba:f8:8e:16:72:11:
f9:b9:69:0d:63:d9:92:4e:b0:6b:52:ff:b2:0c:29:
54:9d:84:19:17:ca:07:b7:a1:37:f7:dd:e4:66:a6:
82:83:58:3e:ef:1b:c6:e7:83:0c:df:bb:f3:f3:8c:
73:e2:9b:09:06:2d:f0:ad:0a:ca:ff:83:22:06:f2:
6c:ae:de:cd:f5:97:2f:69:ad:28:b3:b7:6b:eb:9f:
4d:44:5b:16:1f:7a:35:e2:d7:24:e0:be:c0:ae:0f:
4b:eb:fe:4d:0b:87:95:21:a4:9c:4d:7e:99:3f:ac:
60:91:4b:b4:cc:57:39:fe:b3:85:e4:43:85:64:c8:
5f:bb:9c:13:b4:ca:c8:98:c0:b6:e0:50:b3:b0:3d:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:E8:FF:56:B1:D1:BD:8F:9E:BA:97:0C:16:8B:5A:0E:1A:A9:F1
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/10To_1ax0b2PnrqXDBaLWg4aqfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.182.0/23
46.20.76.0/22
81.18.140.0/23
193.150.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:3c:c1:40:70:d1:a8:6d:13:3a:cc:cd:e9:a9:a8:04:9d:7a:
5e:02:cc:a8:3e:e1:2c:40:a9:0b:17:1f:51:8c:8d:d3:69:87:
1c:58:1a:35:eb:df:84:36:a8:c2:2e:94:97:97:99:9d:db:3d:
48:ec:ac:98:71:42:ee:aa:ac:f5:91:16:49:2e:20:d0:36:16:
6f:91:10:6d:00:77:1d:f2:e3:a1:39:26:a7:f7:cf:3e:f2:12:
2b:4e:e9:ec:b9:b3:36:e7:2a:70:3f:54:39:f5:34:ae:0b:7a:
a4:66:e3:4b:bc:9d:ee:cf:28:79:0c:76:b4:c6:8f:68:ce:5e:
90:22:1d:b0:bd:39:9f:28:33:40:74:4a:5d:77:f1:ea:d7:a1:
34:1d:aa:11:47:38:ff:29:bf:28:1e:cc:91:9a:6b:52:a8:9e:
cb:c8:ff:1f:c6:8c:bc:4f:07:8c:b0:f2:50:64:fe:fa:12:52:
1f:4a:9a:db:b1:9d:79:24:b6:db:ec:93:b7:8b:5c:01:ec:63:
83:e1:25:82:ea:d2:d9:c0:f7:d5:c8:2e:70:67:3a:92:66:8e:
e7:61:52:69:30:a6:e8:77:28:76:40:6d:08:09:bd:10:11:95:
d7:f3:b2:cb:c4:96:e4:9c:fe:a0:39:a4:f6:4a:dd:84:72:26:
62:c1:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org