Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ckTktDzlQYHkA8nm59Qo-Q2WyuI.roa
File: ckTktDzlQYHkA8nm59Qo-Q2WyuI.roa (raw, json)
Hash identifier: KwJDeXAQTAB2q9xA7lGpnAYchhgIbDaGc6gvQBXty88=
Subject key identifier: 72:44:E4:B4:3C:E5:41:81:E4:03:C9:E6:E7:D4:28:F9:0D:96:CA:E2
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 0AA6C1B8
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ckTktDzlQYHkA8nm59Qo-Q2WyuI.roa
Signing time: Sat 01 Jan 2022 08:57:41 +0000
ROA not before: Sat 01 Jan 2022 08:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15974
IP address blocks: 185.44.120.0/22 maxlen: 32
93.157.208.0/21 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
217.23.74.0/24 maxlen: 32
2a02:e842::/32 maxlen: 128
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178700728 (0xaa6c1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 1 08:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7244e4b43ce54181e403c9e6e7d428f90d96cae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:a5:f6:22:7c:ad:0f:3f:84:ed:82:ba:bf:
2d:77:a8:1c:fa:b1:51:24:2b:7f:c1:cf:01:9c:4c:
5d:c3:eb:47:d6:d6:49:da:f2:21:7c:60:2f:40:7f:
89:b0:43:79:87:3e:cd:4d:06:84:80:75:a4:99:7a:
e5:3b:95:d0:ce:9d:12:46:3b:84:a0:3f:cf:e7:4b:
dd:34:0c:59:db:a5:9b:87:82:e1:1c:c8:cd:c9:2a:
c3:8c:23:e7:22:69:b8:10:0e:7d:0f:62:7b:61:9e:
7e:27:42:bf:cf:2e:5c:cc:20:2d:69:ac:35:05:0d:
ec:b9:10:65:06:f7:c6:2e:8e:47:0f:fa:a2:b9:9c:
d7:b4:80:b6:91:f8:2f:51:1c:ec:ff:7b:88:b2:e6:
ea:c3:90:e9:3b:b7:7f:ec:1f:75:88:e0:eb:b2:8f:
42:be:87:a1:6c:c0:62:d8:b3:e6:de:a1:5c:c4:1d:
32:d8:42:0c:44:5b:35:5f:8c:31:58:6b:7c:ac:44:
a7:b5:c9:e2:ee:ae:a3:88:2e:1c:62:42:a1:55:58:
d1:9e:ef:58:a9:4f:b1:2a:72:95:78:37:6c:bf:45:
af:b2:f1:1d:70:b6:2c:9b:57:b4:ac:1e:de:7b:e4:
84:bc:f4:9c:43:f7:90:df:d6:4f:50:ab:10:47:9e:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:E4:B4:3C:E5:41:81:E4:03:C9:E6:E7:D4:28:F9:0D:96:CA:E2
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/ckTktDzlQYHkA8nm59Qo-Q2WyuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.208.0/21
185.44.120.0/22
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:91:37:08:7e:58:95:77:64:70:d5:6f:29:7a:47:c1:c8:75:
e0:89:bc:bb:45:38:fe:f0:1e:be:a7:9e:fc:a4:ab:c4:22:51:
60:b8:69:fc:5a:1c:eb:98:9b:a8:aa:c6:fb:04:18:1a:3c:be:
cb:64:53:ce:d8:07:1c:0a:f3:b6:76:af:f4:56:d6:88:b3:d1:
ce:64:ed:20:79:86:eb:55:07:06:55:2b:71:83:99:71:c2:31:
bb:4d:57:aa:52:05:96:1c:27:08:e5:2a:ef:24:d9:c7:af:a9:
9e:62:e2:e9:80:08:8a:35:83:49:72:39:fb:e6:bb:85:d2:8f:
71:d8:8b:9d:b2:12:68:b7:62:09:e0:72:2a:b8:25:ea:6c:65:
57:c9:e0:b8:39:0d:86:3d:fb:03:19:a4:24:9e:1f:c5:fb:06:
56:32:fd:89:2d:36:38:a8:55:4d:c8:e5:72:a4:10:ef:59:e6:
dd:6b:b7:e3:9d:f6:47:f8:38:49:82:9f:30:0f:6e:77:26:fd:
36:f4:65:f8:29:64:3f:ee:03:3a:95:82:aa:eb:df:f0:62:70:
1a:24:4e:62:18:9e:21:2f:b0:67:7b:38:04:9f:26:66:54:b0:
3c:20:0d:d2:ce:8d:e3:cc:d0:af:f2:b7:55:c6:ba:06:92:5a:
dd:d7:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org