Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/g5Wk9n2zXKE_LBavw1u_nhelOOQ.roa
File: g5Wk9n2zXKE_LBavw1u_nhelOOQ.roa (raw, json)
Hash identifier: PM7pKILlB6qIT+JEoIYKudaB1CAL+Xekf//7QKOBLCo=
Subject key identifier: 83:95:A4:F6:7D:B3:5C:A1:3F:2C:16:AF:C3:5B:BF:9E:17:A5:38:E4
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 0942C0AE
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/g5Wk9n2zXKE_LBavw1u_nhelOOQ.roa
Signing time: Wed 22 Jun 2022 09:57:44 +0000
ROA not before: Wed 22 Jun 2022 09:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51691
IP address blocks: 37.16.96.0/20 maxlen: 23
178.213.232.0/21 maxlen: 21
2a00:4cc1::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155369646 (0x942c0ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jun 22 09:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8395a4f67db35ca13f2c16afc35bbf9e17a538e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:d7:80:6e:eb:d6:42:76:81:49:88:75:6d:
94:e8:d1:54:1d:77:5e:68:4b:12:53:6d:5f:d5:98:
8b:7b:d5:ef:b0:b2:92:e6:2e:b7:8f:cb:ce:6c:22:
46:cd:ca:60:55:35:1c:9f:fd:a7:d8:d9:ae:4d:a4:
46:40:86:0f:d7:a0:29:5f:62:cb:d2:2d:cc:4b:80:
36:88:f5:c8:a6:f5:a1:68:2a:bc:16:21:98:04:31:
04:0b:ee:86:d3:62:dd:12:0d:c3:25:72:41:2a:21:
10:0a:63:2f:24:f0:6f:ae:e6:04:e1:45:bd:c5:9f:
c3:22:dc:99:57:0d:26:34:45:23:88:3f:24:16:46:
f1:30:ce:cc:a0:61:80:16:c8:2b:cc:1b:97:28:da:
62:38:77:1b:98:f3:a8:da:32:d4:83:81:fa:c4:2d:
97:20:6c:d2:fa:d5:e2:22:35:4c:68:65:e7:a7:25:
4f:05:8d:8e:76:6f:a6:d6:f6:ec:29:47:27:53:53:
05:7b:b9:29:08:29:fc:91:13:e8:17:e8:9f:98:79:
2a:f0:c5:bd:79:63:a7:30:fe:81:e2:70:75:d8:82:
ca:d9:ed:79:9f:71:66:78:1e:c0:be:07:34:5f:4f:
34:da:e2:d4:fd:48:11:35:97:04:00:2b:e9:b7:53:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:A4:F6:7D:B3:5C:A1:3F:2C:16:AF:C3:5B:BF:9E:17:A5:38:E4
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/g5Wk9n2zXKE_LBavw1u_nhelOOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/20
178.213.232.0/21
IPv6:
2a00:4cc1::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ed:2a:f5:3d:21:d2:b3:3b:79:6c:ca:d3:b1:04:0b:91:94:
36:67:ad:aa:a5:dc:cc:2f:0a:21:22:ea:6c:e6:cc:93:72:de:
2b:d6:ba:8e:f4:e3:3b:8d:62:73:38:24:4d:53:b3:a5:05:0a:
e7:99:6c:c1:6b:86:7d:85:9b:bb:64:00:ac:a9:3b:d8:17:16:
03:d1:c1:74:5f:59:d6:0d:30:04:d2:8e:78:a4:1b:97:46:2b:
38:73:6d:df:84:f5:70:8b:87:3e:01:0a:ae:da:81:22:1c:4e:
41:88:27:b6:35:da:30:c4:44:78:24:38:e9:26:0b:dc:31:a0:
4c:93:dc:67:4c:b3:40:fe:9b:92:b2:91:87:d0:9b:ab:86:3b:
9a:7a:52:a4:7b:e9:d2:04:2e:a7:57:0c:51:b4:04:d9:31:5b:
24:8b:d6:c3:f4:e3:b5:d3:1f:13:6b:72:2e:ee:64:ea:fb:db:
70:46:9f:28:8f:b2:73:89:8e:52:3a:45:69:6d:b1:b9:89:d9:
51:14:94:51:c3:a1:f9:09:62:06:c9:a1:29:db:69:86:94:ee:
94:f2:22:20:73:1b:58:10:15:f3:08:4d:63:56:24:78:81:ba:
45:34:be:7e:5c:f9:7b:41:1d:5a:45:97:c2:5e:91:72:13:06:
c8:74:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:31 2024 by rpki-client on console-ams.rpki-client.org