Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/d0jeV3oLEoR8RfN6rEBicKGeYPw.roa
File: d0jeV3oLEoR8RfN6rEBicKGeYPw.roa (raw, json)
Hash identifier: Gg7e9QQXQkKDN744g718TRsUgUheKVQjeRaecoDzydk=
Subject key identifier: 77:48:DE:57:7A:0B:12:84:7C:45:F3:7A:AC:40:62:70:A1:9E:60:FC
Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial: 017CFE
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/d0jeV3oLEoR8RfN6rEBicKGeYPw.roa
Signing time: Thu 10 Feb 2022 13:59:36 +0000
ROA not before: Thu 10 Feb 2022 13:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42880
IP address blocks: 84.246.176.0/21 maxlen: 21
84.246.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97534 (0x17cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead799026094d60516b527d842b6166805668e9e
Validity
Not Before: Feb 10 13:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7748de577a0b12847c45f37aac406270a19e60fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:98:85:9f:2b:f5:85:7d:e3:bc:bb:a4:49:
4e:87:1d:12:57:8c:97:4f:82:e4:cb:fc:4e:ff:a2:
7d:d0:ee:47:f8:80:44:b4:fe:29:79:93:cd:3e:51:
08:7d:23:f8:b2:7d:00:b3:4d:40:6c:cd:8a:da:b1:
06:74:b5:76:37:80:66:d0:e9:fd:c0:f6:f4:0a:e3:
6f:28:1d:62:0f:4f:c8:b4:a6:3f:0c:16:e1:10:91:
7a:81:be:c6:bd:8f:b0:b9:04:42:7e:3a:96:90:ec:
bc:bf:71:c4:fb:20:5d:26:5d:5c:35:16:86:88:60:
b4:4a:e6:e9:68:88:61:cd:44:84:ad:d3:a8:89:38:
e1:09:33:fe:80:eb:ff:11:19:81:61:dc:30:f2:b4:
98:42:16:fe:60:b3:77:82:86:2b:78:f2:c6:e9:a8:
46:55:cd:3a:16:cc:8a:2b:87:ab:02:9f:7c:86:87:
ac:2a:83:e4:6f:86:a6:f9:64:99:20:a0:e9:ea:60:
b1:9b:ad:01:9f:fb:8c:5e:c7:df:2b:d6:25:c0:ac:
a8:b0:57:86:c3:42:78:39:f1:8a:5c:62:7d:80:df:
b0:b9:e5:bb:85:17:19:2c:d8:a8:c4:87:b8:db:3a:
b4:68:85:bd:68:13:05:76:e0:8f:ac:50:63:67:39:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:48:DE:57:7A:0B:12:84:7C:45:F3:7A:AC:40:62:70:A1:9E:60:FC
X509v3 Authority Key Identifier:
keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/d0jeV3oLEoR8RfN6rEBicKGeYPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.176.0/21
Signature Algorithm: sha256WithRSAEncryption
76:b9:11:2f:1a:4e:35:ac:8c:c1:9e:6e:7a:26:4f:fa:78:09:
5f:db:e7:0e:09:8b:88:a4:24:ba:2c:e1:a3:f5:15:cb:7f:c2:
bd:a0:db:66:47:70:3e:d9:37:4b:0f:8c:39:50:33:35:30:c4:
bc:15:8e:b9:da:c6:92:8d:5b:fa:4a:8b:be:4c:2b:11:1c:21:
5d:5e:13:ce:e3:da:ab:99:8f:84:75:85:93:6d:a1:c6:9e:6d:
dd:ef:3d:a2:64:44:29:eb:7b:85:aa:a4:d5:a0:af:40:81:50:
79:b6:83:20:f3:d4:c5:44:b8:0f:73:b7:52:e5:2a:36:4c:1c:
9d:ac:50:c4:63:e8:75:08:89:d7:cf:7f:a9:2f:3f:c5:06:70:
b5:b9:d0:54:f6:97:43:a5:55:e1:8c:c4:85:7d:9b:02:98:c7:
9e:d7:5b:f6:f4:33:a2:4e:1f:ba:92:5b:6b:e7:ed:82:10:d6:
69:70:99:ee:29:f4:9f:46:53:0b:84:98:b1:57:12:d7:a3:12:
b1:40:7c:9b:a6:11:e3:20:33:50:e5:7e:dd:6e:34:f9:e1:1e:
ff:40:48:7d:d0:5d:d1:14:1d:8b:b9:15:d7:fc:16:90:7c:b5:
14:5a:3d:c9:8c:fd:f3:1c:b1:53:a7:b7:c0:d7:e2:8f:4e:04:
a3:3c:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:01 2024 by rpki-client on console-ams.rpki-client.org