Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/82rIHk5j6svDOGmVJKqzZL7ZzA0.roa
File: 82rIHk5j6svDOGmVJKqzZL7ZzA0.roa (raw, json)
Hash identifier: 6r7wmmsN9ZKgUEOgM8IL64vYAclC2G2UE4hsiiPdp/w=
Subject key identifier: F3:6A:C8:1E:4E:63:EA:CB:C3:38:69:95:24:AA:B3:64:BE:D9:CC:0D
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0DEA4929
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/82rIHk5j6svDOGmVJKqzZL7ZzA0.roa
Signing time: Sat 01 Jan 2022 10:54:11 +0000
ROA not before: Sat 01 Jan 2022 10:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 168.199.0.0/20 maxlen: 24
168.199.112.0/20 maxlen: 24
168.199.16.0/23 maxlen: 24
168.199.22.0/23 maxlen: 24
168.199.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233457961 (0xdea4929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 10:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f36ac81e4e63eacbc338699524aab364bed9cc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:3e:77:8c:52:a8:0d:b8:25:55:7c:e7:fe:
f0:57:55:1e:16:a3:85:8d:91:47:78:82:87:62:54:
65:f5:0d:e0:26:d8:37:68:7e:f4:f8:e5:b6:f6:50:
02:10:a7:4f:7d:0d:e7:5b:c4:7f:3b:49:72:4c:28:
45:fa:4a:5b:f7:f8:9f:ab:3e:df:70:8e:e6:9e:17:
ce:8f:c6:7e:57:bb:25:b1:49:ee:fd:de:aa:64:c5:
e5:8c:7b:97:c3:d3:db:04:df:38:f0:7b:ad:66:8d:
e6:4e:1e:0e:7c:ae:9f:85:4f:a7:26:7c:69:3a:dc:
a0:60:7e:dc:9f:46:3f:a9:6e:8e:1d:a3:f4:e4:f4:
09:81:f9:07:eb:3a:a3:da:6e:f1:fb:7e:37:98:15:
5d:93:4f:3b:a5:e9:94:d0:ec:43:87:f4:5d:49:4a:
50:3e:87:55:2b:89:a2:98:2b:92:81:19:7f:8a:f5:
e6:0d:bc:77:18:64:39:cf:d3:6c:99:31:69:51:7a:
f2:5b:c7:f8:0c:8c:c3:44:de:29:90:0a:04:5e:c8:
4e:6f:bd:13:91:c3:61:93:8f:6a:70:77:ca:24:7b:
3f:28:53:41:2f:47:5c:13:12:50:37:79:34:19:74:
c5:92:6c:4f:04:94:77:87:a1:a5:d4:38:e3:22:67:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:C8:1E:4E:63:EA:CB:C3:38:69:95:24:AA:B3:64:BE:D9:CC:0D
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/82rIHk5j6svDOGmVJKqzZL7ZzA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.0.0-168.199.17.255
168.199.22.0/23
168.199.48.0/20
168.199.112.0/20
Signature Algorithm: sha256WithRSAEncryption
82:46:03:95:d1:f0:fd:45:78:8c:8b:72:1f:84:21:93:c8:4d:
9d:fa:61:56:c8:06:7f:66:44:4d:18:b6:af:1b:25:d0:47:d9:
61:b3:3a:53:07:b2:c4:c9:66:d5:61:5b:a0:8d:14:1d:5d:ce:
eb:2c:48:b4:fb:bd:45:3f:fc:2e:c8:04:a3:b3:34:d5:ff:7e:
53:42:70:c3:a2:ba:07:0b:81:b1:d8:8a:43:cd:23:21:b4:2c:
14:98:e5:1f:8e:58:ae:ec:6e:82:ac:38:ea:ef:d4:50:93:bc:
c9:62:30:7b:59:a1:5d:24:23:7c:b4:c5:18:7f:1a:f5:c2:64:
b3:9f:9e:e2:08:40:a9:a7:5f:b4:34:0e:12:cc:59:e8:f5:1d:
df:99:d3:b4:05:52:00:7d:c8:c4:d1:3b:78:b6:fe:a3:1c:36:
c7:3a:a7:16:fd:6a:b5:5b:52:ae:d4:fe:16:c2:a3:03:5a:df:
91:b7:a1:b8:86:3d:05:42:0e:77:93:d4:1f:2b:ae:60:f8:a0:
ca:fb:4d:df:ae:0c:cd:73:6c:f1:aa:76:59:09:d8:72:a4:6b:
bb:ff:14:a3:12:b5:29:a2:14:30:44:05:97:e4:f1:75:45:2b:
b9:e9:6a:c2:24:22:38:6c:63:29:37:6e:66:38:3c:3d:0a:3b:
67:22:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org