Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kKAY9rctZ_mTckKp3L-wY7avLLo.roa
File: kKAY9rctZ_mTckKp3L-wY7avLLo.roa (raw, json)
Hash identifier: BUaOSsQcWutluOtEDYa9bIdbW1xXJ2k8dUkkEqLIG2Q=
Subject key identifier: 90:A0:18:F6:B7:2D:67:F9:93:72:42:A9:DC:BF:B0:63:B6:AF:2C:BA
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44844F18
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kKAY9rctZ_mTckKp3L-wY7avLLo.roa
Signing time: Sat 01 Jan 2022 03:58:33 +0000
ROA not before: Sat 01 Jan 2022 03:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36879
IP address blocks: 81.52.165.0/24 maxlen: 24
81.52.168.0/23 maxlen: 24
81.52.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149521688 (0x44844f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90a018f6b72d67f9937242a9dcbfb063b6af2cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:0c:31:6c:dc:5c:9a:e6:2a:87:99:a2:77:
5c:8c:4a:a4:79:74:5c:b1:73:30:a0:9c:78:8f:1a:
c3:3a:a5:1f:d1:7c:83:6d:ef:e1:86:6d:4d:4f:c2:
8e:32:ef:85:17:1b:12:78:6d:af:4b:dd:af:47:f1:
1a:83:e0:2c:e4:f6:77:64:2a:0d:7f:d1:71:82:30:
5d:a0:1f:d5:f1:f2:d1:05:61:0e:2d:a6:e9:2b:db:
26:94:5b:8e:97:b3:0f:0d:7d:0b:fd:e4:7f:3c:80:
9e:67:9d:1b:a5:e3:95:25:22:22:f9:9d:c8:4c:e2:
a8:ed:ab:0e:40:bc:07:ef:25:f6:d7:7b:14:99:de:
7c:60:55:e4:66:eb:6a:d5:4e:18:0d:9a:cc:9d:a8:
2f:31:9e:bf:bb:8f:b2:34:22:0a:4c:24:e3:6e:88:
a9:1a:98:71:c1:8a:5a:08:5c:ef:5d:c2:08:79:2a:
2a:13:86:d1:69:82:78:20:e9:ef:ae:eb:97:ec:f8:
6b:85:1d:60:7d:9f:eb:68:2a:cb:06:52:2b:f6:7e:
15:89:84:b4:3a:5a:27:d0:b3:55:b4:a5:3e:71:38:
a0:1a:ad:6f:91:b1:90:70:4b:e8:26:3e:39:d3:bd:
e5:53:9e:d2:ea:7e:8e:46:f7:1a:8e:4f:25:ec:7f:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:18:F6:B7:2D:67:F9:93:72:42:A9:DC:BF:B0:63:B6:AF:2C:BA
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/kKAY9rctZ_mTckKp3L-wY7avLLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.165.0-81.52.169.255
Signature Algorithm: sha256WithRSAEncryption
50:53:1a:49:db:44:38:c7:11:2f:e8:db:ad:dc:21:04:4f:d6:
84:5f:26:52:5f:1f:f1:c9:02:96:9b:8f:80:ea:da:f5:ff:68:
a0:3f:b6:5e:b9:c2:d7:bd:c3:ed:77:7e:cc:f0:61:20:66:06:
70:fc:0a:50:e6:62:f6:2c:1d:34:50:9f:51:ff:3a:d1:a2:09:
e7:fd:e2:7b:8f:a4:7b:f6:a5:d4:1e:e2:6b:86:a3:d3:29:b1:
25:3a:ef:dd:90:92:e7:74:3b:9a:55:66:25:20:4c:ec:cc:9d:
e2:07:34:85:5a:9a:dd:da:27:db:64:46:bd:b0:45:9e:2c:15:
59:77:46:2f:e4:9d:e9:40:3b:f5:d4:bc:93:44:80:79:c2:e2:
e7:6e:a7:07:18:02:e1:ce:5e:f6:23:dd:f6:60:dc:01:1c:16:
1c:6e:c7:f8:c8:87:4b:af:4f:5b:38:50:4b:90:24:73:fa:28:
e0:9f:d5:9b:03:55:2c:1d:ea:fe:ed:5d:c9:21:3a:ce:70:cd:
17:18:46:b6:8d:b7:02:11:b7:22:4a:36:04:56:32:a3:b0:29:
16:f5:d5:0d:69:60:7a:c8:a4:44:7e:df:4b:ea:f6:ba:f5:d9:
56:2a:b5:a3:6a:61:00:8e:64:29:db:7d:83:5f:32:19:48:9e:
ce:52:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org