Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/d8G2_z_QeenjHOShBXUCoQvKxIg.roa
File: d8G2_z_QeenjHOShBXUCoQvKxIg.roa (raw, json)
Hash identifier: hRdY072MVVfYddXtDiWQ93/nZ8kJOpYlW6VPsgPYxQc=
Subject key identifier: 77:C1:B6:FF:3F:D0:79:E9:E3:1C:E4:A1:05:75:02:A1:0B:CA:C4:88
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0A5AC1D3
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/d8G2_z_QeenjHOShBXUCoQvKxIg.roa
Signing time: Fri 01 Apr 2022 12:44:16 +0000
ROA not before: Fri 01 Apr 2022 12:44:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15739
IP address blocks: 82.146.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173720019 (0xa5ac1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Apr 1 12:44:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77c1b6ff3fd079e9e31ce4a1057502a10bcac488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:f6:b0:2f:78:8b:4d:27:84:5f:e2:80:05:
eb:56:95:db:2a:f7:a4:58:b9:1e:6e:3b:82:93:2e:
7d:6f:6f:23:f1:1b:a0:19:a7:71:0f:e3:37:70:0a:
a1:d0:89:aa:b1:a1:3a:32:ce:27:18:6e:af:69:53:
71:21:90:a9:c2:8f:05:ec:c7:4b:d7:12:f3:8b:0d:
01:93:f3:e2:60:c3:3e:b8:b1:f1:88:9c:d9:ca:40:
76:e8:ff:16:48:94:e1:82:d6:8f:d7:b7:7e:67:f2:
c8:03:15:17:52:f2:cb:2d:02:da:ee:52:c4:f9:be:
c3:ec:e6:a0:00:76:40:87:e1:d8:e8:d3:31:00:de:
68:73:04:84:0f:36:10:36:77:ff:2c:d9:e7:b5:45:
d3:c6:c9:56:c5:40:e8:78:32:64:29:4b:e8:b0:66:
aa:67:3e:25:31:65:72:92:f0:b3:ee:01:e5:df:0c:
d8:65:05:4e:eb:95:61:ed:74:f6:3d:5b:d2:de:29:
23:15:1d:91:6a:83:9f:57:78:ac:cb:80:d8:0e:b4:
6f:ac:eb:9b:e7:2f:86:6f:cc:3b:9e:35:88:69:dd:
51:c8:8b:ba:96:f4:19:74:47:93:93:1c:01:8e:4e:
67:05:88:29:a3:2b:36:d7:ae:8b:98:e2:63:0f:17:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:B6:FF:3F:D0:79:E9:E3:1C:E4:A1:05:75:02:A1:0B:CA:C4:88
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/d8G2_z_QeenjHOShBXUCoQvKxIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:73:2f:c6:de:f2:ea:0e:12:bf:f2:d0:aa:ae:23:3b:74:bb:
b5:ab:1a:a7:03:0d:a7:b7:fb:6f:b7:57:71:9a:cf:e4:f2:32:
6c:da:f5:fd:6e:c7:af:77:59:bc:dc:cc:a1:a0:15:36:93:f0:
5b:09:11:0e:d6:73:b2:31:62:da:5c:cf:b0:3c:a1:eb:73:1e:
f6:d6:c1:eb:37:cc:10:83:3a:59:9d:f4:4b:fc:29:5f:df:dc:
92:2d:00:2c:30:c0:fa:0d:16:30:de:43:86:a7:ff:49:cf:36:
d2:e1:5e:a4:83:4b:d4:46:fd:81:1f:06:12:ea:4e:0e:cd:99:
2f:91:51:d8:d5:65:eb:2f:78:5f:6c:61:7a:07:63:45:a6:e4:
a3:14:13:17:c0:3e:bb:4e:87:98:49:fa:f4:ac:b4:03:0e:4c:
fd:07:1f:57:98:da:06:86:b6:36:ef:cd:9e:a1:6b:99:d5:5c:
92:d7:dc:73:f1:2c:4d:c6:c2:60:cd:52:64:b6:fb:f6:ce:43:
6f:e5:78:12:25:74:73:ef:98:e8:60:c1:d5:cd:3c:0d:59:dc:
15:ed:ac:f2:2b:ff:2c:be:78:54:74:0d:18:82:cb:e1:5e:8a:
2c:1c:e4:f7:fe:80:55:20:ba:a7:c5:a9:65:06:ef:08:1e:4f:
c5:bc:7a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org