Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AKKdLfQxDlSL4MCqrNQCpkhEQpc.roa
File: AKKdLfQxDlSL4MCqrNQCpkhEQpc.roa (raw, json)
Hash identifier: reMmji8YXdSkdxIU9SXhStE/MxBoGh6Gw1REMT7dQs4=
Subject key identifier: 00:A2:9D:2D:F4:31:0E:54:8B:E0:C0:AA:AC:D4:02:A6:48:44:42:97
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018510EE085C254FB1FCC4804A5058B294E2
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AKKdLfQxDlSL4MCqrNQCpkhEQpc.roa
Signing time: Wed 14 Dec 2022 13:58:33 +0000
ROA not before: Wed 14 Dec 2022 13:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.153.240.0/24 maxlen: 24
82.152.178.0/24 maxlen: 24
82.152.179.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:ee:08:5c:25:4f:b1:fc:c4:80:4a:50:58:b2:94:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Dec 14 13:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00a29d2df4310e548be0c0aaacd402a648444297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:2a:20:53:2a:9c:b9:d8:23:ce:10:0c:18:
aa:26:06:94:27:1f:2d:7e:d0:29:91:42:76:7b:c6:
27:65:cd:7f:cf:c0:6e:f8:50:df:7c:34:7a:4c:03:
70:d2:cb:3d:6e:37:6d:90:14:a6:4a:25:d7:60:3c:
e0:7f:72:b1:ae:a0:30:25:5a:47:df:b5:10:d2:8b:
df:86:42:6b:0e:e8:73:6b:e9:2a:48:27:18:8c:b3:
f2:84:3a:a0:42:f5:2d:67:f0:e8:c0:05:70:08:f6:
b2:3a:98:95:94:e7:30:4e:6d:56:35:14:bf:f8:19:
44:b7:45:d2:f8:07:1d:61:5a:0e:9f:4a:34:bb:ec:
d6:06:e3:56:66:69:88:2a:75:62:f1:ec:d5:5f:f3:
1e:0b:e5:6a:47:18:e4:05:cb:52:6d:90:e0:6e:2e:
c3:ee:c0:88:48:e5:4e:11:63:58:d2:63:cc:10:d4:
70:8b:ac:fc:9f:6b:9b:d5:45:b9:e3:d0:c1:6d:93:
59:fd:75:33:86:79:ce:89:31:5a:7c:da:4d:78:a5:
b0:ed:82:d4:99:6e:1c:73:82:57:e4:64:b0:53:e8:
e3:73:b9:55:a0:e7:1d:8c:e1:db:3c:3f:1c:29:fe:
0d:76:8a:30:e0:84:4d:2e:9e:58:4c:5a:a9:e1:f3:
24:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A2:9D:2D:F4:31:0E:54:8B:E0:C0:AA:AC:D4:02:A6:48:44:42:97
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/AKKdLfQxDlSL4MCqrNQCpkhEQpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/23
82.153.68.0/24
82.153.240.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:b2:4d:ec:54:5e:83:51:ff:57:f9:5a:6d:87:92:23:18:
79:70:be:3f:ed:92:13:fa:5c:9a:05:55:cc:43:09:23:9f:dc:
03:f6:3a:f7:59:32:9c:f2:62:1f:71:fa:c7:cf:82:0e:c9:42:
ad:4c:e6:88:fa:f7:e8:ac:c7:e6:bc:3a:59:2d:bc:f4:00:31:
be:bf:d3:0e:03:c9:f5:88:c2:bb:34:b5:b0:1b:cf:5e:63:49:
a0:56:26:fe:9a:8c:84:06:7d:f9:fb:7f:72:27:59:c9:01:60:
b9:20:d6:72:54:46:31:1c:92:d7:ce:8e:12:ad:0b:15:9b:aa:
f3:ea:97:5c:8c:14:4e:29:7e:f0:8e:80:74:09:fb:06:1e:fa:
1f:82:79:c6:74:7c:30:27:db:d5:1a:83:a0:82:4c:a2:d8:89:
92:fd:4e:25:9a:0d:64:20:57:b5:f7:5f:25:0c:44:c1:b4:dd:
40:56:e3:14:65:f3:f8:95:b5:8a:63:dd:ee:31:90:28:b5:96:
ff:d0:d6:72:4f:39:2a:d7:61:2f:f9:02:3e:e4:87:62:9d:b3:
5a:f1:f7:b5:49:6a:f8:cd:9c:76:bb:28:31:fb:9b:5d:0c:18:
9c:4d:95:74:72:a8:83:76:d2:64:4a:4b:54:c9:9c:f4:27:c3:
0e:68:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org