Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8NmySO2lF3eV4pX2HLVrbFjOR04.roa
File: 8NmySO2lF3eV4pX2HLVrbFjOR04.roa (raw, json)
Hash identifier: +1BQ9nFjVLZYh/n/D4R2mDj+eNiDnZjaO/JYQUwAhEA=
Subject key identifier: F0:D9:B2:48:ED:A5:17:77:95:E2:95:F6:1C:B5:6B:6C:58:CE:47:4E
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6E3199
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8NmySO2lF3eV4pX2HLVrbFjOR04.roa
Signing time: Sat 01 Jan 2022 10:02:43 +0000
ROA not before: Sat 01 Jan 2022 10:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58079
IP address blocks: 84.1.245.0/24 maxlen: 24
84.1.241.0/24 maxlen: 24
84.1.244.0/24 maxlen: 24
84.1.243.0/24 maxlen: 24
84.1.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460206489 (0x1b6e3199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d9b248eda5177795e295f61cb56b6c58ce474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:35:58:4e:96:5c:5f:48:05:5e:9b:e0:1b:
66:27:6c:23:64:75:93:00:62:1c:15:89:7b:4e:98:
2f:6f:74:df:b5:87:3c:2f:fe:aa:6c:fe:a5:59:12:
c2:f6:1a:de:2b:9a:7c:e7:e2:69:47:d9:b8:22:1d:
78:68:48:b9:27:5f:3f:2a:76:c9:c0:e6:7e:00:33:
78:d2:18:db:f4:33:9e:49:a4:ec:8f:75:f4:d9:3b:
0e:30:85:21:fd:ac:20:b0:2b:3f:c1:28:90:84:e6:
b2:22:2e:d2:05:fb:58:ac:69:03:50:fe:ba:e1:48:
16:96:52:40:6e:8b:6a:45:7e:bb:1d:fc:b2:e5:89:
3a:8c:7a:52:33:48:65:77:a0:98:87:cf:7b:35:fb:
79:a8:e1:7c:bd:1a:b2:75:c7:26:b3:0d:20:2d:2e:
29:ce:13:64:d0:81:9a:fe:d8:05:f8:b0:09:f7:a3:
21:99:ce:3d:ec:fb:4a:dd:1f:ac:db:11:08:20:b0:
de:87:8d:0e:5d:e3:47:e4:ff:11:d8:84:b6:23:95:
ba:0b:1a:c4:10:58:2f:eb:ce:9c:17:d4:f2:ec:ad:
92:95:59:56:fd:a9:26:fd:96:95:07:a0:1f:05:03:
0d:e5:7d:50:f2:d7:df:77:86:24:15:67:5e:46:d1:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:B2:48:ED:A5:17:77:95:E2:95:F6:1C:B5:6B:6C:58:CE:47:4E
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8NmySO2lF3eV4pX2HLVrbFjOR04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.241.0-84.1.245.255
Signature Algorithm: sha256WithRSAEncryption
60:fa:fa:d3:13:28:30:c2:ec:5d:2e:2f:6d:63:39:ad:fe:bc:
4f:5c:21:f8:28:9b:68:93:46:88:53:ca:8a:23:ca:aa:68:80:
bb:2c:d5:18:3b:4c:67:c5:ad:c4:2d:2e:45:ed:0f:46:b2:f2:
55:17:2c:0f:67:b2:2e:1d:49:c4:3b:e7:21:7a:7e:d6:8a:b1:
40:0e:33:27:e2:cd:b8:c5:83:77:73:a8:e6:db:6a:94:c1:a5:
5f:b2:19:c4:6e:39:bc:90:83:e7:24:7a:2c:80:e1:99:0c:15:
dc:cc:04:34:58:73:31:b3:79:4d:bd:00:1a:1f:ad:5a:09:a6:
cd:af:a1:7c:ed:d6:dc:01:01:74:a4:92:29:ae:68:d8:df:0a:
35:49:5e:39:ee:84:f9:b1:4f:62:7c:f9:1f:3e:6a:c8:9b:4c:
7d:c4:78:4e:f9:f0:39:14:3b:79:b2:87:7a:79:d5:42:a7:8f:
02:95:81:53:bd:fa:de:ee:51:b3:42:47:75:32:61:b0:cb:f3:
1f:de:48:b3:6a:01:f3:46:9b:00:33:34:a8:3a:97:62:56:0c:
25:26:8e:9a:9f:e8:c7:68:c2:ad:cd:84:c1:9e:1c:a5:28:38:
d3:40:6c:b7:4b:67:33:b9:9e:fb:45:52:da:d5:f6:59:5f:b3:
bd:fb:fb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org