Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7OBvDee91a4ewpRyxPp2m5yRiNw.roa
File: 7OBvDee91a4ewpRyxPp2m5yRiNw.roa (raw, json)
Hash identifier: c/NIZ62vH204KQimfhTy1IZhG0jQ9ErgPFZ9ErXKK64=
Subject key identifier: EC:E0:6F:0D:E7:BD:D5:AE:1E:C2:94:72:C4:FA:76:9B:9C:91:88:DC
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 393E274A
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7OBvDee91a4ewpRyxPp2m5yRiNw.roa
Signing time: Sat 01 Jan 2022 03:52:57 +0000
ROA not before: Sat 01 Jan 2022 03:52:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8611
IP address blocks: 195.251.232.0/22 maxlen: 22
83.212.204.0/22 maxlen: 22
195.251.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960374602 (0x393e274a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:52:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ece06f0de7bdd5ae1ec29472c4fa769b9c9188dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:1a:75:18:b4:82:da:01:d1:e6:bc:29:7c:
88:93:a6:c3:cb:de:d2:9e:00:47:0d:01:f4:3a:c9:
ce:bf:60:88:4e:f0:c6:b9:c9:59:0b:e1:d2:06:6c:
bd:8e:a7:b8:f6:02:62:71:58:08:ec:45:5c:ce:c9:
19:2b:4d:fa:91:4b:60:e4:d8:c0:95:41:b5:01:b1:
05:2f:a0:ef:15:f0:94:76:9d:b7:4b:73:98:c1:35:
f2:14:9e:5f:75:3f:b7:c6:ee:6b:e8:b4:44:cb:57:
e4:be:7b:b5:62:0f:7f:13:31:dc:4d:3b:b6:04:00:
29:11:7a:e1:62:4d:18:69:81:d5:3a:9c:2e:30:1d:
32:f2:94:39:67:22:14:67:7e:7a:26:9c:05:59:54:
48:7f:d3:c0:43:8c:04:71:ce:c1:8d:75:29:fb:29:
14:7c:66:40:a5:cf:8b:92:03:9f:30:aa:93:a1:0a:
75:7e:1a:92:e3:07:a1:ca:be:f8:94:fd:67:1d:93:
3a:24:e9:05:b2:cd:94:bb:e0:41:98:3c:cb:95:66:
9d:bf:b2:8d:a7:63:ea:8c:e2:43:4a:1f:2f:10:39:
d0:c9:bb:b6:86:40:e4:8f:2a:99:f8:f2:fe:db:94:
4c:6c:cd:ba:00:2d:67:19:9d:21:7e:72:ab:9f:6d:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:6F:0D:E7:BD:D5:AE:1E:C2:94:72:C4:FA:76:9B:9C:91:88:DC
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/7OBvDee91a4ewpRyxPp2m5yRiNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.204.0/22
195.251.232.0/22
195.251.248.0/21
Signature Algorithm: sha256WithRSAEncryption
54:74:95:7d:36:d6:db:00:eb:bd:59:c5:f8:8c:5f:59:6c:98:
38:7c:1c:38:d8:d1:d0:9d:5d:77:07:7d:18:6e:43:f9:42:eb:
8a:68:d4:bc:a4:0a:7e:eb:7e:36:29:8e:99:a2:54:f2:2e:5f:
e4:fa:8b:41:5a:aa:7c:49:ca:94:75:7d:59:50:65:d0:a0:b8:
24:2b:ca:ad:37:16:91:09:76:7a:38:c3:88:dd:c3:45:dd:a4:
66:7f:ba:82:60:d6:0f:bc:07:79:cd:f4:ff:90:1e:fa:89:04:
64:23:a7:e8:10:b3:23:cb:63:2a:4f:57:bd:8d:d1:90:cb:1d:
22:54:48:18:b4:64:da:92:07:0c:3c:e4:df:5e:2f:ee:a2:6b:
ac:1b:ce:f5:f2:80:e7:81:ad:b2:67:7c:d2:e7:8e:9b:88:6d:
0e:c2:47:6b:6b:cd:ac:3b:77:4a:11:70:cf:3f:e4:ec:9b:71:
28:63:15:20:cf:85:f7:2e:90:f3:5c:ca:c2:71:57:21:17:0a:
f7:b3:e8:a2:a1:99:10:df:eb:27:bb:a7:a4:6e:59:ae:4b:9f:
00:b8:6d:97:57:72:94:fe:da:59:20:1d:c7:8f:ac:32:b1:38:
33:e8:96:64:a7:17:df:00:01:d5:5c:b5:1b:21:d3:96:23:38:
cf:bf:42:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org