Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/H0-ii02Zmqy5HKDE1fM3VKPUkug.roa
File: H0-ii02Zmqy5HKDE1fM3VKPUkug.roa (raw, json)
Hash identifier: zyrt3RP7BHeC6cAWEdoi0s5sdkOdIhDbB9ceSlGOjUI=
Subject key identifier: 1F:4F:A2:8B:4D:99:9A:AC:B9:1C:A0:C4:D5:F3:37:54:A3:D4:92:E8
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 03DA65A7
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/H0-ii02Zmqy5HKDE1fM3VKPUkug.roa
Signing time: Sat 01 Jan 2022 13:04:45 +0000
ROA not before: Sat 01 Jan 2022 13:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39684
IP address blocks: 81.88.80.0/22 maxlen: 22
81.88.84.0/24 maxlen: 24
81.88.85.0/24 maxlen: 24
81.88.87.0/24 maxlen: 24
81.88.88.0/24 maxlen: 24
81.88.86.0/24 maxlen: 24
81.88.95.0/24 maxlen: 24
185.200.140.0/24 maxlen: 24
185.200.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64644519 (0x3da65a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jan 1 13:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4fa28b4d999aacb91ca0c4d5f33754a3d492e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:28:6c:a2:1f:6f:50:b1:db:2b:73:f8:be:
00:cf:b3:74:92:c3:22:a6:e5:b3:91:c3:33:08:67:
f0:c7:0c:16:21:9d:e1:45:31:f9:c4:64:f9:d4:6b:
3e:5b:0c:f5:e4:99:b5:d8:11:5b:81:98:1a:7b:55:
bd:c0:5f:7c:cd:d9:4e:dc:a3:ae:6d:aa:d4:01:94:
b5:51:7d:b4:e2:0e:dc:23:1b:91:15:fe:4f:a5:0b:
2b:b7:6e:7b:65:d0:ed:da:fb:30:14:dc:d8:87:76:
a5:6e:c0:a2:f0:80:af:1d:08:ba:bf:41:88:33:1f:
6c:18:49:92:bd:34:2b:fd:80:e9:29:50:f6:0e:aa:
97:b4:8d:a7:2f:2c:67:e6:70:81:2a:55:3a:4b:df:
0d:18:ce:9b:56:79:04:db:37:cd:da:20:8f:b6:17:
6c:07:df:6c:31:14:a0:40:a2:79:d1:21:63:65:ad:
d8:82:2b:72:57:a9:e3:ca:77:9c:b5:c2:df:a9:4b:
af:68:ad:69:21:c8:56:e1:27:2b:ea:8f:2c:22:53:
cc:4b:58:e8:8e:9f:95:f9:a3:5c:dd:13:d7:37:95:
de:26:25:2e:34:19:bb:62:5d:0a:bd:ac:9f:33:6b:
b2:40:49:98:e5:61:2f:55:2a:08:25:66:a4:b1:86:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:A2:8B:4D:99:9A:AC:B9:1C:A0:C4:D5:F3:37:54:A3:D4:92:E8
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/H0-ii02Zmqy5HKDE1fM3VKPUkug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.80.0-81.88.88.255
81.88.95.0/24
185.200.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:3c:b4:e8:8d:cc:44:ae:1a:4e:1b:1b:70:f1:7e:8c:72:66:
10:4a:f8:33:ac:bd:92:1e:94:b1:47:4d:34:94:b2:ce:df:fe:
1f:86:e8:3b:cd:73:a5:d2:40:bc:d2:9c:e2:eb:ff:de:37:34:
bc:c6:c0:3b:8c:22:9d:6a:d7:d2:41:e1:7d:8f:00:aa:2f:60:
16:35:4d:0f:b6:2e:fc:f6:6b:ca:1a:52:4b:c7:5c:f9:2e:67:
da:f4:51:d8:dd:e5:a7:96:e8:4f:e2:30:73:ec:7e:c7:81:19:
0f:79:aa:13:64:05:2c:4a:01:41:ef:03:23:64:d0:98:9a:fb:
a5:da:f0:6a:9f:d1:1c:4f:b2:49:aa:21:10:1d:1a:52:ac:08:
c9:81:76:b2:02:8e:e0:d5:29:39:9a:c8:ef:e2:20:29:ee:f0:
1b:67:4a:06:25:9b:cd:63:98:ec:3a:ae:47:f4:f2:68:8e:72:
e6:61:57:c5:23:a4:fb:41:ca:ad:14:eb:53:d1:e3:70:03:fa:
87:ca:00:2a:63:21:1b:01:14:e2:0b:ca:8b:2e:cf:6c:a3:d2:
55:d7:dd:f9:3b:4d:cc:9f:b0:79:0d:d1:f4:5e:6d:d0:b6:12:
df:48:f6:4e:92:ad:f8:55:32:bd:0d:81:02:ec:1f:55:c5:c8:
8d:27:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:58 2024 by rpki-client on console-ams.rpki-client.org