Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/skPQi5gSLNLEppaCldsYzHs014U.roa
File: skPQi5gSLNLEppaCldsYzHs014U.roa (raw, json)
Hash identifier: 735N9Qk2yBZwxNhiGFpjKpZuLRzkHIEgvj7yPiJQyLQ=
Subject key identifier: B2:43:D0:8B:98:12:2C:D2:C4:A6:96:82:95:DB:18:CC:7B:34:D7:85
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0A73986E
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/skPQi5gSLNLEppaCldsYzHs014U.roa
Signing time: Mon 11 Apr 2022 11:56:44 +0000
ROA not before: Mon 11 Apr 2022 11:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24634
IP address blocks: 91.245.248.0/22 maxlen: 24
82.146.160.0/19 maxlen: 24
82.146.170.0/24 maxlen: 24
2a0d:b3c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175347822 (0xa73986e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Apr 11 11:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b243d08b98122cd2c4a6968295db18cc7b34d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:de:8a:c5:f2:1c:7d:24:c8:48:6c:31:18:
92:6b:95:69:17:ac:be:eb:1a:27:0b:b5:2c:dd:72:
55:b5:de:6a:3b:5f:34:8e:d9:76:41:07:34:9c:bd:
bc:41:2e:5e:d5:26:7b:70:7d:a7:3a:7f:49:93:8e:
fe:c9:5c:7f:b5:65:d8:dd:be:28:0d:ee:b7:63:d3:
6e:15:df:97:8e:b3:7b:8d:3c:a3:5a:b6:61:18:70:
5c:42:67:c6:58:b2:0f:5d:6d:f5:0b:b3:cf:7a:17:
56:57:e5:57:d3:d2:7d:bd:28:af:fe:1b:36:a8:c4:
0a:a2:cd:5e:85:38:f0:54:be:72:f4:3a:a5:35:72:
5d:90:e9:cd:68:a9:8b:c6:11:31:e1:ba:e8:c5:c4:
ab:b4:2a:70:a7:35:5e:e6:58:4c:f0:5a:58:e9:b4:
f5:ad:32:f8:06:08:a4:c0:9a:c0:b1:17:ea:6f:37:
83:99:7a:1e:d0:8c:42:dd:6f:e6:70:ed:43:7c:ea:
b9:8b:36:51:17:36:f4:3a:39:62:90:47:03:99:b9:
49:d8:d6:65:fe:9d:2b:26:14:1e:81:29:b2:31:e3:
38:5c:a2:a7:a2:ef:63:7b:b6:01:30:48:ca:26:e2:
2e:95:b0:1f:e3:1d:35:5c:5d:b7:b4:e6:5a:8f:27:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:D0:8B:98:12:2C:D2:C4:A6:96:82:95:DB:18:CC:7B:34:D7:85
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/skPQi5gSLNLEppaCldsYzHs014U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
58:16:45:f5:23:51:ff:3e:47:c2:f6:06:80:b8:e8:df:2b:ff:
52:62:00:0c:4c:32:a2:6b:22:99:1e:2d:df:d0:78:16:ca:06:
4a:ab:ae:6d:ab:3c:0b:5b:7c:d1:b5:01:df:68:de:f6:9a:71:
a8:ec:c2:95:a1:31:65:7f:c4:de:b6:80:05:f8:02:51:ae:e7:
1f:14:6a:9c:d3:95:55:ca:c8:55:05:87:16:8d:0e:77:d4:a6:
99:31:84:b1:90:b3:1b:f5:a3:73:ad:5a:ed:83:d7:f8:3c:be:
a5:01:e8:1d:12:81:6d:57:e6:e8:f6:44:0a:95:92:8c:25:26:
fa:80:1b:af:08:30:7a:e1:3a:ae:b4:5f:c1:31:cd:a3:54:04:
35:48:ab:16:44:ac:d6:35:88:4b:de:26:78:3c:59:c8:94:a2:
d4:d8:74:39:8a:f9:1c:19:70:7a:69:81:5d:70:75:7d:fa:41:
f4:80:4c:6e:47:08:51:9b:9b:c6:cb:36:15:2a:b0:8d:f5:e5:
4d:e9:fa:86:c8:ec:e6:8c:ad:f6:d8:fe:84:6a:e1:97:2f:42:
0a:7a:02:8a:a7:ed:2a:3f:c7:dc:f8:7f:08:b9:bc:b0:b1:b9:
04:7c:ca:5d:de:39:33:98:1f:74:73:01:b3:61:43:ad:0e:aa:
1e:d6:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org