Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SALLOcUTu8bvOtvC6bFD7_bT4X8.roa
File: SALLOcUTu8bvOtvC6bFD7_bT4X8.roa (raw, json)
Hash identifier: Ioo5zaHGctWP3s3E4KzqsKELqseHZRZWveqsg9kpLQM=
Subject key identifier: 48:02:CB:39:C5:13:BB:C6:EF:3A:DB:C2:E9:B1:43:EF:F6:D3:E1:7F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446D7941
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SALLOcUTu8bvOtvC6bFD7_bT4X8.roa
Signing time: Sat 01 Jan 2022 03:58:16 +0000
ROA not before: Sat 01 Jan 2022 03:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8376
IP address blocks: 81.52.144.0/21 maxlen: 24
81.52.152.0/21 maxlen: 24
90.84.64.0/21 maxlen: 24
80.10.32.0/21 maxlen: 24
90.84.72.0/21 maxlen: 24
80.10.48.0/20 maxlen: 24
90.84.80.0/20 maxlen: 24
80.10.64.0/20 maxlen: 24
81.52.224.0/21 maxlen: 24
81.253.96.0/21 maxlen: 24
81.253.104.0/21 maxlen: 24
80.10.8.0/21 maxlen: 24
80.10.16.0/20 maxlen: 24
81.253.112.0/21 maxlen: 24
80.10.144.0/21 maxlen: 24
81.253.240.0/20 maxlen: 24
80.10.168.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148025153 (0x446d7941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4802cb39c513bbc6ef3adbc2e9b143eff6d3e17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:64:54:fb:27:53:d1:af:5c:ea:4e:96:8e:
ba:af:74:95:a1:6c:db:23:3e:d6:2b:6c:6e:73:da:
bf:69:fd:8c:bd:a5:36:3f:94:b8:67:4b:3b:e5:a8:
c5:d0:a0:00:4a:32:3c:f0:7c:5a:c4:11:44:d8:e5:
de:b2:34:1e:f4:ad:8b:a8:2f:de:8a:e0:52:aa:79:
75:31:30:be:bc:aa:99:87:08:44:9d:c5:c0:86:c1:
5f:d6:b8:43:64:de:5b:18:49:9f:59:92:40:2b:1c:
c4:e8:71:00:40:09:0b:53:6c:aa:00:61:f3:50:1e:
ec:05:34:00:9b:29:e5:0a:5b:2b:62:f1:1e:09:84:
7d:45:4b:94:37:54:44:b4:c6:48:ef:48:89:76:7c:
33:0a:fe:8d:13:fa:dd:45:54:9b:76:a8:32:73:fa:
33:bf:86:f7:34:b3:a4:57:53:eb:28:70:f3:8a:f8:
7c:65:87:5b:54:59:cb:96:89:dd:5a:9b:ec:1d:53:
b3:fe:bd:3f:43:8d:9d:7d:f0:8d:94:bb:91:38:8f:
d3:48:25:f2:60:e3:ce:3b:92:6a:22:08:7a:2c:bb:
75:07:4a:f1:88:95:1b:de:56:d7:84:4b:69:4a:bb:
da:01:94:15:8e:59:66:7a:19:d7:d9:f4:69:a5:c7:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:CB:39:C5:13:BB:C6:EF:3A:DB:C2:E9:B1:43:EF:F6:D3:E1:7F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/SALLOcUTu8bvOtvC6bFD7_bT4X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.10.8.0-80.10.39.255
80.10.48.0-80.10.79.255
80.10.144.0/21
80.10.168.0/21
81.52.144.0/20
81.52.224.0/21
81.253.96.0-81.253.119.255
81.253.240.0/20
90.84.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:bf:16:05:6c:10:a9:c7:cc:5c:3b:84:14:81:ad:cd:4b:88:
d2:e6:97:9a:46:e7:8c:23:2b:d5:f0:01:42:77:fd:31:74:c4:
b1:65:0c:f9:5e:53:fb:45:0a:77:69:30:ba:8e:81:53:1c:c0:
3a:ec:77:37:54:09:a5:21:f9:62:8f:27:0c:03:15:09:6f:d6:
17:d1:ef:02:0a:e1:c8:5e:ac:30:1e:0d:33:5a:35:a6:24:85:
b6:84:99:43:6f:01:e1:5c:79:72:22:ce:b9:7b:41:8c:ff:05:
97:94:5d:aa:b2:91:2e:6b:26:75:e9:6e:5b:8e:b7:c0:cf:89:
c3:97:2a:e1:e0:e3:51:c0:e1:6d:78:40:9e:45:2c:b0:98:77:
f8:5d:5e:64:c2:1e:08:77:ef:d2:9f:a4:65:6f:06:cb:16:bb:
da:07:3a:88:fe:39:7b:bc:ae:cc:67:ed:50:88:95:d9:c1:25:
39:ba:dd:be:9f:28:e3:0b:b4:91:7c:06:39:94:13:47:f1:2f:
fd:51:cb:29:46:79:00:1b:48:94:c9:a6:31:ed:ab:74:5a:ea:
e6:42:31:16:b9:a0:45:72:66:b3:2d:84:d1:23:38:4f:19:79:
57:56:bf:b6:6d:f1:83:82:e2:cb:57:84:f8:c1:21:b7:56:9a:
62:dc:d2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org