Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9zXLOm0VhYuhztv65FZSAvLalNg.roa
File: 9zXLOm0VhYuhztv65FZSAvLalNg.roa (raw, json)
Hash identifier: nokLE5KjLb8cK3McqUqkBMMqA1/YXPf+qqGmM3H8OGc=
Subject key identifier: F7:35:CB:3A:6D:15:85:8B:A1:CE:DB:FA:E4:56:52:02:F2:DA:94:D8
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 05A3F7B2
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9zXLOm0VhYuhztv65FZSAvLalNg.roa
Signing time: Thu 23 Jun 2022 05:07:32 +0000
ROA not before: Thu 23 Jun 2022 05:07:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 84.252.84.0/23 maxlen: 24
84.252.86.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94631858 (0x5a3f7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jun 23 05:07:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f735cb3a6d15858ba1cedbfae4565202f2da94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:c1:8c:c5:58:ee:bc:6a:6c:b0:6e:72:4c:
43:3c:48:07:7c:3e:60:d9:5d:c0:c8:dc:28:75:42:
83:36:e1:f1:97:cb:dd:0c:b4:8c:88:ad:0a:73:86:
b0:ee:87:f3:84:73:28:7c:ab:3d:77:95:b1:a4:3a:
da:ca:11:7f:cb:7e:f7:ee:0f:22:7f:de:3d:57:2c:
96:f2:d7:68:9f:d9:f8:7e:c7:a8:68:e9:d5:7a:0b:
84:c2:ef:b5:1d:d7:9c:d7:06:bc:2d:aa:5b:61:24:
5d:ac:b5:ab:d8:84:1d:f8:82:fd:e4:0a:bb:d3:dc:
7f:39:6d:c6:e9:a8:1c:6e:cc:01:04:d9:2a:cd:dc:
76:ee:8b:ec:81:a3:3d:75:6b:81:9f:6b:39:f2:7c:
b7:47:da:cd:2c:bd:03:81:b2:a6:9a:74:f4:bd:4f:
5e:a0:87:f1:44:42:56:a0:17:8e:7a:c9:3a:29:7f:
3c:ff:e3:6a:9e:1f:6f:7e:b5:11:98:fd:6f:6f:08:
75:f4:84:24:34:4d:d2:28:52:a5:c0:11:b3:8c:34:
f2:fa:98:ba:3d:0b:a4:20:74:18:09:d0:63:24:85:
b6:11:06:78:19:94:40:b6:7f:6e:f4:63:48:dc:c9:
fd:53:5a:5e:de:82:1d:70:2d:7b:fd:79:ae:21:44:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:CB:3A:6D:15:85:8B:A1:CE:DB:FA:E4:56:52:02:F2:DA:94:D8
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/9zXLOm0VhYuhztv65FZSAvLalNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.84.0/22
Signature Algorithm: sha256WithRSAEncryption
34:2d:2f:8e:8a:59:57:94:85:2d:98:67:9c:d5:38:09:ef:e0:
c2:2d:d2:2b:c7:81:ce:fc:fe:eb:b8:f2:1a:8a:c8:db:81:41:
de:36:e7:62:44:f6:fd:f9:11:d7:bc:27:bd:3f:4d:e6:6b:ba:
70:90:85:b6:d1:1c:dc:ea:50:1e:17:02:05:4b:70:e3:a4:03:
57:1f:6c:32:7f:ec:f2:1c:97:01:96:01:5b:f8:ec:aa:98:a8:
c4:57:25:21:35:ea:64:22:bb:f0:e2:2a:56:fa:38:80:75:64:
57:38:74:e8:4c:27:44:eb:b9:5c:a1:cc:22:3d:2c:e1:b6:ad:
d1:c2:b4:fb:c9:8b:25:5a:44:68:3f:a5:b1:cb:9c:c2:7e:79:
7b:16:f3:a6:b8:16:b5:46:63:13:7c:0f:83:fa:80:0f:fc:0c:
96:50:87:1f:7b:82:06:d2:bf:a7:15:3c:af:0f:5f:e7:fb:96:
11:6b:1b:5d:68:b8:0d:e4:c2:25:da:28:c6:1c:b0:59:42:e3:
84:c8:34:08:bb:b6:55:c9:75:13:9c:23:bc:2d:e4:fc:66:fe:
bd:ea:d9:48:d7:c0:97:2c:4d:8b:b9:ac:7c:1e:df:ec:d1:c6:
20:45:56:7a:de:95:1f:02:9f:5f:17:96:30:7e:05:e8:ea:42:
06:9c:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org