Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Snc7JC-CJOBckjD3NaMJn2pbRQQ.roa
File: Snc7JC-CJOBckjD3NaMJn2pbRQQ.roa (raw, json)
Hash identifier: O6cMA2bMG+FjRxmuI1xwXGh47uGouUCsBgSn9jGgwqo=
Subject key identifier: 4A:77:3B:24:2F:82:24:E0:5C:92:30:F7:35:A3:09:9F:6A:5B:45:04
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01847A903EAD14BAA720368457D8B39D21AF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Snc7JC-CJOBckjD3NaMJn2pbRQQ.roa
Signing time: Tue 15 Nov 2022 09:13:04 +0000
ROA not before: Tue 15 Nov 2022 09:13:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 82.152.178.0/24 maxlen: 24
82.152.179.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
82.153.67.0/24 maxlen: 24
82.153.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:90:3e:ad:14:ba:a7:20:36:84:57:d8:b3:9d:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 15 09:13:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a773b242f8224e05c9230f735a3099f6a5b4504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:1f:08:1f:e9:a0:08:10:39:50:61:67:10:
ae:66:ec:72:69:5c:7f:e3:1a:88:f5:a6:e3:96:2f:
05:96:70:75:79:57:ed:4e:bc:13:b3:a9:5c:87:d4:
ac:5c:76:e5:2f:1a:80:95:53:4f:af:d2:0c:06:42:
82:0e:69:7d:22:9f:64:13:81:72:bc:27:3f:c2:c3:
0f:9e:7d:24:9f:d6:98:15:96:44:33:9a:d4:55:de:
e8:05:73:a7:c6:24:73:ea:da:22:a0:5d:b2:94:d0:
f3:9c:eb:03:2c:c6:a6:51:75:f5:00:18:3e:bf:80:
96:a9:d8:f7:3f:b2:cf:2f:53:48:58:52:15:03:f8:
87:3a:ec:0a:9b:51:fb:76:03:8b:f3:aa:c4:05:d8:
e5:bf:53:eb:22:e1:4b:6d:cd:61:32:89:02:2f:27:
c0:fd:63:3f:1a:2d:20:c9:8b:7f:ad:42:12:f1:9b:
d9:11:af:eb:e7:f4:1f:a8:e3:e3:06:2d:82:a4:70:
db:30:88:a9:93:3f:eb:e6:45:e4:65:8b:af:50:49:
23:eb:dc:68:85:0f:a7:8c:26:10:88:f6:12:e0:f8:
46:90:29:23:5c:be:b8:6a:1f:37:7b:69:d0:50:e7:
a4:d9:db:9a:59:75:d2:d2:8f:2d:28:63:75:fc:ed:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:3B:24:2F:82:24:E0:5C:92:30:F7:35:A3:09:9F:6A:5B:45:04
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Snc7JC-CJOBckjD3NaMJn2pbRQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.178.0/23
82.153.67.0/24
82.153.69.0/24
82.153.243.0/24
Signature Algorithm: sha256WithRSAEncryption
21:14:55:30:96:38:6a:c7:f6:db:6f:4f:db:3b:be:ce:cf:bc:
ea:54:1a:6d:ff:65:24:15:cc:81:e0:e6:df:50:0d:8b:ef:47:
c3:62:f5:67:f0:dd:9a:3e:6d:da:e7:63:69:dd:4d:b0:2c:55:
f0:bf:08:5d:ba:fe:de:d6:f2:90:3b:75:ba:23:61:49:83:68:
0d:69:52:8d:88:6c:40:2c:3d:d0:56:48:ac:f6:70:d5:09:c3:
f5:c9:b3:99:12:3b:44:41:71:42:aa:bc:82:16:3a:90:5c:30:
c0:dd:7f:85:dc:19:8f:03:aa:b9:96:d5:d7:79:6f:29:e2:7c:
8a:3a:22:c7:1c:7f:cb:4f:78:9f:a9:d9:30:3e:37:25:93:75:
43:41:d8:03:d7:a0:da:cb:0c:77:f4:11:2e:88:fe:75:ae:b6:
cc:e0:4d:b8:66:2c:7b:c7:83:74:52:e7:d5:e7:fa:b8:19:cd:
cf:89:88:b7:67:1e:18:00:1d:af:e4:f2:10:02:e4:ba:0e:4f:
ba:7e:55:3c:ec:05:ee:a7:e4:95:69:49:5a:55:0e:76:60:ff:
17:d2:fe:64:98:70:84:8d:07:57:45:ba:3c:43:8f:03:15:58:
a5:c2:26:ac:78:c0:03:7a:a1:e5:a3:e6:18:72:c3:95:fb:cd:
58:4f:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:23 2024 by rpki-client on console-ams.rpki-client.org