Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9vRCrl-9FN-yvIFfddprcspyyA.roa
File: A9vRCrl-9FN-yvIFfddprcspyyA.roa (raw, json)
Hash identifier: vq25R8ZCHODdT+gbZ1VOQ47qGCu8GFksMFEMtqJ9XhQ=
Subject key identifier: 03:DB:D1:0A:B9:7E:F4:53:7E:CA:F2:05:7D:D7:69:AD:CB:29:CB:20
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018437DAB512AD1B33077DD610D0B8ECE992
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9vRCrl-9FN-yvIFfddprcspyyA.roa
Signing time: Wed 02 Nov 2022 10:19:50 +0000
ROA not before: Wed 02 Nov 2022 10:19:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208392
IP address blocks: 185.112.80.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:da:b5:12:ad:1b:33:07:7d:d6:10:d0:b8:ec:e9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 2 10:19:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03dbd10ab97ef4537ecaf2057dd769adcb29cb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:11:55:d4:7b:03:f3:73:4e:d5:88:5f:5b:
6d:8c:9c:e3:1f:27:97:51:98:b5:fe:58:f4:ca:78:
f6:6c:1a:9b:ce:e2:a3:11:a9:f8:c7:32:20:17:51:
b7:ee:6e:08:4b:d5:2f:64:fd:e8:68:ff:82:e1:fc:
23:db:90:f9:94:f9:9c:6c:2b:10:d7:97:52:37:b6:
89:08:29:19:8d:bd:33:81:71:88:b1:d4:47:ec:5a:
25:08:46:70:3a:d1:c3:73:c1:0d:de:55:a6:e6:84:
fc:0a:72:96:b1:e8:ee:34:a4:74:c2:44:96:16:dd:
57:36:0d:c3:66:9a:eb:8e:9d:23:16:f5:f1:4b:ff:
af:e0:a1:15:15:f8:a7:cd:bf:a7:1a:af:65:5f:60:
50:22:82:29:35:48:8b:36:0a:39:b4:7f:37:3e:46:
69:73:13:29:ab:0d:d6:48:a2:57:2b:fc:22:2e:6a:
9c:ea:8b:85:0e:ba:02:c6:85:89:14:a3:f7:e9:9b:
c9:0f:40:35:a1:33:91:76:f5:d4:4d:92:4a:2a:be:
e5:77:66:7e:e2:ec:43:0b:9e:f9:76:53:b1:48:ea:
57:e5:b1:cf:ac:ca:74:86:d6:b5:5e:6b:ac:aa:af:
90:66:db:59:48:6e:b0:63:b3:c6:db:84:14:15:e1:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DB:D1:0A:B9:7E:F4:53:7E:CA:F2:05:7D:D7:69:AD:CB:29:CB:20
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/A9vRCrl-9FN-yvIFfddprcspyyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.222.0/24
185.17.1.0/24
185.112.80.0/24
185.112.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6d:81:42:c6:2c:9d:95:a5:26:1a:6d:f8:64:dc:05:71:98:
10:e6:04:27:e9:04:14:2b:ea:cf:fc:d6:6b:ba:8b:57:90:f8:
8a:fd:3a:f2:6f:b3:f4:e8:37:64:a2:bd:91:bf:f7:fa:27:16:
37:b7:ae:e8:a9:e8:da:4e:df:e6:26:23:72:4a:1d:d1:53:3e:
da:c7:f7:e1:65:94:63:6b:65:73:90:20:8a:78:ef:03:15:b5:
79:2d:ec:98:e1:cc:55:e6:5b:c1:21:b6:2b:c2:83:7e:98:1a:
1d:f6:2e:ea:cd:91:10:04:0c:71:e9:f8:a3:bf:10:23:61:11:
80:69:8c:0e:b8:b6:0a:4c:1e:98:17:4a:4d:32:d7:b9:80:c2:
c5:24:c6:5e:fa:0e:5f:32:e5:e3:ee:d2:b3:e1:6f:0c:f5:0a:
7a:b9:48:a7:e3:39:a4:1b:4b:9e:1e:9d:8b:d7:c1:c4:2a:f3:
4a:df:ca:8d:5a:b1:14:98:f8:80:e8:e1:3d:2f:a9:2b:eb:06:
63:7e:b9:eb:3e:27:c2:ed:a6:f8:d6:a6:3e:14:53:15:23:82:
bb:e2:fe:5e:c1:32:b1:6a:fd:f7:aa:52:b9:7c:29:ff:62:ac:
76:a2:86:47:d4:a5:37:5c:73:b5:6e:2d:ac:2a:86:b0:fe:12:
31:d5:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org