Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PdDiMXA7jO6Z_B6vHm0bx7yEVqc.roa
File: PdDiMXA7jO6Z_B6vHm0bx7yEVqc.roa (raw, json)
Hash identifier: S8iygnvuoBecRp0oq8fIikErrKkQDDt08YBYtJT1q4Q=
Subject key identifier: 3D:D0:E2:31:70:3B:8C:EE:99:FC:1E:AF:1E:6D:1B:C7:BC:84:56:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0182F2FD9AB7CDDB8098BAE0364D430D2BC0
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PdDiMXA7jO6Z_B6vHm0bx7yEVqc.roa
Signing time: Wed 31 Aug 2022 08:21:22 +0000
ROA not before: Wed 31 Aug 2022 08:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 82.153.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:fd:9a:b7:cd:db:80:98:ba:e0:36:4d:43:0d:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 31 08:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3dd0e231703b8cee99fc1eaf1e6d1bc7bc8456a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:52:0f:4c:0e:19:70:b6:af:21:c3:59:f2:
d7:ec:0c:f7:01:d7:58:9c:4b:6b:d4:9c:1e:61:18:
5f:e4:7e:10:56:5a:4e:5c:2a:41:30:d0:01:0e:c8:
79:8d:0a:af:75:56:44:64:f2:82:4d:05:de:ac:21:
b9:76:7f:c0:34:b6:89:69:76:d3:e9:d6:af:89:eb:
5a:02:9f:cc:d2:cc:f7:55:18:eb:d8:8f:f0:b0:ce:
6e:8b:77:f9:1b:1a:1a:5f:0e:45:bd:c7:1f:f9:c2:
60:d8:c0:32:31:85:12:7a:68:40:77:5d:2d:26:bd:
77:b8:bd:a1:0b:e1:03:1b:92:ed:4d:e0:07:02:f2:
1c:23:42:f5:76:ab:f5:7b:29:23:d9:36:24:84:90:
4e:51:9d:8a:44:9c:a9:5e:0b:33:9b:7b:8e:73:76:
df:ce:ea:00:21:a0:c1:e7:7e:77:1b:56:65:ce:64:
fc:41:13:79:cc:32:ba:12:82:58:58:e9:59:a9:ef:
61:69:76:88:9c:66:a8:11:ab:88:be:0c:8a:66:92:
13:d4:ed:fc:2a:3d:5d:39:ac:1d:4e:da:d3:96:cb:
18:1c:e8:26:a1:b4:79:85:3f:d6:bc:12:4e:48:88:
62:8a:e7:58:6b:7f:1d:65:3c:c5:16:be:ca:19:3c:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:E2:31:70:3B:8C:EE:99:FC:1E:AF:1E:6D:1B:C7:BC:84:56:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/PdDiMXA7jO6Z_B6vHm0bx7yEVqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:88:c5:51:e1:ba:21:d4:57:c6:6b:7c:70:25:04:8c:d2:c4:
c6:93:3b:23:ad:50:52:62:6f:a6:00:81:25:91:54:e6:44:12:
32:93:a4:90:56:a6:74:72:d9:b2:74:0d:e8:c9:8a:40:ed:90:
f0:7f:51:7f:e3:35:fc:09:12:2c:e2:eb:8e:e8:9b:37:fe:72:
67:63:a3:7e:01:83:c7:d7:d8:a6:9f:23:e3:46:e4:81:11:83:
6f:1c:1e:68:a4:c6:c4:bd:da:c9:19:cc:00:fc:73:2c:65:bc:
ff:19:7c:45:e2:43:ed:57:12:7c:16:93:7e:1a:d6:d8:7d:2f:
28:fe:f7:9e:b8:51:5a:62:dd:1b:a2:b4:82:d7:a2:b0:cf:60:
72:ff:d7:e5:14:82:78:4b:73:80:19:1c:73:b7:ab:fa:e0:ce:
2f:82:08:7f:ca:e0:dc:70:38:fe:71:98:8b:44:03:17:56:57:
0c:ac:71:18:00:53:7b:38:18:57:5e:36:b3:a9:e0:69:ae:2c:
ac:6f:d0:fe:56:d8:27:2e:e0:81:35:04:1f:32:6c:23:05:6e:
17:1b:c5:72:f9:4f:08:56:82:3c:2c:df:a8:62:6f:1c:c0:c3:
cd:de:f0:2c:28:a0:97:cc:59:df:5d:58:af:91:a3:19:d2:f7:
fd:4a:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:47 2023 by rpki-client on console-ams.rpki-client.org