Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/C-eVMeENfBBCk8pGixKceMmk-PQ.roa
File: C-eVMeENfBBCk8pGixKceMmk-PQ.roa (raw, json)
Hash identifier: wTKEDF3fmCsestbTKtIQN38748/+VVOh/+vuoHbeDAY=
Subject key identifier: 0B:E7:95:31:E1:0D:7C:10:42:93:CA:46:8B:12:9C:78:C9:A4:F8:F4
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0A29C68C
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/C-eVMeENfBBCk8pGixKceMmk-PQ.roa
Signing time: Thu 28 Apr 2022 07:53:12 +0000
ROA not before: Thu 28 Apr 2022 07:53:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211545
IP address blocks: 82.119.71.0/24 maxlen: 24
176.67.237.0/24 maxlen: 24
176.67.236.0/24 maxlen: 24
89.252.204.0/24 maxlen: 24
89.252.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170509964 (0xa29c68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Apr 28 07:53:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0be79531e10d7c104293ca468b129c78c9a4f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:a0:f6:2e:b6:3d:eb:c1:02:bc:2b:78:fd:
b8:c3:05:32:5d:3a:d2:74:47:56:d0:e9:4b:d3:08:
bd:8f:b4:c8:a7:53:8a:0b:6e:7f:06:69:73:76:43:
3e:2e:ce:b0:0a:5f:3c:30:6e:6a:9c:53:bf:d8:40:
28:0c:7a:3c:0b:5f:05:33:c3:dd:b7:c9:2c:df:3b:
24:22:7c:70:48:5c:47:a8:ba:e0:08:67:29:11:ab:
83:6e:2b:94:39:52:ba:9e:5c:43:e6:e6:da:8f:e7:
33:7d:9f:2b:56:c3:8e:0c:29:94:4c:92:37:25:d8:
c8:75:16:bd:8a:62:52:a1:4f:79:5e:e8:8b:b4:e9:
92:c0:34:6b:b7:e6:d8:bd:06:4f:31:13:62:4b:2e:
57:e2:16:42:fe:12:28:da:0a:17:ff:2b:93:b9:ea:
e0:fe:8c:2a:17:af:ef:c2:69:bc:8a:3d:ab:dc:87:
60:b8:23:17:cc:a3:79:1f:1e:3f:a0:e0:e0:d5:d6:
74:dc:8b:39:b3:bf:1b:ba:ab:48:e9:cf:6e:e8:5d:
c9:04:45:43:5a:4e:7b:52:76:40:08:cd:ab:a9:1c:
dc:5e:2b:ca:4d:79:7f:4f:af:cf:d7:1f:d8:24:31:
a0:c3:b7:7c:5a:e1:7b:78:b9:dd:25:fc:aa:37:3c:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:95:31:E1:0D:7C:10:42:93:CA:46:8B:12:9C:78:C9:A4:F8:F4
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/C-eVMeENfBBCk8pGixKceMmk-PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.71.0/24
89.252.204.0/23
176.67.236.0/23
Signature Algorithm: sha256WithRSAEncryption
cf:e1:5a:f8:5b:38:28:58:43:d0:bc:b4:12:50:38:6c:d6:4e:
d9:13:0c:f6:21:66:2c:1a:8e:d7:8d:7e:db:16:8e:d4:dd:a0:
79:83:88:da:2a:7f:20:29:3b:c6:32:fb:0a:51:63:a3:70:f0:
3a:37:d3:10:6e:e5:02:83:20:90:05:df:aa:a8:72:0d:ce:81:
d0:6e:9c:e2:5f:c0:1f:ae:b2:fe:ad:73:ac:8c:2a:ce:69:d9:
64:a0:04:ff:9c:ed:81:a6:7b:05:ac:e7:5c:a0:68:2a:a9:54:
b0:59:cc:f1:ff:1e:67:9a:a4:79:46:36:03:d9:9f:6f:8e:a1:
29:7d:6d:ba:45:b6:7b:cf:04:ac:f8:51:6e:5a:20:1b:7f:12:
44:d9:59:6e:91:27:7e:16:8c:76:34:65:ed:a0:35:d1:44:7c:
ba:88:e8:e9:f5:70:a0:62:f6:af:d0:d2:e2:d0:65:ff:e1:a2:
e7:e1:ef:ca:db:57:fa:da:4b:0e:79:d7:e5:d7:69:ef:f0:f2:
1a:e2:48:4a:89:9f:58:0f:aa:1c:59:6d:4a:3e:78:cf:2c:56:
07:21:c2:da:94:a5:84:c0:d4:d8:48:13:9f:fc:65:cc:c8:36:
16:73:6c:27:a8:d9:0b:05:81:20:08:ad:02:7d:21:51:68:88:
83:89:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org