Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/l4Jw3_UvVN8aph_kL92-cFQ_WCo.roa
File: l4Jw3_UvVN8aph_kL92-cFQ_WCo.roa (raw, json)
Hash identifier: FRmiEmVN3nLhW4aTZ//jh/LZcscCyoHkNiCA1emAetk=
Subject key identifier: 97:82:70:DF:F5:2F:54:DF:1A:A6:1F:E4:2F:DD:BE:70:54:3F:58:2A
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 03F9CAD3
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/l4Jw3_UvVN8aph_kL92-cFQ_WCo.roa
Signing time: Sat 01 Jan 2022 14:57:00 +0000
ROA not before: Sat 01 Jan 2022 14:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47328
IP address blocks: 212.124.108.0/22 maxlen: 24
212.124.112.0/21 maxlen: 24
212.124.120.0/21 maxlen: 24
185.190.188.0/24 maxlen: 24
185.190.189.0/24 maxlen: 24
83.222.124.0/22 maxlen: 24
212.124.96.0/22 maxlen: 24
212.124.100.0/22 maxlen: 24
212.124.104.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66702035 (0x3f9cad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Jan 1 14:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=978270dff52f54df1aa61fe42fddbe70543f582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:87:73:fa:90:7f:f3:fa:fe:ff:db:73:61:e4:
45:76:db:b5:81:7b:c8:2e:8d:19:36:5b:a1:75:ea:
16:50:d0:ac:4f:d8:b4:85:91:fc:5c:5b:6f:52:e6:
c0:e7:86:1f:fb:d4:5f:fa:83:64:90:56:b9:ba:10:
c1:ad:3f:8e:93:00:89:84:41:4d:d0:f3:5e:a7:f3:
24:80:84:46:a0:51:1c:94:92:20:ed:da:e9:04:33:
50:57:a9:71:40:ca:8c:3b:a3:fe:fe:56:26:a5:45:
92:b3:e2:c1:ee:4c:43:58:c9:45:8d:f6:3d:90:dc:
6c:96:ca:97:2f:87:57:7f:e4:1b:08:8d:c1:11:a7:
79:9a:f8:3a:87:d9:d2:32:72:27:45:cb:6a:64:82:
d4:88:62:f7:2c:8c:bc:97:47:d5:c8:37:eb:46:59:
b6:f7:8b:0d:b9:c4:80:69:4d:1f:2b:b5:75:14:6d:
32:81:a7:59:02:44:fb:c8:64:c3:87:ee:6d:ec:5b:
87:17:68:74:42:fc:b1:d0:8a:9a:e7:5e:23:bc:1c:
06:58:a6:6b:a7:1b:dd:5d:7e:16:04:e9:43:07:88:
83:ed:81:95:dd:70:4f:5c:b5:8c:dd:51:b5:3d:ee:
b0:26:af:b4:9a:d3:c5:ad:19:e4:1b:d6:82:85:0d:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:82:70:DF:F5:2F:54:DF:1A:A6:1F:E4:2F:DD:BE:70:54:3F:58:2A
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/l4Jw3_UvVN8aph_kL92-cFQ_WCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.124.0/22
185.190.188.0/23
212.124.96.0/19
Signature Algorithm: sha256WithRSAEncryption
10:d0:07:f8:0c:7c:c9:56:7b:3e:2e:b0:45:1f:17:1e:95:89:
06:09:8d:ff:c3:7c:5d:69:e0:be:d7:fb:99:47:c8:89:2b:56:
f8:31:98:41:81:27:3c:d2:ac:c0:d5:6f:e4:2a:33:af:62:c2:
ef:58:92:6b:ba:fc:5d:62:58:3f:46:fe:62:52:8a:c7:6f:d7:
1e:39:86:2d:9c:b5:84:80:d7:cb:ec:7c:cd:f4:c8:88:45:d1:
e8:d8:73:1f:3f:99:25:7b:0a:d2:a5:b5:ff:43:be:26:4e:94:
1f:20:30:dc:fb:9d:45:de:44:db:91:66:55:6e:d2:97:4a:35:
ef:6d:3c:09:b4:3c:62:e2:e7:87:ad:0e:d0:a7:01:b2:cf:91:
21:2b:4b:88:a4:10:08:2c:75:bc:24:55:c4:2e:a8:bd:18:1d:
fb:e3:08:c7:95:43:e5:ea:e0:97:1a:e8:fc:cc:89:08:aa:24:
d0:52:65:4d:7e:d3:11:e0:00:ae:26:43:55:de:ca:f7:81:45:
f7:b9:7d:5b:85:d7:31:4d:c7:ea:5d:cb:71:d1:b1:4b:d2:06:
aa:68:64:02:24:da:ee:67:d3:7d:d3:72:f4:97:61:c5:38:6a:
95:cd:7f:89:56:f4:4d:0b:2b:05:5f:e7:9f:bf:c6:76:7f:e7:
8f:f5:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org