Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/82xBJYnzx6EFTtxaVpJHKUq1Ybg.roa
File: 82xBJYnzx6EFTtxaVpJHKUq1Ybg.roa (raw, json)
Hash identifier: 065ufYr30jEU0U89xCLpcAtg0MlPcJ6wU5l9BOT6BI4=
Subject key identifier: F3:6C:41:25:89:F3:C7:A1:05:4E:DC:5A:56:92:47:29:4A:B5:61:B8
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: FC3DF7
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/82xBJYnzx6EFTtxaVpJHKUq1Ybg.roa
Signing time: Sat 01 Jan 2022 13:00:59 +0000
ROA not before: Sat 01 Jan 2022 13:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.132.112.0/24 maxlen: 24
79.143.130.0/24 maxlen: 24
79.143.128.0/24 maxlen: 24
45.152.34.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16530935 (0xfc3df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 13:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f36c412589f3c7a1054edc5a569247294ab561b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:9d:69:60:68:9e:9f:dd:9c:b3:e5:26:12:
c9:e5:67:25:2a:f2:69:23:8c:cd:a1:10:72:6f:a1:
ea:85:c7:b6:45:65:29:d1:c5:53:76:55:96:08:32:
6b:61:6c:32:c1:2c:7a:49:7d:7d:6e:8f:38:fb:04:
ae:bb:00:2b:8e:09:ba:70:98:1d:9c:d2:5c:93:f1:
91:60:a7:6b:81:c6:64:05:83:01:88:c3:73:ba:42:
24:6d:18:65:91:f9:c7:ac:e8:6b:0d:39:44:a2:9e:
5f:8e:40:77:8a:f9:f4:ab:d5:90:33:64:e5:3b:ce:
77:54:52:f7:77:ed:91:5c:9a:91:85:f5:09:10:13:
ee:78:f4:45:43:44:64:71:bc:f4:4d:d0:21:8c:44:
46:a8:3e:b9:5b:62:47:07:0e:22:6b:ad:38:58:b8:
c5:d9:44:4b:b3:76:91:d6:59:e9:17:53:55:e7:64:
4f:c9:4b:10:6a:87:43:0f:af:ea:98:aa:a3:cb:da:
6e:38:ab:23:d2:bc:28:35:b0:3d:4f:d5:f5:cc:f2:
fb:36:33:03:51:aa:1f:71:32:ab:d6:b3:ce:e3:a9:
98:84:54:cc:a0:c7:ac:5f:41:e5:10:89:9d:8d:8c:
2c:26:a4:f0:e6:3d:ea:2e:85:19:64:12:cd:10:88:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:41:25:89:F3:C7:A1:05:4E:DC:5A:56:92:47:29:4A:B5:61:B8
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/82xBJYnzx6EFTtxaVpJHKUq1Ybg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.112.0/24
45.152.34.0/23
79.143.128.0/24
79.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d8:37:15:92:1a:ae:c3:8c:63:61:87:e7:7c:fd:75:48:96:
fb:67:e8:0e:ac:ca:c4:7e:33:53:33:e2:fb:5e:e6:da:1a:b0:
2c:21:ff:f1:fc:96:10:f1:65:3e:52:de:9f:51:cd:62:ac:96:
09:a2:92:67:b5:8c:e5:d4:76:8c:db:4f:91:bc:77:f4:a1:26:
f1:a7:c6:96:f0:2e:a8:84:4c:13:ec:7f:1b:4f:d0:4c:6b:cb:
1b:ce:2b:18:86:b8:f9:99:c0:77:a2:5b:a6:f9:ec:42:d4:5f:
21:f2:e7:b8:8f:cf:39:05:dc:32:37:16:3b:fc:b1:a8:d2:b7:
aa:26:67:49:22:b4:db:2d:bc:76:08:30:f4:c1:70:c2:da:63:
a7:a2:55:2a:e4:dd:65:86:81:6b:87:fa:6b:93:70:23:8e:aa:
5d:38:86:7d:78:f9:3a:4a:8e:05:7e:52:5e:01:67:87:97:71:
16:1b:45:6c:c5:34:3a:75:83:14:eb:90:13:fa:b3:ee:7e:d8:
be:00:39:5a:39:37:2c:b7:d6:a7:f7:7c:da:a3:14:e5:b0:5b:
1c:ad:d6:14:b0:87:cd:05:4f:fb:30:60:78:7f:e6:79:c9:f6:
7f:50:14:11:26:15:69:a7:64:15:44:b4:c3:7c:7f:a8:3f:52:
8b:79:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org