Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/nC2Ok8pGIDisuy3wQuHOR4vCiiI.roa
File: nC2Ok8pGIDisuy3wQuHOR4vCiiI.roa (raw, json)
Hash identifier: 0C6wPMmAV6qp+4pYpvdfnS3dJLdP7GnXHxAjIBI/3/0=
Subject key identifier: 9C:2D:8E:93:CA:46:20:38:AC:BB:2D:F0:42:E1:CE:47:8B:C2:8A:22
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 01852D7DA1751C986DEBCA1AD6A33B219B3A
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/nC2Ok8pGIDisuy3wQuHOR4vCiiI.roa
Signing time: Tue 20 Dec 2022 03:04:46 +0000
ROA not before: Tue 20 Dec 2022 03:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20902
IP address blocks: 80.88.64.0/20 maxlen: 24
194.0.184.0/24 maxlen: 24
46.229.0.0/20 maxlen: 24
109.239.160.0/20 maxlen: 24
80.73.96.0/19 maxlen: 24
2001:67c:2088::/48 maxlen: 48
2a00:1230::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:7d:a1:75:1c:98:6d:eb:ca:1a:d6:a3:3b:21:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Dec 20 03:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c2d8e93ca462038acbb2df042e1ce478bc28a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:b4:c7:3a:ba:40:7e:bc:63:95:28:c5:ca:
5b:ac:67:00:c6:17:4b:95:37:f5:0b:f0:45:8c:47:
9d:07:7f:1e:eb:21:24:9c:ed:8f:3a:83:8b:6f:29:
9b:e4:44:de:f0:54:60:0f:12:83:5e:a7:71:07:6d:
16:1c:ab:6c:95:65:57:e9:b4:56:50:d8:01:ec:a8:
4e:09:b6:1a:00:49:48:0a:33:7a:9b:17:13:e1:f9:
b3:d4:51:5e:4b:ff:f4:39:81:50:68:79:9c:b7:0f:
f5:85:be:e1:a3:52:9b:11:74:a6:8a:93:27:8e:a8:
c8:b8:eb:10:e7:1a:b6:8f:f4:be:cd:a3:64:65:cd:
1b:dc:a9:b2:f2:1f:36:8a:c4:48:e5:7c:86:06:42:
9b:76:30:6e:80:26:a0:0e:53:33:f4:2f:98:1e:a5:
7e:6f:d7:a7:b0:b3:7f:56:43:2f:8a:25:59:10:ba:
8b:28:49:de:ff:9f:61:7f:ff:97:ae:11:f1:26:3f:
51:ac:9f:12:fb:ad:37:8a:bf:99:b1:8e:07:24:ed:
6d:15:7b:a1:10:ce:9c:b4:0f:33:d8:1a:3e:3b:36:
f2:c4:ba:27:99:a4:9e:55:05:20:14:13:3b:ee:56:
55:3e:c3:8c:b5:3e:b5:f1:fc:b5:5b:23:1f:e7:15:
d5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:8E:93:CA:46:20:38:AC:BB:2D:F0:42:E1:CE:47:8B:C2:8A:22
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/nC2Ok8pGIDisuy3wQuHOR4vCiiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.0.0/20
80.73.96.0/19
80.88.64.0/20
109.239.160.0/20
194.0.184.0/24
IPv6:
2001:67c:2088::/48
2a00:1230::/29
Signature Algorithm: sha256WithRSAEncryption
4e:d3:bd:24:9c:f7:45:2f:98:55:aa:34:3f:eb:f6:7e:0f:e5:
e1:c2:cf:21:df:c9:74:54:ba:05:7c:95:2e:74:5b:f2:96:b4:
e2:7f:d8:c8:7a:51:e4:05:c6:59:8c:35:44:47:45:e7:9c:37:
64:03:4a:6a:d5:27:1f:75:96:97:38:44:0d:90:17:e1:64:34:
89:f6:6c:a7:64:ec:16:cf:15:4a:ef:e2:3a:fa:ee:f7:3a:08:
fe:1a:e3:3f:9b:b0:5c:ed:f7:e7:53:8b:f8:3e:b9:c2:82:cf:
13:1d:28:37:9f:a8:a0:de:33:82:a6:9b:07:f6:35:2a:59:37:
57:fc:ef:1d:63:dd:5c:ab:bd:d9:6f:a8:8b:db:f9:8c:ff:4e:
20:f9:6c:18:81:fd:c4:1e:fc:83:0d:ec:48:97:6f:51:f0:bb:
8c:65:6b:35:ea:b6:8a:25:5d:8a:41:ed:1f:1e:19:1a:9d:8b:
7c:f6:1b:a4:19:1d:f8:b1:e1:56:a9:0e:e4:a5:93:16:49:7f:
47:1c:ca:e2:11:27:7c:d2:27:ce:09:de:c0:0c:12:d7:78:39:
13:93:52:24:48:40:ac:01:0b:de:6c:e8:a6:b1:5b:1e:20:2b:
fe:d5:ac:bf:37:0b:18:43:22:15:bd:6c:dd:55:cc:7f:e5:ff:
be:c3:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:25 2023 by rpki-client on console-ams.rpki-client.org