Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/oGo8g1qizRX1wGpsHNYnPECqRCk.roa
File: oGo8g1qizRX1wGpsHNYnPECqRCk.roa (raw, json)
Hash identifier: SRBsAd+f2so0Q3X8VxoD7wqVXkzAo018Q7k2jUI83ec=
Subject key identifier: A0:6A:3C:83:5A:A2:CD:15:F5:C0:6A:6C:1C:D6:27:3C:40:AA:44:29
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 02C94635
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/oGo8g1qizRX1wGpsHNYnPECqRCk.roa
Signing time: Sat 01 Jan 2022 15:05:56 +0000
ROA not before: Sat 01 Jan 2022 15:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39244
IP address blocks: 81.21.178.0/24 maxlen: 24
81.21.176.0/23 maxlen: 23
81.21.179.0/24 maxlen: 24
81.21.180.0/22 maxlen: 22
81.21.184.0/21 maxlen: 21
188.65.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46745141 (0x2c94635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Jan 1 15:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06a3c835aa2cd15f5c06a6c1cd6273c40aa4429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:81:5b:bd:07:b6:51:e0:3c:40:63:7f:42:
94:81:5e:97:91:16:c7:22:a1:ca:6b:24:ca:44:24:
c5:62:4a:55:82:ce:c9:e4:92:9b:b6:7c:6b:ba:e1:
c7:c8:42:92:32:52:c1:8a:ed:e1:a8:e6:e6:12:32:
c6:93:74:e6:24:c2:0e:50:6d:fd:9e:25:2f:ca:30:
43:67:46:1f:d4:f7:d9:85:c8:a2:d2:89:e5:18:58:
72:87:89:37:6d:be:b1:a6:35:20:52:b5:0a:d2:40:
d9:f2:f2:6e:0c:19:5e:37:08:89:ae:46:f8:74:db:
01:91:37:54:77:f8:6a:3c:07:72:d9:c5:35:91:4b:
76:3f:2f:27:c1:0d:39:6b:d4:64:1c:47:3a:01:ff:
ba:f4:6b:54:c1:b6:cb:3b:de:52:35:56:47:69:66:
e6:36:f2:da:ef:95:fa:88:65:69:0f:93:03:eb:f6:
33:33:59:13:73:a1:9d:da:cb:5d:ff:4e:ef:54:13:
7f:c1:04:0f:38:30:ef:f6:3e:d1:b5:bc:7b:e4:7b:
97:30:f3:82:38:95:05:0a:fb:09:52:51:d8:9f:96:
48:f8:f6:5b:c7:c2:2c:b4:84:74:20:87:d5:a8:46:
81:cf:8c:c6:5e:77:8f:60:f2:a7:9a:42:fd:85:61:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:3C:83:5A:A2:CD:15:F5:C0:6A:6C:1C:D6:27:3C:40:AA:44:29
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/oGo8g1qizRX1wGpsHNYnPECqRCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.176.0/20
188.65.192.0/21
Signature Algorithm: sha256WithRSAEncryption
19:6d:d5:74:c4:40:9d:a1:7a:d4:7a:7f:d9:ac:9d:0f:3a:52:
1f:8f:7e:3e:e5:f5:26:1f:5c:e1:aa:ed:4f:c5:50:50:0e:b4:
7b:9e:d5:c2:2f:cd:91:79:08:4b:a2:6a:04:a8:d8:40:6a:97:
2f:47:76:67:6f:8a:08:5c:d9:ac:cd:e9:49:89:fe:d8:f8:d4:
b9:3e:58:a3:1b:76:81:5f:7e:74:ad:30:05:bc:80:fb:15:39:
49:8c:18:d0:96:48:71:f5:1b:34:d9:02:c3:c6:80:63:23:95:
1d:61:a0:b7:0c:72:e9:fb:52:24:45:82:62:37:4f:dd:45:a5:
1d:0e:ba:fb:2a:26:d8:a8:f4:0d:60:1d:e7:4e:32:39:68:07:
b0:2a:df:42:4a:38:1b:76:0a:e0:37:3e:43:a3:30:22:ab:75:
df:6f:f1:81:e0:e5:b6:7a:27:3b:03:4b:f8:4c:2f:84:9f:ed:
4f:b7:b0:9c:1d:9e:27:b1:ca:25:16:d3:03:8f:cf:34:ad:98:
94:cc:b5:bd:5c:da:8a:25:3f:c2:ca:09:17:4e:81:0e:a3:09:
e0:da:d1:e5:66:5f:c2:40:3a:8b:88:2a:58:af:ef:bd:4a:e9:
70:75:d7:eb:a9:63:96:9a:15:61:0c:59:7a:f6:96:30:d7:b0:
7b:69:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org