Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/agQf7jYQSXOVW4hAUT5RgjUSx9I.roa
File: agQf7jYQSXOVW4hAUT5RgjUSx9I.roa (raw, json)
Hash identifier: 9sHnn1JolhaKFjQbo23vC2T+hwoT8xaXIvpoNx8ZTDY=
Subject key identifier: 6A:04:1F:EE:36:10:49:73:95:5B:88:40:51:3E:51:82:35:12:C7:D2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018264B645AF34B665D881D7F17402521DD1
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/agQf7jYQSXOVW4hAUT5RgjUSx9I.roa
Signing time: Wed 03 Aug 2022 17:17:23 +0000
ROA not before: Wed 03 Aug 2022 17:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.40.0/22 maxlen: 24
178.253.38.0/23 maxlen: 24
83.147.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:b6:45:af:34:b6:65:d8:81:d7:f1:74:02:52:1d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 3 17:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a041fee36104973955b8840513e51823512c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:b0:96:0e:a1:db:6b:af:8e:3e:2a:ff:c2:
bf:57:16:e5:97:0a:f7:08:ec:70:27:7a:26:72:dc:
f8:fc:ac:f6:6e:b8:95:06:de:06:c6:01:5e:93:d8:
c3:0d:ec:68:af:a6:0d:4b:6f:ad:3c:6f:15:5b:33:
26:c2:9d:96:51:32:47:20:28:d3:e7:46:df:92:dd:
c3:fc:39:f6:07:5b:81:e6:a8:ca:62:20:1d:7b:4e:
e5:85:36:84:31:6a:0b:db:6b:1c:42:08:a0:0f:58:
3d:60:af:77:b0:91:be:e3:70:3a:30:aa:cd:b0:e6:
47:ad:22:c7:6f:44:98:1b:33:4b:78:ee:0f:62:57:
3b:92:5a:f5:ee:b1:95:1f:0a:c2:20:22:f8:26:22:
a1:f4:a2:5a:3d:bb:9e:24:42:03:78:a2:18:84:8e:
62:43:31:81:29:0f:6b:60:52:81:11:15:41:11:46:
bf:d0:42:6e:f0:26:d0:e7:a6:17:da:6c:6e:6b:bf:
65:97:c2:70:8f:13:ad:58:43:eb:f0:25:54:3a:8d:
34:d9:04:36:01:bc:1d:ee:31:a6:5b:25:c5:3d:6a:
56:11:c1:81:b0:a7:b3:c3:3f:b3:33:1e:e6:ac:9c:
f4:f4:27:fa:b9:46:83:a2:30:c7:aa:ea:c1:a8:86:
9d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:1F:EE:36:10:49:73:95:5B:88:40:51:3E:51:82:35:12:C7:D2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/agQf7jYQSXOVW4hAUT5RgjUSx9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.220.0/22
178.253.38.0-178.253.43.255
Signature Algorithm: sha256WithRSAEncryption
5f:99:2f:09:38:6f:77:bb:42:53:83:c3:1f:da:60:93:4a:d7:
08:f3:b4:5c:7f:93:eb:4a:40:e3:15:8e:3b:38:a0:b7:ea:29:
9e:4d:97:21:a9:c7:90:3b:e8:b3:28:56:06:17:5d:a1:79:c6:
ef:1c:3d:40:1f:ef:47:d6:da:3b:ce:38:05:06:48:27:ee:82:
0c:5e:22:f4:5d:af:5a:92:3c:d5:89:7f:ab:5c:6e:a3:5b:1e:
77:08:c9:30:b5:eb:61:be:f4:df:9c:88:e6:a5:5d:e9:cd:dc:
09:83:fe:26:59:da:1a:f8:32:a7:7b:ec:22:7b:35:1d:5b:25:
a4:87:ec:ae:3e:d2:1d:bf:8b:93:83:c2:7b:06:22:2d:42:60:
e2:69:ea:99:84:39:14:60:0a:f7:83:8b:5c:a8:16:c6:7b:05:
68:99:b2:4f:f0:d5:23:8f:2d:ad:c2:6f:2f:a7:fe:51:f9:50:
14:5b:d8:94:66:55:59:26:04:b4:8d:03:35:7d:89:3e:55:db:
ce:27:c8:96:34:fb:c4:6c:ed:46:00:7e:0e:c0:e0:73:1d:6d:
99:64:80:1b:d3:d6:f1:6e:4c:d2:9d:37:53:cd:ba:2a:2b:87:
08:f7:31:63:e9:6e:b4:ac:31:0d:48:dd:4b:3e:71:e2:5c:ed:
e9:39:bd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org