Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/w27P_fUiRV0aXj3mCwAOvxG-i8E.roa
File: w27P_fUiRV0aXj3mCwAOvxG-i8E.roa (raw, json)
Hash identifier: SGE54sQ+CXCYvx4gPpQQlCSYMU+5xInaU8OG51dVcms=
Subject key identifier: C3:6E:CF:FD:F5:22:45:5D:1A:5E:3D:E6:0B:00:0E:BF:11:BE:8B:C1
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 0184C78174C1E1B652C1542DD011F58E29F2
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/w27P_fUiRV0aXj3mCwAOvxG-i8E.roa
Signing time: Wed 30 Nov 2022 07:47:40 +0000
ROA not before: Wed 30 Nov 2022 07:47:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29156
IP address blocks: 147.29.192.0/18 maxlen: 18
147.29.0.0/17 maxlen: 17
147.29.128.0/20 maxlen: 20
147.29.144.0/22 maxlen: 22
147.29.148.0/23 maxlen: 23
147.29.152.0/21 maxlen: 21
147.29.160.0/19 maxlen: 19
2a01:5440::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:81:74:c1:e1:b6:52:c1:54:2d:d0:11:f5:8e:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Nov 30 07:47:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c36ecffdf522455d1a5e3de60b000ebf11be8bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:ec:1c:f4:c4:a9:45:54:33:d0:46:a1:65:
cc:79:2a:b9:72:ea:15:b5:be:44:02:1b:ec:bd:6f:
05:41:36:7d:a4:21:01:a5:27:68:26:e7:d3:a6:85:
b8:3e:6e:1d:3c:dc:41:dc:c7:e6:45:05:9c:49:ff:
5f:7b:f7:f9:23:8b:9f:84:23:c7:a9:11:9b:09:6d:
97:ae:43:6c:1a:90:78:12:6a:6a:66:f0:f7:1d:c4:
b7:da:08:f4:26:24:15:c2:ba:e8:d7:0c:d8:4d:4e:
a3:73:8d:41:d4:4e:67:94:db:41:e4:31:cb:6d:b9:
0d:fe:fa:f0:a3:37:9d:f2:28:80:c1:ed:6c:df:1e:
35:7a:e7:96:3a:4e:e9:29:82:60:fd:e4:9b:28:fe:
7e:58:d8:5a:01:ac:7a:89:df:24:53:da:cf:bd:f5:
01:a8:c9:ff:38:bb:9b:e2:b9:cc:d5:4e:72:03:ef:
7e:20:cc:3f:16:04:51:2e:3f:61:aa:9b:e1:75:02:
d2:98:34:3f:92:ab:1f:4e:67:40:b9:05:4a:be:0c:
cb:2f:39:61:69:98:13:ed:69:e6:43:5d:a9:d1:77:
a7:fc:50:7f:7c:91:d1:ae:85:30:2e:7d:37:34:da:
ef:a6:2e:6d:e0:96:90:10:09:71:0f:14:64:9b:52:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:CF:FD:F5:22:45:5D:1A:5E:3D:E6:0B:00:0E:BF:11:BE:8B:C1
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/w27P_fUiRV0aXj3mCwAOvxG-i8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.0.0-147.29.149.255
147.29.152.0-147.29.255.255
IPv6:
2a01:5440::/32
Signature Algorithm: sha256WithRSAEncryption
48:c2:07:09:74:39:32:ca:3f:d1:5d:56:af:47:9a:83:d2:68:
88:a2:89:6a:79:d5:6c:59:7c:64:3c:b0:2a:23:ab:5f:3d:13:
e8:a1:be:8b:bd:7c:5e:5f:41:07:1a:49:1c:c2:97:f8:b1:e2:
8f:76:46:1f:4e:f1:15:ba:38:38:e2:5f:8d:85:0a:56:cd:97:
b3:a1:2f:3e:4f:60:97:1e:0f:97:7c:fc:7c:3d:72:5e:8b:e5:
fb:19:e8:d9:c9:06:23:39:5f:12:20:4f:a0:b1:89:76:c0:c5:
0c:92:0d:0b:60:15:29:18:c8:94:e0:86:d6:04:1b:46:f7:a5:
b9:c4:2f:d6:ec:ae:aa:93:9c:55:68:21:74:73:2c:81:ab:49:
82:61:91:99:92:12:d4:d9:8c:8a:e2:3f:b8:94:62:00:ec:2a:
8e:7e:2b:c9:3c:53:68:23:28:c2:d9:8c:bd:f6:d2:31:91:ac:
c8:03:17:45:be:ed:f5:b6:04:f5:7d:25:2c:bd:e8:bc:f1:15:
95:e4:b3:73:5a:9e:fb:a1:54:2a:67:02:dd:3a:a4:02:d2:26:
05:24:9b:a5:71:25:b9:58:44:c8:d9:6f:96:09:e7:3b:b8:30:
e0:67:05:87:3f:2e:ec:53:60:94:ab:ad:c3:a8:a8:48:1a:f4:
79:8f:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:53 2024 by rpki-client on console-ams.rpki-client.org