Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ut69eZt9hmuhHRYUmUeeUrm4wUc.roa
File: ut69eZt9hmuhHRYUmUeeUrm4wUc.roa (raw, json)
Hash identifier: F4IAtZXBQve5/XafxeffgGdSNI1Kvb11iPijsXjtX+g=
Subject key identifier: BA:DE:BD:79:9B:7D:86:6B:A1:1D:16:14:99:47:9E:52:B9:B8:C1:47
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 42008946
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ut69eZt9hmuhHRYUmUeeUrm4wUc.roa
Signing time: Sat 01 Jan 2022 16:11:19 +0000
ROA not before: Sat 01 Jan 2022 16:11:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 81.88.16.0/24 maxlen: 24
81.88.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107331398 (0x42008946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 1 16:11:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=badebd799b7d866ba11d161499479e52b9b8c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:61:7c:c9:e5:a9:d3:63:f3:d7:47:83:90:
8c:25:01:67:aa:cd:d0:0c:c6:bf:2e:db:b0:d2:f3:
3d:f2:fe:e5:5b:7c:f6:ad:9c:3b:c3:7b:fe:a3:c5:
53:10:c1:21:b8:37:e2:04:7a:7c:1c:04:1e:55:64:
01:6a:b3:2a:f3:0d:a7:54:75:04:d1:b9:39:e7:15:
59:f5:bb:73:7f:65:e1:84:07:30:07:a9:ee:4a:ad:
d2:48:fa:44:07:0e:aa:8f:48:5b:b0:e6:c9:24:97:
b9:03:51:3e:da:b3:8f:b8:5f:d0:ca:2e:ac:6a:0a:
50:63:8a:5e:23:5d:9b:c3:7e:1c:3d:82:63:fc:2c:
64:83:1d:69:02:e3:b7:1e:ff:a1:60:6f:0c:fc:7b:
a8:96:d0:8a:f1:76:31:46:8c:de:70:06:18:36:f8:
44:3c:0b:bf:0e:c3:21:4e:dd:bf:20:77:4e:0e:1a:
bc:79:a1:26:fd:22:51:13:65:1c:47:78:12:2b:6a:
da:69:23:04:d2:b3:f1:00:05:da:1b:72:64:71:65:
79:ab:a5:a7:61:49:3c:c9:66:91:e4:d7:d2:5e:d3:
a9:b4:e5:09:f0:fc:81:c7:43:33:5f:83:1f:3f:c0:
d1:07:be:d4:d2:14:57:1b:5a:0c:e8:c0:9f:0d:70:
ca:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DE:BD:79:9B:7D:86:6B:A1:1D:16:14:99:47:9E:52:B9:B8:C1:47
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ut69eZt9hmuhHRYUmUeeUrm4wUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.16.0/24
81.88.21.0/24
Signature Algorithm: sha256WithRSAEncryption
48:9e:ac:2d:a0:cf:3e:07:20:83:7d:2c:f9:3e:f1:c4:26:ea:
5f:b6:76:57:3c:09:a5:b4:b5:88:a6:a9:73:a8:72:07:ad:a1:
ae:93:23:55:05:7c:be:46:10:5b:f2:48:1f:97:a7:bd:69:d0:
77:55:58:1e:9e:83:bf:77:56:57:d7:7e:9a:e1:11:b0:79:ca:
a5:18:e9:fc:01:11:b8:2b:88:32:c8:5e:0e:99:30:c9:47:3e:
32:ac:6f:ea:11:fe:e3:95:63:8e:77:a5:90:52:42:92:04:56:
69:c8:d6:cd:97:b8:01:ff:e8:0c:c1:bd:42:c2:27:48:e2:83:
8e:9c:98:89:f1:59:34:f0:75:c7:8b:ec:cb:df:0f:01:4c:a6:
71:4a:c4:c7:7a:8f:1d:ad:5c:4a:f2:18:3d:53:f8:d3:85:5a:
b0:8e:10:98:12:ae:a4:a3:11:2e:d4:1f:ac:f1:7b:da:21:30:
1d:6e:58:e7:54:82:72:31:66:a2:84:96:c8:1f:a5:c0:0b:2f:
63:05:fb:6f:03:cb:dd:db:15:59:a7:75:e4:1d:58:fd:6f:64:
9c:6d:fb:e6:1b:4d:f4:6c:3b:7e:b0:c8:0a:cd:9c:5f:15:fc:
51:18:9d:94:3d:47:e2:df:60:8d:9f:a4:83:ef:0c:be:c8:e9:
55:c8:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:44 2024 by rpki-client on console-ams.rpki-client.org