Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xDtFYTWAYrdELV3KxSPdY-XbbP4.roa
File: xDtFYTWAYrdELV3KxSPdY-XbbP4.roa (raw, json)
Hash identifier: HkDnuxJzE+0Qg8g1I7dsKwG7rj7ITKp+Oaf/X2SP+84=
Subject key identifier: C4:3B:45:61:35:80:62:B7:44:2D:5D:CA:C5:23:DD:63:E5:DB:6C:FE
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 188066BE
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xDtFYTWAYrdELV3KxSPdY-XbbP4.roa
Signing time: Tue 21 Jun 2022 11:48:44 +0000
ROA not before: Tue 21 Jun 2022 11:48:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34707
IP address blocks: 82.179.0.0/20 maxlen: 20
82.179.0.0/21 maxlen: 21
82.179.8.0/22 maxlen: 22
82.179.12.0/24 maxlen: 24
82.179.13.0/24 maxlen: 24
82.179.14.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411068094 (0x188066be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jun 21 11:48:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c43b4561358062b7442d5dcac523dd63e5db6cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:f2:e3:f9:41:2f:81:b8:47:0b:8b:48:5e:
8c:78:9e:c1:76:44:ce:3b:f9:f8:c0:7e:2f:2b:43:
eb:89:09:dd:ea:b9:83:df:be:1f:28:31:37:ba:2f:
a5:01:56:1e:05:19:a5:0f:7c:69:59:6f:bd:91:99:
3c:36:f6:55:4b:de:31:6c:c9:f2:c9:b6:9a:00:2c:
f6:07:ad:4a:45:06:49:40:6b:66:f2:af:5c:6b:b1:
77:85:0f:dc:18:ee:c1:f0:08:99:7a:09:0b:45:41:
b3:29:0c:4c:82:81:41:a9:92:e4:35:b6:8b:4d:84:
ef:91:9d:41:40:a6:13:59:2f:8a:f9:68:2c:41:41:
36:fa:88:a5:b9:cc:2e:bb:9d:e8:5c:6d:58:9e:7c:
d9:46:12:11:fe:62:dd:7b:80:7c:cf:a0:a3:ab:9c:
b4:8d:68:d4:7b:47:ea:d7:a9:6b:e4:3c:f9:4f:8d:
b1:b1:dc:e9:d3:e4:84:1e:1b:f2:d0:98:64:d7:e8:
1e:8c:5e:0a:4a:90:88:ce:6c:a3:bb:63:fb:7d:bb:
2a:19:be:77:76:22:8b:79:5c:e8:37:4c:35:db:5c:
58:d4:ce:a3:41:8e:c8:f3:23:13:ed:4c:c1:82:bf:
e9:03:4a:3b:ad:32:ee:29:c8:57:7f:06:45:ad:6c:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:45:61:35:80:62:B7:44:2D:5D:CA:C5:23:DD:63:E5:DB:6C:FE
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/xDtFYTWAYrdELV3KxSPdY-XbbP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.0.0/20
Signature Algorithm: sha256WithRSAEncryption
24:67:78:2c:1b:61:39:92:05:61:b5:74:2c:f1:f9:9b:7d:9b:
47:25:1b:be:5f:69:da:84:a1:b7:3e:98:4f:5a:66:92:e2:29:
31:3e:5b:47:c5:38:6f:fe:9e:80:d4:f4:c8:d0:c6:b5:17:34:
ab:de:e6:a7:04:42:20:5c:ac:0e:d5:e4:92:de:40:3d:0a:45:
6d:c2:62:b0:89:b9:c2:e9:d1:f7:29:9c:ed:2a:dc:81:d7:fe:
bf:a7:b0:cd:95:0c:00:71:7f:f9:3d:03:c5:04:20:27:6f:9e:
04:94:85:73:14:0b:69:25:51:cf:c1:5d:b4:b8:8b:61:04:fd:
08:17:5b:ef:a0:63:a9:df:2a:2a:9e:01:c1:9a:b6:14:5b:7d:
96:ac:a3:40:a7:95:56:13:cb:87:91:5c:7f:ab:17:c0:7d:a0:
88:26:a4:86:94:b1:31:47:de:04:85:23:c1:16:39:f5:fb:57:
0d:c0:24:ea:99:53:bb:0e:04:e1:c2:e2:8b:a3:b6:f0:61:dc:
62:ce:83:99:8d:ff:9e:1e:3b:0f:02:bc:f9:0f:09:ff:81:be:
55:3d:c9:75:2a:bc:0c:3b:0b:44:b1:80:43:03:37:05:5f:73:
67:d5:89:72:8b:85:28:b1:6d:28:89:20:dd:b8:2a:d0:e9:6b:
c7:27:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org