Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dG-t2q96qj--WdX-uqffSxNfNKQ.roa
File: dG-t2q96qj--WdX-uqffSxNfNKQ.roa (raw, json)
Hash identifier: mgNLyZJ6nWA2ENlkL/1MBSTTc8PyuUOB7r+vX863eqc=
Subject key identifier: 74:6F:AD:DA:AF:7A:AA:3F:BE:59:D5:FE:BA:A7:DF:4B:13:5F:34:A4
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16C6C55F
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dG-t2q96qj--WdX-uqffSxNfNKQ.roa
Signing time: Sat 01 Jan 2022 02:51:18 +0000
ROA not before: Sat 01 Jan 2022 02:51:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5433
IP address blocks: 82.179.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382125407 (0x16c6c55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=746faddaaf7aaa3fbe59d5febaa7df4b135f34a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:a0:d1:47:59:69:05:36:38:54:9b:c2:cb:
1a:b0:06:78:ba:1d:0e:d1:1e:05:aa:85:9e:f7:58:
75:0a:8a:c1:80:e5:7c:4b:b4:ae:e5:3f:67:b3:85:
88:b6:a6:bc:9e:c2:9e:30:5f:f4:5a:31:b9:e1:6c:
25:bb:68:08:05:ed:0c:9c:a1:10:85:6d:48:f5:ae:
8b:c9:66:09:43:fe:75:c8:1e:67:c8:bb:c1:ea:06:
2c:b8:83:63:c0:fe:0c:c6:ab:f5:3f:d5:f2:82:9b:
e4:b5:c2:f2:51:95:ff:17:12:46:70:25:27:e4:9d:
3b:e0:47:92:48:85:f4:ce:ac:01:0a:ce:84:b0:5b:
b3:22:63:2c:5e:3b:4a:1e:cf:cf:9e:cc:e2:09:fa:
66:1b:18:57:27:7b:64:40:76:0d:3f:97:d7:be:e8:
4f:e8:4e:28:dd:06:66:34:a9:77:eb:f9:3e:83:00:
42:83:91:c1:e4:98:24:9f:17:ae:55:16:3d:3b:de:
2c:be:8e:79:c5:98:55:29:66:05:c1:46:9d:af:6e:
82:57:51:2d:02:7b:c6:5e:38:01:6c:c1:30:42:14:
f2:77:4a:91:d8:98:8a:f5:70:89:79:92:a2:7d:58:
9c:bc:6e:87:3f:28:09:db:3d:a6:07:f8:b1:64:77:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:AD:DA:AF:7A:AA:3F:BE:59:D5:FE:BA:A7:DF:4B:13:5F:34:A4
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dG-t2q96qj--WdX-uqffSxNfNKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.32.0/20
Signature Algorithm: sha256WithRSAEncryption
63:c6:8c:b8:7a:5b:e8:36:26:bf:16:7c:c6:6d:e3:6b:1b:ed:
1a:b9:3e:54:99:7f:7b:3d:07:1f:36:d3:21:61:f0:8d:76:43:
28:28:3e:14:c3:d9:f1:56:74:3c:20:dc:99:52:b1:1c:5f:41:
80:0e:e4:85:d6:95:c8:61:d7:fe:0f:e9:2e:29:1b:34:4b:f5:
34:cd:9b:55:45:a1:12:d3:17:8c:aa:79:87:b4:19:51:e3:36:
ac:be:58:76:01:10:c4:d5:c1:1b:95:ee:98:ee:65:03:3f:d2:
e1:5a:02:e9:50:cf:b4:7b:99:78:2b:61:ab:7f:ea:e1:f8:8b:
d0:58:d3:9f:b4:7e:d8:94:d8:e1:ad:43:cb:7b:00:12:db:eb:
60:6c:c9:f4:ad:e3:06:7d:17:ff:70:bb:3b:6c:b6:a3:1e:5d:
24:b4:c3:99:7b:cc:1c:e8:3e:7b:e0:dd:10:8e:b0:ef:5f:de:
f0:e0:b0:a0:bb:d1:2c:9c:f7:70:b8:2c:b0:4e:50:f7:e7:4a:
0d:98:85:5b:0e:40:aa:94:e2:e5:8a:62:c3:99:cd:86:8d:df:
13:40:0a:89:42:9b:f1:d2:27:1b:ca:f0:21:fa:dd:64:45:9b:
06:f9:d5:1a:25:14:40:71:62:bd:ec:7e:4b:f7:c7:f9:cd:bb:
a0:6d:6d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org