Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/uD7qRq9BRLbT5zABAf-uGreKXhI.roa
File: uD7qRq9BRLbT5zABAf-uGreKXhI.roa (raw, json)
Hash identifier: y903gTWq7novg3UWIViDTPBz2tqalalxnceJQoVDTlc=
Subject key identifier: B8:3E:EA:46:AF:41:44:B6:D3:E7:30:01:01:FF:AE:1A:B7:8A:5E:12
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 05532EAC
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/uD7qRq9BRLbT5zABAf-uGreKXhI.roa
Signing time: Sat 01 Jan 2022 09:02:34 +0000
ROA not before: Sat 01 Jan 2022 09:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1930
IP address blocks: 158.162.96.0/20 maxlen: 20
158.162.0.0/18 maxlen: 19
158.162.112.0/21 maxlen: 21
158.162.128.0/18 maxlen: 18
158.162.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89337516 (0x5532eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 1 09:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b83eea46af4144b6d3e7300101ffae1ab78a5e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:2a:c3:b2:0f:87:8b:50:5d:8f:d1:ed:01:
44:90:e9:94:15:c2:00:ed:0d:49:a3:98:c3:c8:61:
9a:bf:32:25:65:fb:62:d6:16:ac:0a:26:b1:22:b7:
d9:ee:c1:d9:3a:99:42:2f:3c:19:f8:0e:40:8b:fb:
d8:e7:99:55:6d:1d:4b:05:ae:d3:32:c8:e5:a7:32:
55:88:6f:6d:48:72:e7:06:e8:8f:e3:fd:c1:93:92:
fb:7c:03:83:a0:df:89:75:39:b2:9f:4a:24:57:71:
5f:c5:5f:72:f4:42:ca:78:2a:4c:f8:3e:30:61:cd:
ed:28:db:80:84:01:92:eb:65:e1:66:20:b8:e0:a9:
58:9f:3f:e9:99:01:45:a6:cc:00:ac:99:ba:42:3e:
ee:3c:1f:57:d6:56:4b:21:d6:c7:7a:c8:5d:a5:92:
f1:8d:c5:fe:3a:78:d8:5c:07:b7:12:58:f8:ee:f8:
81:ed:b7:e3:f2:e6:22:e9:2e:ac:b2:98:23:4f:2b:
a9:ca:21:a4:7c:5c:3b:e3:88:fd:0d:20:34:a6:d7:
40:f7:f9:ad:ab:88:ad:ce:a8:8b:12:66:75:f1:bd:
e2:82:10:8f:8b:ea:4a:fa:a5:ed:25:3b:42:ad:e8:
e0:ed:f9:0f:ef:49:66:34:c1:41:90:aa:32:dd:2d:
eb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:EA:46:AF:41:44:B6:D3:E7:30:01:01:FF:AE:1A:B7:8A:5E:12
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/uD7qRq9BRLbT5zABAf-uGreKXhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.162.0.0-158.162.119.255
158.162.128.0/18
Signature Algorithm: sha256WithRSAEncryption
71:19:a2:f7:8e:85:d8:a0:55:7b:b2:77:a8:ce:0f:6f:0d:10:
3c:72:53:cc:af:b8:3a:f8:ad:a2:5f:8c:14:eb:c3:30:0a:4d:
86:22:c2:79:57:f7:40:16:5d:68:e4:10:d1:f5:0b:d4:c2:40:
dc:51:11:65:3d:cb:e1:15:57:79:10:13:00:80:54:a7:fa:ec:
b3:fc:f9:6e:e7:7c:5b:5b:0e:6a:65:0f:86:bd:8b:96:35:62:
8b:0d:33:86:ca:16:e0:59:c5:96:fe:dd:3b:9f:f4:8f:c8:9c:
f6:8c:83:ca:8d:60:7f:3d:e3:d3:2b:0c:ba:04:3b:b7:12:29:
3f:e9:0d:1d:15:95:7f:62:8d:bd:65:bc:65:8f:50:43:b0:5b:
a3:3f:a4:6d:03:82:55:35:b4:55:f4:4e:b5:da:e2:f3:da:9b:
59:55:eb:96:47:a1:8a:07:de:e5:ce:8d:d7:86:8e:f8:7b:dd:
03:66:b6:22:59:24:12:b6:00:ce:52:ee:c6:93:8c:f9:a8:7f:
02:81:53:ac:7a:f7:e2:98:b6:dc:d5:87:96:6b:37:82:ef:01:
9e:c8:92:28:3a:cb:1e:b0:34:dd:ad:dd:4f:01:b5:aa:50:26:
87:4d:50:1c:7d:7e:ed:99:9c:dc:15:4b:db:96:02:4f:62:b4:
86:1e:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:59 2023 by rpki-client on console-fra.rpki-client.org