Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/IoVGAoSSTr4MuWmW526gRdZ1OOE.roa
File: IoVGAoSSTr4MuWmW526gRdZ1OOE.roa (raw, json)
Hash identifier: zlOeVqO07zOrfNipMqg/VjZ7S3itSsMDo9RTu7D0dKo=
Subject key identifier: 22:85:46:02:84:92:4E:BE:0C:B9:69:96:E7:6E:A0:45:D6:75:38:E1
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 021468
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/IoVGAoSSTr4MuWmW526gRdZ1OOE.roa
Signing time: Tue 08 Feb 2022 13:25:51 +0000
ROA not before: Tue 08 Feb 2022 13:25:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12930
IP address blocks: 128.65.128.0/21 maxlen: 21
185.102.228.0/22 maxlen: 22
2a03:8a80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136296 (0x21468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Feb 8 13:25:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2285460284924ebe0cb96996e76ea045d67538e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:00:48:94:38:93:11:69:f7:ce:bb:38:31:
ca:56:09:2e:d9:6a:34:02:7c:a0:8d:4d:fa:bf:ce:
ba:38:3a:49:bf:f4:42:84:1d:b5:e4:5d:32:ff:6f:
9d:f8:e6:01:d5:13:77:8e:30:a5:6b:1b:06:dc:63:
20:6c:42:17:ae:6f:e3:40:8f:ef:34:f0:3e:9d:0a:
c9:08:e2:82:9c:a1:29:b7:9e:6c:dd:f9:a5:10:83:
66:c0:d6:50:c7:dd:50:23:66:81:c4:b4:85:41:2a:
c0:49:45:f4:cb:66:92:3f:12:29:e3:a8:7f:d4:2a:
c1:5b:1e:85:40:48:60:86:ee:10:53:bf:d6:ca:54:
ee:40:7e:f8:74:de:8e:86:7f:4d:a4:5b:29:62:6c:
0a:25:d7:34:9e:c0:52:08:a1:17:cc:e4:2f:2f:23:
e1:b2:66:b6:20:50:1a:66:25:fd:30:3e:9d:54:91:
04:0f:0e:22:d6:50:9b:a9:27:74:23:ed:f3:68:d6:
73:f7:87:76:68:e2:90:3e:cc:b0:16:79:07:fa:91:
46:cf:68:4c:6a:d1:16:a5:d1:5c:8d:a7:05:db:64:
cd:38:25:49:b8:d4:f9:0e:6e:eb:e9:0b:d8:70:20:
ef:24:0d:c0:6a:23:67:6f:f1:78:0c:29:46:8c:93:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:85:46:02:84:92:4E:BE:0C:B9:69:96:E7:6E:A0:45:D6:75:38:E1
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/IoVGAoSSTr4MuWmW526gRdZ1OOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.128.0/21
185.102.228.0/22
IPv6:
2a03:8a80::/32
Signature Algorithm: sha256WithRSAEncryption
41:3a:48:37:6d:6e:fd:ee:e9:94:40:60:f2:20:b5:21:c3:75:
58:b8:da:3a:d9:0d:c9:e2:29:ff:e6:09:96:79:38:75:a9:de:
9e:03:9e:8f:48:e1:85:73:6d:99:fe:26:ec:f6:a2:53:37:73:
19:c8:39:e1:5b:4f:e4:92:9b:8b:16:20:cd:10:22:dd:46:0b:
60:9a:bd:ae:6f:9d:95:af:db:4b:16:ae:30:e2:49:dc:4a:88:
f6:b9:87:ee:d2:f9:17:df:d5:e7:ad:d5:2e:81:0e:ec:b6:38:
5b:64:1b:dd:19:2d:6c:b0:c9:4c:6d:88:ad:ef:46:91:e7:42:
aa:b4:09:9f:f5:34:5a:1b:26:15:7a:09:f4:5c:a7:56:af:03:
31:e9:c2:b3:df:8b:c9:78:80:ba:6c:63:a7:50:90:97:4e:50:
f5:b5:b4:90:35:55:d9:a8:ab:65:c6:5f:17:ad:55:8d:c0:71:
e5:28:66:fa:e9:99:c7:45:d5:c4:19:4c:dc:9c:3c:09:ad:d4:
0a:83:0a:fc:46:c5:cb:62:da:5c:8d:b6:c3:28:02:25:73:12:
e2:b2:3b:3a:9d:98:5f:9d:28:0e:a6:1f:7f:cb:97:a8:5a:81:
4a:65:66:9b:83:bb:b9:30:8a:c6:8e:3d:af:25:24:22:0b:07:
21:b4:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:44 2023 by rpki-client on console-fra.rpki-client.org