Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/MoR94Jt0-Wkul4Y_tKeZ0SK0rKc.roa
File: MoR94Jt0-Wkul4Y_tKeZ0SK0rKc.roa (raw, json)
Hash identifier: 3GKN6+fKjuDuk4stNlWupgOKb5WdTdmfpvCK7cygvWY=
Subject key identifier: 32:84:7D:E0:9B:74:F9:69:2E:97:86:3F:B4:A7:99:D1:22:B4:AC:A7
Certificate issuer: /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial: 1AD2BCDB
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/MoR94Jt0-Wkul4Y_tKeZ0SK0rKc.roa
Signing time: Sat 01 Jan 2022 14:02:09 +0000
ROA not before: Sat 01 Jan 2022 14:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16356
IP address blocks: 217.144.33.0/24 maxlen: 24
217.144.34.0/24 maxlen: 24
217.144.32.0/20 maxlen: 20
217.144.32.0/21 maxlen: 21
217.144.40.0/22 maxlen: 22
217.144.44.0/24 maxlen: 24
217.144.47.0/24 maxlen: 24
217.144.45.0/24 maxlen: 24
217.144.46.0/24 maxlen: 24
2a02:2a10::/64 maxlen: 64
2a02:2a10::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450018523 (0x1ad2bcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
Validity
Not Before: Jan 1 14:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32847de09b74f9692e97863fb4a799d122b4aca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:a6:bd:e3:c7:f7:d7:b1:65:b3:54:0a:32:
09:c7:30:af:ae:29:c9:d1:04:3e:3b:ed:c4:9b:e4:
f4:3d:6b:fa:5a:01:dc:bb:c9:6f:fb:22:53:db:a2:
76:43:46:43:5b:6b:8a:41:64:88:af:b1:c5:7c:26:
09:ef:80:af:3b:dc:f9:87:d2:c0:5e:c1:7f:86:ed:
a1:ef:e1:e8:56:51:78:7e:8b:d8:7d:42:ab:7c:63:
ab:73:4c:31:25:24:44:5d:cc:0c:6a:f0:be:3e:f1:
fc:68:a2:5b:44:54:2a:d9:bf:b0:de:bf:29:f2:45:
bb:6f:a3:4f:9f:78:4b:3a:85:e2:f0:61:c4:0c:33:
27:d7:58:0d:5a:aa:24:f9:3a:09:9a:55:5a:56:45:
c8:d8:3a:98:fe:ae:83:9d:66:13:16:87:38:0b:b2:
5e:af:18:2e:92:a0:18:0d:63:73:d6:51:99:ea:d0:
e5:db:d8:2a:d3:6e:bf:db:06:57:f5:a8:26:60:d8:
d5:89:06:24:14:de:b1:eb:c3:4a:0f:c6:33:41:a4:
46:3d:a8:ba:8a:eb:ca:ce:a1:f0:b4:43:02:eb:02:
96:84:e9:41:50:80:fd:3e:d8:cf:c9:01:2d:19:ed:
76:6a:fc:b2:2b:43:9f:2f:a8:ae:48:77:60:7a:90:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:84:7D:E0:9B:74:F9:69:2E:97:86:3F:B4:A7:99:D1:22:B4:AC:A7
X509v3 Authority Key Identifier:
keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/MoR94Jt0-Wkul4Y_tKeZ0SK0rKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.32.0/20
IPv6:
2a02:2a10::/32
Signature Algorithm: sha256WithRSAEncryption
1d:2a:10:ba:d8:37:10:b4:54:1e:f2:a3:b9:36:ec:64:a6:b8:
86:57:98:4d:5b:6e:29:43:c7:82:17:d4:42:c3:c1:cc:48:0e:
67:1c:c3:4a:5e:59:2f:a2:9c:41:8a:62:02:d5:fc:ca:8d:41:
8e:5c:b3:9b:e3:e0:13:c6:70:e3:af:c7:2e:33:af:37:8f:6e:
54:85:7b:fd:49:4a:2c:8c:84:d9:cb:98:78:b8:e5:a3:d8:48:
c0:4b:b7:68:f8:67:11:0f:e3:37:5a:22:eb:4f:a1:fb:18:f8:
66:2c:c2:3c:d3:54:e4:1f:0a:89:b8:6e:8e:98:1f:5a:7c:66:
f0:78:90:fa:a1:68:24:01:c6:dd:6a:c6:df:e2:c4:9e:16:df:
20:97:c2:8b:7b:b6:fc:da:a5:b4:26:5d:71:3d:f9:1f:a6:ef:
a5:15:2f:cf:d1:ef:97:c2:34:60:12:34:58:e5:9b:56:ea:c4:
ec:ce:73:73:56:4c:c6:9f:c8:6f:09:0e:35:fa:7b:4f:95:91:
d6:b3:be:89:94:0e:f2:76:c0:70:c3:af:95:f1:2f:5f:40:f5:
65:e8:43:7e:8c:c0:e2:f4:24:82:1e:24:74:54:fe:be:35:30:
a2:9f:3c:82:f6:d6:cb:62:2a:80:10:4d:6e:3c:e6:f1:f7:27:
92:73:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:38 2024 by rpki-client on console-ams.rpki-client.org