Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I5Xaejb977tLvTMb7OGZmqI4rNw.roa
File: I5Xaejb977tLvTMb7OGZmqI4rNw.roa (raw, json)
Hash identifier: rNHMgjNTx7zpSvKJPX0EcHF/SIc5jQMLD0anZsWX0DQ=
Subject key identifier: 23:95:DA:7A:36:FD:EF:BB:4B:BD:33:1B:EC:E1:99:9A:A2:38:AC:DC
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182250ECCE9C748D8820DAE8E800A493664
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I5Xaejb977tLvTMb7OGZmqI4rNw.roa
Signing time: Fri 22 Jul 2022 08:38:23 +0000
ROA not before: Fri 22 Jul 2022 08:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 83.137.152.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:0e:cc:e9:c7:48:d8:82:0d:ae:8e:80:0a:49:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 22 08:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2395da7a36fdefbb4bbd331bece1999aa238acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:96:29:7b:70:0a:6c:74:65:de:9d:0e:75:
85:25:39:87:cb:f0:a8:cb:3d:00:42:d5:ba:83:d6:
55:a1:eb:55:23:67:72:b8:fc:97:e8:4d:49:06:9e:
85:4c:f1:19:23:51:7b:44:5c:79:be:19:0a:1c:c5:
15:4e:89:0e:0a:ec:10:ab:83:63:52:33:dd:93:3f:
1b:b7:a5:f9:41:97:61:84:d0:5b:ab:3c:4d:13:6e:
8d:2a:f3:56:9c:32:67:a6:bf:9f:7f:c4:c0:07:d3:
72:c1:b8:c7:d4:8d:5b:42:23:6f:c3:de:2f:06:74:
0e:85:60:62:db:c6:7b:0f:b5:57:2e:1e:d8:bd:46:
9d:e4:ec:be:5d:08:77:5e:39:bd:71:d6:1c:aa:f4:
32:c1:01:3a:26:be:00:36:18:cd:e0:33:69:bb:eb:
6e:f1:f8:e1:5e:a1:61:0f:3f:a4:97:11:9b:b8:a3:
ca:e4:a6:91:3e:f6:36:67:9f:29:1c:2f:b7:12:3d:
72:87:ea:15:84:b9:02:93:76:4e:33:bb:57:ba:e6:
7c:47:37:2b:24:8c:95:47:a3:a0:51:ea:08:94:ad:
15:8b:30:16:f4:79:df:ed:4d:97:7f:61:9b:39:3b:
93:f0:9b:31:f5:7f:b0:a8:09:c6:66:7f:75:b9:2d:
6a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:DA:7A:36:FD:EF:BB:4B:BD:33:1B:EC:E1:99:9A:A2:38:AC:DC
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/I5Xaejb977tLvTMb7OGZmqI4rNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.152.0/24
88.209.203.0/24
Signature Algorithm: sha256WithRSAEncryption
71:22:f5:01:7c:e3:16:ec:6b:41:ec:f2:26:58:4b:fa:b6:ff:
51:d0:c6:b4:2c:5d:05:44:0b:f8:01:43:cb:3a:f1:c0:51:9e:
ac:24:7e:3e:f0:0d:c5:06:d6:ec:db:cf:61:3f:a6:28:34:9d:
88:32:df:86:4c:29:dd:d7:5e:fa:c2:ea:9c:7a:ec:ea:86:6c:
b9:4a:c6:d3:3f:0d:aa:27:55:aa:c7:0f:97:64:9f:87:84:7f:
e9:16:3d:4c:fa:e8:39:70:17:7f:82:6d:ae:ab:0a:43:eb:ac:
17:b8:96:76:8c:3b:c8:a6:57:85:a2:2d:a6:8a:8b:0f:21:e8:
f9:bc:a4:fe:dc:61:13:05:91:77:7c:b1:93:10:6c:de:ce:70:
18:22:b1:79:10:86:24:49:a7:75:5c:a5:f3:23:01:59:c3:d7:
e0:17:51:1b:4a:44:47:1f:2a:e9:98:a8:51:7e:dc:fc:64:37:
1c:e1:ea:93:54:f5:b6:11:d3:ea:f4:76:66:4a:4f:17:72:a4:
ef:21:6f:f6:17:67:2f:aa:77:75:22:42:14:ee:91:13:a6:45:
ef:79:d5:ae:5c:fd:40:24:a1:82:a5:a1:ed:64:9c:e8:92:1a:
75:0c:2a:59:a2:6e:e4:9f:98:7a:30:a9:db:37:ea:5a:16:e5:
34:da:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org