Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/rAcTImvcmlG08GzKY5tDyLe8QQ4.roa
File: rAcTImvcmlG08GzKY5tDyLe8QQ4.roa (raw, json)
Hash identifier: Y2J3etOG0syQzBgsmVoJRZkgR5dfRtKelhWMl3O2xvg=
Subject key identifier: AC:07:13:22:6B:DC:9A:51:B4:F0:6C:CA:63:9B:43:C8:B7:BC:41:0E
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0182683A3C05F4409FB0000D2DA81876AC15
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/rAcTImvcmlG08GzKY5tDyLe8QQ4.roa
Signing time: Thu 04 Aug 2022 09:40:23 +0000
ROA not before: Thu 04 Aug 2022 09:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209030
IP address blocks: 82.202.191.0/24 maxlen: 24
82.202.190.0/24 maxlen: 24
82.202.189.0/24 maxlen: 24
82.202.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:3a:3c:05:f4:40:9f:b0:00:0d:2d:a8:18:76:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Aug 4 09:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac0713226bdc9a51b4f06cca639b43c8b7bc410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e2:9c:f8:f1:4a:67:89:d2:b2:19:d3:d0:bc:
be:a6:9a:3f:7e:74:91:63:97:12:8f:67:57:c9:69:
0f:9a:71:60:ba:76:26:58:53:11:18:ab:de:74:94:
34:40:4e:51:70:05:b2:c6:7f:b6:fa:3e:9b:cb:32:
c8:e5:ac:53:cf:dc:ed:85:6a:e9:2e:1d:db:a5:23:
ff:79:7d:05:62:9f:a0:5b:b6:7a:fa:40:a6:9f:7c:
1a:47:0b:1b:b3:e5:b4:01:69:5d:e0:35:8e:52:c4:
ef:87:e6:bc:7e:82:d0:7e:08:d2:1d:43:23:a9:ce:
91:e9:43:c7:90:30:07:32:07:ad:48:2d:1b:a6:6b:
c6:d8:04:07:09:fe:8b:81:55:89:b2:f4:78:bf:1a:
61:d8:95:c8:5a:2c:68:20:fc:99:bf:14:87:3d:bb:
27:31:29:0e:72:c0:f6:15:1b:d7:72:21:fc:6b:4d:
e7:ba:2a:0f:db:e6:b6:b4:34:47:56:1b:b3:1b:50:
bc:53:0c:28:0c:49:ff:36:d5:f1:43:8d:88:ec:9c:
0e:aa:4b:f4:41:bb:ad:31:fc:5b:da:d7:ab:92:cb:
6e:63:78:ca:46:c0:d5:b5:44:c0:54:6e:03:4d:cb:
28:55:63:2d:f9:bd:52:75:b7:02:ae:b5:1a:3c:14:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:13:22:6B:DC:9A:51:B4:F0:6C:CA:63:9B:43:C8:B7:BC:41:0E
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/rAcTImvcmlG08GzKY5tDyLe8QQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.202.188.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ad:15:08:ae:3c:bc:f8:e8:58:a8:7e:d6:12:f6:99:15:76:
6f:aa:39:a5:c5:b0:af:1f:61:9f:83:11:f8:f2:58:61:34:8e:
d8:cb:84:2c:fe:8b:2f:09:a1:40:74:11:1a:0e:22:5d:11:13:
58:68:c3:4e:40:a1:5d:c9:c6:e8:50:6f:70:91:f2:ed:ee:55:
00:94:16:05:80:de:1f:18:1a:b1:cd:aa:8e:d5:31:dc:8d:e6:
4a:62:52:6a:3f:c7:d2:fa:42:e3:38:6b:21:c9:13:e3:bb:4f:
f7:75:5a:be:26:16:ed:32:be:e8:57:e8:90:6a:37:1f:a4:5a:
6e:07:23:d5:ae:f3:9f:cf:e7:01:80:35:1d:3d:0e:af:02:65:
40:90:28:5d:cc:73:c4:80:31:52:ab:53:ec:ad:08:8f:d1:34:
ea:c1:ac:48:c2:83:30:c1:09:be:b1:8f:ab:02:b5:7a:4d:e5:
9f:37:bb:0d:7a:20:4e:07:d9:8a:d6:89:8a:49:10:fc:4f:5b:
d8:1d:11:5e:45:95:38:86:2c:83:4e:5b:42:be:2c:75:cd:9c:
13:c7:89:40:28:14:a1:28:28:6f:d1:18:c6:f1:f7:5a:c8:88:
5a:e6:af:bd:ca:80:ff:83:0f:24:06:a3:cb:ab:24:11:e9:9a:
e4:dd:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:12 2024 by rpki-client on console-ams.rpki-client.org