Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X8ej6JniWo_JSfebg2L-mu5xi6c.roa
File: X8ej6JniWo_JSfebg2L-mu5xi6c.roa (raw, json)
Hash identifier: dxdW2gxRy2UHXkM2RqaBdkFiaOl93eyapnYFnHFC328=
Subject key identifier: 5F:C7:A3:E8:99:E2:5A:8F:C9:49:F7:9B:83:62:FE:9A:EE:71:8B:A7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184996D7388E2D900C30661AF969B666898
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X8ej6JniWo_JSfebg2L-mu5xi6c.roa
Signing time: Mon 21 Nov 2022 09:03:17 +0000
ROA not before: Mon 21 Nov 2022 09:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 82.153.132.0/24 maxlen: 24
82.153.4.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
82.153.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:6d:73:88:e2:d9:00:c3:06:61:af:96:9b:66:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 21 09:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fc7a3e899e25a8fc949f79b8362fe9aee718ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:88:03:d2:ec:c2:7b:4c:de:a4:d6:48:6a:
38:a5:66:b3:01:a8:6f:2d:68:b9:5d:fa:07:7b:91:
63:f9:75:8c:ba:36:54:55:32:2f:f8:16:e6:53:97:
ad:29:5d:5b:18:d5:d8:9e:a1:d8:70:9a:43:4e:3a:
34:7e:be:66:8c:59:a8:e9:aa:af:e9:9c:b4:d5:75:
0f:d4:b7:7d:7e:dd:1e:6d:38:3b:23:72:76:d2:3d:
86:4a:9f:be:04:a4:d4:fe:ba:3f:c3:fd:af:f9:a2:
3c:8a:26:84:e8:ec:2b:00:ed:ba:92:9c:fa:c1:06:
28:45:b5:a7:01:09:90:ec:e9:c1:0e:0e:65:c1:c9:
57:39:c2:8e:17:59:44:bb:1b:8d:dc:00:18:00:67:
ee:94:93:58:83:c0:c9:99:b3:1a:a4:52:7b:92:0f:
7b:56:59:1a:07:6c:11:d7:30:ba:4b:b1:76:4f:bf:
7e:ef:d7:69:e0:73:dc:44:0d:d6:96:ee:78:bc:3d:
51:0a:35:39:f7:d9:83:20:54:a8:9c:84:7d:79:36:
ef:42:51:fe:12:50:0e:16:90:e9:84:13:18:65:6d:
ec:f9:30:b4:b7:60:43:e6:c0:4a:12:9d:52:cf:73:
55:a0:af:3c:67:31:58:27:21:4f:78:43:48:ab:a9:
da:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C7:A3:E8:99:E2:5A:8F:C9:49:F7:9B:83:62:FE:9A:EE:71:8B:A7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/X8ej6JniWo_JSfebg2L-mu5xi6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.1.0/24
82.153.4.0/24
82.153.10.0/24
82.153.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:50:5d:e0:81:a6:16:06:a9:ad:3d:8c:60:e8:ef:83:9d:e6:
c1:ca:ae:f9:fa:3a:58:34:b1:34:b9:50:2e:5d:c0:fc:66:06:
e1:5b:0c:d7:67:a6:02:1b:6e:8a:ed:51:9c:3c:94:4b:67:53:
a6:1b:08:38:0d:bc:7a:78:f5:0c:9e:72:31:2a:1a:50:7a:dc:
2a:c3:7c:92:ac:eb:1f:6f:8f:fa:b8:a4:9e:ba:8c:81:9f:32:
71:63:71:93:e4:99:d6:e7:75:e1:8c:72:c0:b9:14:6b:fb:08:
fc:42:50:ca:e2:c2:3f:5d:1f:21:fd:91:ac:c8:00:35:dc:af:
fa:a9:e6:f5:05:fc:c5:04:b1:d5:dc:e1:27:ec:8e:22:31:0a:
7f:8c:d8:5d:08:db:42:62:16:a8:ee:47:d1:a5:40:24:65:ca:
54:68:a7:63:48:4d:31:ef:38:1a:86:fa:87:8f:b0:50:a4:74:
2c:ab:e7:fe:05:67:3e:d3:1c:41:11:13:19:0b:85:ed:ef:28:
96:b1:9c:dc:6e:34:23:dd:ff:94:a8:21:40:ca:b7:e6:ac:cc:
6f:5d:e2:20:d9:e3:ef:fb:51:9d:a9:a3:7f:12:a4:76:4e:64:
d9:af:33:0e:06:e6:79:29:21:d2:66:c4:4f:74:f4:e4:00:fb:
14:ca:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org