Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ahgCQXE78LAmVwLc5KxcVmoDfKs.roa
File: ahgCQXE78LAmVwLc5KxcVmoDfKs.roa (raw, json)
Hash identifier: JzJWcbLJ3Y/GRp5e+vRNEclzhTZtMcfHBGM20t/cp5I=
Subject key identifier: 6A:18:02:41:71:3B:F0:B0:26:57:02:DC:E4:AC:5C:56:6A:03:7C:AB
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 1883819E
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ahgCQXE78LAmVwLc5KxcVmoDfKs.roa
Signing time: Tue 21 Jun 2022 11:55:46 +0000
ROA not before: Tue 21 Jun 2022 11:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8398
IP address blocks: 82.179.128.0/21 maxlen: 21
82.179.138.0/23 maxlen: 23
82.179.136.0/23 maxlen: 23
82.179.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411271582 (0x1883819e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jun 21 11:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a180241713bf0b0265702dce4ac5c566a037cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:ae:7a:7d:ff:d7:5d:80:21:0f:8a:9c:bd:
95:09:f8:6b:94:c7:b2:ca:56:5b:7d:74:6b:15:24:
b6:42:d0:9d:04:3e:b9:47:61:b6:a2:5b:eb:a3:73:
d0:07:ff:a5:62:c2:44:74:86:76:b5:83:bd:a6:88:
14:e3:86:59:47:ea:06:f9:06:2c:c6:73:2d:27:17:
d9:f7:50:26:bd:6d:d3:02:f3:8e:ec:18:56:67:76:
05:eb:56:83:35:b1:34:69:50:0a:c4:67:d6:ad:50:
81:ef:6a:6e:5b:09:a4:bd:d6:74:22:fa:76:3b:47:
b7:c2:00:f8:62:2e:58:ce:85:01:64:78:bf:35:af:
2e:03:5c:d9:b8:62:9e:19:f4:76:c8:85:ba:8c:b9:
2d:ee:a9:bc:31:ba:7a:45:9f:82:aa:0a:29:03:27:
29:71:bc:76:59:f7:bb:7c:f3:57:2d:bc:c1:f7:d2:
d5:4a:7b:8d:66:b2:6e:02:3f:c3:8b:ce:ee:8b:e1:
d1:bb:4e:1c:56:a1:f3:34:7a:d1:7f:af:47:2d:ba:
b5:d5:96:db:86:52:21:01:e6:bb:75:34:82:e3:ff:
48:29:5f:02:97:57:e0:16:51:06:41:99:5d:91:25:
2f:c7:ec:58:c3:77:b0:e4:43:94:b5:e0:3b:d7:57:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:18:02:41:71:3B:F0:B0:26:57:02:DC:E4:AC:5C:56:6A:03:7C:AB
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/ahgCQXE78LAmVwLc5KxcVmoDfKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.128.0-82.179.139.255
82.179.142.0/23
Signature Algorithm: sha256WithRSAEncryption
96:b8:c8:0b:55:53:1f:42:e4:0b:a0:bc:a2:8e:13:25:7e:2b:
a2:14:95:a4:ca:29:21:d2:ba:22:8f:f4:01:ff:f9:0d:6b:d7:
8a:60:f3:4b:37:da:57:b3:ef:ee:d6:a4:e9:8f:15:eb:50:1b:
d5:c0:52:81:24:cf:92:99:49:ba:15:af:35:4b:a9:33:0f:47:
71:19:0d:3a:3a:7d:31:65:47:4e:cb:63:ee:7a:ee:be:5e:c5:
66:fe:71:06:cd:49:07:b1:d2:c5:e7:cd:9e:b5:40:f9:88:ea:
76:de:92:d0:87:b8:96:2f:cb:2a:71:b5:56:e8:b9:55:a6:4b:
78:dd:af:95:fb:4e:d4:23:33:d1:c2:1b:92:5c:34:79:00:85:
02:8f:59:2a:82:6e:3b:f7:f9:d3:fd:e8:dd:8c:6a:dc:83:38:
bf:59:24:05:e7:61:9d:59:60:54:7a:3a:df:14:81:c6:29:28:
6a:c1:69:cf:da:0b:f5:d6:fc:f8:c1:e7:e3:d7:d4:31:00:34:
ca:80:c9:e3:70:6c:30:e2:20:88:ec:35:45:99:34:49:68:d5:
44:9c:39:8e:dd:82:54:01:ed:0a:2a:db:2e:85:62:6b:84:45:
77:b6:e2:e7:c2:58:43:a1:52:3d:77:5e:45:a4:0b:71:51:6c:
d0:c4:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org