Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/96H447lq5TS9gQs9cpZZZHKSPGw.roa
File: 96H447lq5TS9gQs9cpZZZHKSPGw.roa (raw, json)
Hash identifier: MADxSpB1LPmTbBKqUhFy8kQeHmk8YnF/tz7xmb8kREA=
Subject key identifier: F7:A1:F8:E3:B9:6A:E5:34:BD:81:0B:3D:72:96:59:64:72:92:3C:6C
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 365FCDCD
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/96H447lq5TS9gQs9cpZZZHKSPGw.roa
Signing time: Tue 08 Feb 2022 10:10:33 +0000
ROA not before: Tue 08 Feb 2022 10:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912248269 (0x365fcdcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Feb 8 10:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7a1f8e3b96ae534bd810b3d7296596472923c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:96:aa:73:a5:bb:23:34:6e:71:bf:c9:48:
5d:48:cd:0e:e9:8f:c7:05:c7:55:b3:b1:21:a7:7b:
c9:0a:d8:6c:5e:94:ae:78:3c:3c:37:94:b0:ef:91:
17:cb:73:32:77:78:fe:2f:2d:c7:c6:40:00:e2:2c:
08:c5:4f:fa:99:fc:c3:1a:ab:9a:2f:d3:c7:7b:7b:
f4:e3:d4:ab:02:f5:27:9b:3d:3e:80:b9:d5:b4:c2:
d5:70:6b:44:b8:9b:3e:48:bf:cc:17:61:87:0e:15:
ba:7d:e1:5b:f7:8f:75:c8:26:fa:ae:b9:af:d3:e4:
53:dd:96:20:bc:95:c2:63:0e:1d:17:d6:14:16:9a:
c9:e5:03:ec:ff:48:4b:e3:ea:b8:ee:e1:ef:00:6c:
b7:3b:d4:95:90:85:17:bd:1e:13:1a:df:5a:84:1e:
81:8b:57:73:a1:c1:0b:00:c0:aa:33:b5:24:87:15:
53:ae:b9:bd:81:bf:ac:39:59:08:1b:75:08:ff:08:
a3:ea:91:cd:0d:33:ea:b9:59:a6:8a:0d:cb:d2:93:
60:02:57:21:92:7c:bb:7c:3a:1d:b6:5d:3f:70:0a:
01:0e:81:0f:37:b7:33:55:2d:43:25:4a:c4:92:65:
29:d1:07:20:77:b1:c9:b1:c4:d8:96:79:62:90:a2:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:F8:E3:B9:6A:E5:34:BD:81:0B:3D:72:96:59:64:72:92:3C:6C
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/96H447lq5TS9gQs9cpZZZHKSPGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:5a:f0:1f:a4:24:be:4e:53:d2:1c:70:e3:14:e3:16:b1:c0:
30:80:de:6a:06:01:80:1c:cd:2d:19:75:71:17:1e:ba:57:bb:
e5:54:dc:1c:c6:f8:30:e1:0c:bb:8c:42:6f:2d:7a:f2:81:1f:
9a:cd:b2:c9:c8:ff:02:bd:3b:90:b5:f6:20:b9:b0:85:d2:12:
38:ff:8b:fa:80:39:f0:8f:ee:c8:97:24:bb:bf:26:46:6a:8c:
13:83:ef:74:a9:37:ba:82:f9:88:a1:42:aa:42:d8:3a:50:dc:
04:bf:b1:91:67:ae:55:e3:7c:61:96:6e:f3:73:2b:e0:2d:73:
1a:cc:73:23:e9:01:6d:d7:e3:8c:b4:d9:99:8c:32:cd:bf:32:
d3:a6:78:c7:43:ee:d2:bf:ab:14:e5:50:d7:c4:25:08:1e:c0:
46:c7:b1:8e:99:bb:85:d8:95:99:94:1b:5b:9b:b2:7c:51:be:
10:d5:35:af:62:87:fb:4f:3b:a4:40:be:24:97:2c:4d:ca:17:
91:b0:66:5d:df:96:63:3f:e8:d5:77:a4:17:c2:32:ea:55:d0:
e4:77:0c:d7:29:8b:f5:78:c4:30:05:19:52:55:1b:a4:eb:5a:
47:71:b2:27:f1:87:7e:11:99:5c:5e:52:13:25:ac:fb:df:29:
0e:54:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:31 2023 by rpki-client on console-ams.rpki-client.org