Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/2IUzQ85EA4FL7MOf8b_Tsz8PQXU.roa
File: 2IUzQ85EA4FL7MOf8b_Tsz8PQXU.roa (raw, json)
Hash identifier: CiIfHIaZ9PoUFJ4qpumYrn/j7noUNvaQ/+TrWAyr6g8=
Subject key identifier: D8:85:33:43:CE:44:03:81:4B:EC:C3:9F:F1:BF:D3:B3:3F:0F:41:75
Certificate issuer: /CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Certificate serial: 9299CC
Authority key identifier: 48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/2IUzQ85EA4FL7MOf8b_Tsz8PQXU.roa
Signing time: Sat 01 Jan 2022 01:56:18 +0000
ROA not before: Sat 01 Jan 2022 01:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15681
IP address blocks: 83.150.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9607628 (0x9299cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48a4693b1dccc49ee6605a7d339e1d847ef0ad8b
Validity
Not Before: Jan 1 01:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8853343ce4403814becc39ff1bfd3b33f0f4175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:1c:9c:8c:24:b5:bc:3b:4b:57:f0:1f:b7:
bd:19:99:10:1c:37:43:31:d9:55:6b:92:4d:9e:a2:
57:e6:84:04:09:25:9c:21:ba:60:b3:db:70:d1:00:
15:42:cc:57:cb:b9:93:d9:78:f2:94:32:b3:72:18:
2c:68:28:11:9f:4d:db:a8:60:ef:36:d1:88:be:63:
a9:f3:c2:2c:f9:18:9c:79:24:28:69:e7:2a:20:7c:
be:7d:cc:0e:6b:3f:a2:81:73:f0:4e:74:ac:87:76:
2e:4c:13:fa:ed:22:40:c1:11:c8:bc:0e:b3:d2:76:
a2:dd:be:ed:2e:17:fc:e4:09:20:7f:02:14:80:95:
90:e7:bb:5a:16:d7:66:50:00:e4:fb:0f:bf:11:67:
15:a3:8c:4a:b2:90:12:13:fe:d8:03:58:4f:0d:96:
42:38:38:83:7a:d6:88:3b:c3:33:8a:55:de:67:28:
b2:91:60:25:3d:96:8a:68:1e:ee:cb:e0:74:b2:b6:
1f:94:ad:ef:f7:ed:d0:9f:21:85:0f:84:86:df:40:
a5:a2:50:1d:5c:c5:13:49:22:c6:6e:d6:de:a2:fd:
9b:2f:a2:a2:71:a9:3d:30:7a:25:9c:2a:57:86:6e:
3d:06:bc:70:63:55:04:1d:7c:dc:99:a6:6a:2b:9f:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:33:43:CE:44:03:81:4B:EC:C3:9F:F1:BF:D3:B3:3F:0F:41:75
X509v3 Authority Key Identifier:
keyid:48:A4:69:3B:1D:CC:C4:9E:E6:60:5A:7D:33:9E:1D:84:7E:F0:AD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKRpOx3MxJ7mYFp9M54dhH7wrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/2IUzQ85EA4FL7MOf8b_Tsz8PQXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/985efa-8bee-4f73-88b7-be3bb6cd2d51/1/SKRpOx3MxJ7mYFp9M54dhH7wrYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f4:6e:d5:97:8b:9b:d9:f0:3e:48:fa:8d:d8:0d:57:53:ff:
4c:07:55:6a:81:4d:06:13:ec:30:ca:2d:e1:32:a3:de:c4:76:
d0:fb:a1:c0:bc:7a:c8:24:67:18:bd:42:0d:55:fb:f0:d4:de:
61:30:2d:0e:56:e4:9d:d3:de:f3:0b:ee:64:c2:08:47:39:c0:
e5:b4:57:9b:e1:fd:25:1c:e2:73:62:e4:1f:93:a8:62:ec:f6:
2f:2a:7d:9b:d6:8d:2f:a4:dc:75:d2:76:3c:7f:c8:07:2d:77:
3e:bc:45:a0:a3:19:45:26:55:b6:dd:d3:c1:ea:6a:22:71:57:
8d:d5:5d:0b:21:29:8a:1c:4a:eb:b0:ba:77:7d:6c:b5:bf:78:
35:ea:bc:3b:63:dd:38:d6:b5:1b:de:e3:5a:1f:c2:ad:29:bc:
86:c4:d1:91:ff:aa:2a:a4:ba:da:eb:91:01:fd:3a:20:57:aa:
75:ff:5d:2d:a9:01:9d:87:11:c0:4e:47:93:8d:89:d6:cb:7d:
cd:84:13:ae:c9:3f:b5:ca:bb:47:2b:35:27:97:fd:00:d2:3d:
cd:7d:74:23:87:dd:e9:69:12:c3:8a:84:cd:71:13:32:25:06:
a3:3b:cb:77:71:85:53:bb:c3:ad:ce:ed:e6:c2:bf:f1:94:30:
b2:1c:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:29 2024 by rpki-client on console-fra.rpki-client.org