Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ireBiABcNFji7rlgD6VnGrS2RLc.roa
File: ireBiABcNFji7rlgD6VnGrS2RLc.roa (raw, json)
Hash identifier: 7sRIXr3pYY5gy8GzmROZe53fIjuhh3CGA0oOZRCFIGM=
Subject key identifier: 8A:B7:81:88:00:5C:34:58:E2:EE:B9:60:0F:A5:67:1A:B4:B6:44:B7
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 3940B7B2
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ireBiABcNFji7rlgD6VnGrS2RLc.roa
Signing time: Sat 01 Jan 2022 03:53:00 +0000
ROA not before: Sat 01 Jan 2022 03:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8991
IP address blocks: 83.212.250.0/24 maxlen: 24
83.212.249.0/24 maxlen: 24
195.251.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960542642 (0x3940b7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 03:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab78188005c3458e2eeb9600fa5671ab4b644b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2a:8e:c3:f9:2b:fd:46:98:2a:44:6d:4f:d3:
4f:0f:a4:ff:7f:87:e9:f1:11:a0:9d:81:e9:4a:df:
6a:9b:e1:94:f3:5b:64:73:e6:66:30:17:83:87:ee:
02:cc:1b:81:27:26:cd:47:e2:14:70:f7:19:22:e6:
9f:b6:73:56:31:60:a3:27:ba:01:15:59:28:7e:7b:
a1:b2:0f:cc:99:7c:39:b9:8f:41:de:94:5c:b8:ae:
eb:f8:0c:71:53:97:68:d3:ce:78:d4:db:cd:6b:c0:
a1:e2:72:04:bf:cc:ae:a1:a2:4c:ee:6e:25:3b:0e:
31:41:14:06:21:92:99:43:a4:28:ba:a5:4f:53:1e:
c1:90:d8:80:b7:3a:e2:ab:d6:af:f3:67:57:77:9c:
92:be:a0:c6:36:d4:41:7e:78:ac:78:74:bc:38:da:
66:45:29:1e:5d:e9:12:b3:34:0b:a1:ac:d9:d5:d2:
ca:91:c2:2a:22:31:fd:30:51:e6:a2:48:2a:52:6b:
ea:88:35:2d:04:8f:3e:e0:96:a4:7c:e6:39:d8:b1:
e0:32:e3:b7:9c:c9:3a:6d:d6:fe:7e:26:37:0d:39:
ab:b6:c8:04:dd:3c:a0:24:35:7d:74:67:be:35:62:
aa:41:12:d2:16:3e:2d:ab:0c:e5:39:d6:66:64:88:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:81:88:00:5C:34:58:E2:EE:B9:60:0F:A5:67:1A:B4:B6:44:B7
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ireBiABcNFji7rlgD6VnGrS2RLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.249.0-83.212.250.255
195.251.36.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:40:ad:06:c8:25:00:fc:60:4c:53:35:89:09:1f:7a:ba:aa:
aa:a2:33:f2:7a:dc:fd:2f:03:9f:92:ca:e3:64:1f:2c:d7:9b:
40:56:c0:43:37:0f:0b:1a:54:84:dc:d7:5c:eb:f2:69:fb:8a:
9a:f1:5e:68:bf:d1:18:4f:04:c2:32:3b:20:dd:64:c6:cd:af:
72:71:3f:e8:f8:ee:3c:7b:dd:54:c8:3d:45:96:1b:7b:26:31:
3b:1b:ee:c3:a7:cc:e3:da:70:96:4b:08:30:96:31:13:09:b0:
9f:34:5b:c6:de:cb:cd:a0:09:35:d0:b7:ec:5e:1c:a9:12:c0:
4f:d4:9b:22:c6:26:7a:ae:98:f0:78:ee:f7:74:f6:e9:74:cf:
d9:4d:02:e6:a3:2f:23:86:b4:08:c1:37:83:10:9c:74:6f:6a:
66:83:7d:85:2d:8a:2f:91:b8:8b:13:87:8d:9d:85:11:4a:a2:
5e:c4:06:b6:b8:e4:a0:b8:e8:7b:5a:7e:3e:ad:45:c8:cf:2f:
60:dc:70:a7:b9:0a:45:d0:c2:72:73:76:0f:05:d7:8f:82:d0:
6c:09:66:e3:2c:c8:82:32:56:a3:60:c8:eb:28:5b:d5:79:06:
54:18:4a:5b:5e:e4:d2:dc:16:8b:51:0a:a5:99:d8:62:5c:0b:
28:42:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org