Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/Xd9oZnbu6Le2Q12MbzVUxPibgj0.roa
File: Xd9oZnbu6Le2Q12MbzVUxPibgj0.roa (raw, json)
Hash identifier: ehDmtiXarjT9FkB2gwKCFS1eOEbmAzyCL4gdCh7ajOM=
Subject key identifier: 5D:DF:68:66:76:EE:E8:B7:B6:43:5D:8C:6F:35:54:C4:F8:9B:82:3D
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 67B6
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/Xd9oZnbu6Le2Q12MbzVUxPibgj0.roa
Signing time: Thu 17 Feb 2022 07:41:12 +0000
ROA not before: Thu 17 Feb 2022 07:41:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50359
IP address blocks: 82.146.15.0/24 maxlen: 24
212.72.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26550 (0x67b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Feb 17 07:41:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ddf686676eee8b7b6435d8c6f3554c4f89b823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:f1:9e:b4:ce:50:a8:3a:32:d4:15:a7:b5:
f8:28:15:92:1d:9e:8d:46:85:f9:3f:33:a2:01:9f:
05:05:5e:f3:f6:71:7e:da:53:d6:58:c5:30:33:c8:
37:33:7d:0c:a1:1d:1c:27:bd:2d:61:d5:2a:b7:2a:
64:28:52:ec:7d:04:7c:a7:c3:34:98:58:15:91:a1:
9b:0d:fe:b3:8b:8a:94:b6:04:cb:45:60:fd:de:fa:
6f:51:63:21:71:34:a8:5b:89:3a:37:38:3f:04:4e:
f0:43:68:a9:82:46:b5:f9:6a:a1:7b:f8:e3:96:21:
90:ac:35:5d:28:b3:eb:42:48:86:12:da:85:46:d4:
af:10:2b:13:d5:22:82:d6:77:51:a4:03:0f:24:37:
f9:7c:27:83:48:57:b7:56:d4:a5:41:b7:04:26:d6:
cc:f7:6e:f0:d2:32:96:ee:e8:3e:cc:02:2e:e1:1d:
cd:ae:f4:14:bc:eb:ee:f6:4a:20:a4:be:50:42:97:
ee:a5:f4:a8:a6:fe:fe:1f:52:0b:0a:a1:32:0d:27:
37:bd:04:c8:ee:93:48:5c:3f:d2:ab:31:f5:86:36:
73:d2:ae:a5:3c:dc:ec:45:09:21:8d:b7:2a:75:3d:
c3:a8:f3:bb:48:36:16:da:68:65:ff:a2:b5:a8:7c:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:68:66:76:EE:E8:B7:B6:43:5D:8C:6F:35:54:C4:F8:9B:82:3D
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/Xd9oZnbu6Le2Q12MbzVUxPibgj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.15.0/24
212.72.206.0/24
Signature Algorithm: sha256WithRSAEncryption
66:31:8d:33:a2:b3:ba:47:1f:81:18:e7:c4:d3:6f:3f:dd:98:
56:7d:42:62:87:62:74:54:50:29:0c:64:1d:ed:e8:df:cb:fb:
2b:a5:b9:cd:0d:56:58:3f:d8:4c:34:5d:33:2f:80:ba:e7:a8:
b3:18:32:71:65:cd:61:d7:e0:ef:c3:d2:b9:65:65:3a:cc:43:
7d:8c:78:22:71:ab:5e:e2:7a:b3:46:00:82:51:ab:47:a2:9f:
c4:38:e7:c9:3a:25:99:34:94:ee:ca:ea:9d:4f:1a:c5:96:e1:
b6:5d:6e:db:11:91:e8:52:19:a1:7d:f0:26:ef:18:3c:10:c0:
7a:7d:55:38:42:ae:cf:8c:5b:ed:4d:f7:95:d2:cd:1d:c4:d1:
e2:1e:ac:5e:b0:7a:e9:8f:ca:c8:2e:46:2a:cf:04:a8:38:1a:
bb:5d:87:82:a5:61:58:f0:80:e8:8a:23:fa:21:d6:aa:ea:a1:
78:96:e4:1c:f6:f8:8a:8a:6f:42:ab:81:2d:54:a6:b4:18:20:
b0:46:1f:06:85:c8:8b:ee:7f:2b:a9:e4:de:e6:c8:a9:c7:cd:
99:6f:da:3a:64:db:c2:6d:c0:e5:2e:f3:46:2d:e5:32:40:65:
9d:b0:44:bf:5d:66:ab:95:fe:cc:81:9a:7c:d3:fa:0f:15:97:
5f:16:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:31 2023 by rpki-client on console-ams.rpki-client.org