Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/16w4uxNL-9ONLOPpB5EA215LG6g.roa
File: 16w4uxNL-9ONLOPpB5EA215LG6g.roa (raw, json)
Hash identifier: ZVHEcbevvsAcGCWwkh7NzPhy76DG2fmuSLv4Viio/fs=
Subject key identifier: D7:AC:38:BB:13:4B:FB:D3:8D:2C:E3:E9:07:91:00:DB:5E:4B:1B:A8
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018303977AFDA99BBF1260049D263F5AA407
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/16w4uxNL-9ONLOPpB5EA215LG6g.roa
Signing time: Sat 03 Sep 2022 13:43:22 +0000
ROA not before: Sat 03 Sep 2022 13:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 81.22.136.0/22 maxlen: 22
109.72.122.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
109.72.124.0/22 maxlen: 22
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
81.22.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:97:7a:fd:a9:9b:bf:12:60:04:9d:26:3f:5a:a4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 3 13:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7ac38bb134bfbd38d2ce3e9079100db5e4b1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:bb:7a:33:28:66:76:55:8b:81:c6:1c:de:
7e:81:d4:b4:23:d7:f3:96:62:3d:0a:99:e7:30:09:
da:2b:91:d4:24:09:84:5c:96:f4:87:48:4b:73:48:
be:55:6b:a5:42:f6:80:a8:64:f8:02:be:f2:e7:59:
47:d6:57:9a:43:00:a6:05:9c:94:e0:02:6e:44:c0:
f0:11:61:6d:4f:18:3a:be:e3:63:99:55:aa:ee:a6:
0d:66:22:e8:59:4b:2d:39:55:7a:85:41:4e:c8:2c:
3e:49:21:84:e8:96:c2:5f:ae:95:62:4b:ea:be:ef:
07:c7:bb:03:84:98:72:a6:4a:82:ae:df:c3:a6:6c:
a9:ed:15:85:a3:c1:25:84:ca:43:6f:7c:25:cf:02:
7c:59:f0:c8:80:d2:2a:23:2d:56:01:4d:b4:c1:00:
73:04:56:75:9f:4f:78:96:23:3f:91:8e:8e:ab:d0:
e4:15:c6:72:54:1e:22:2f:9b:9d:02:69:cb:85:16:
40:31:48:a8:a0:d6:44:a6:97:e4:f1:a2:70:ea:bb:
8a:57:85:4d:ce:0b:d7:d7:25:9d:e7:fd:da:a4:b4:
1a:04:a1:24:d2:11:37:ef:ba:b1:96:ec:f0:48:98:
90:81:d9:2e:74:62:d3:e4:67:ac:86:8b:87:4a:79:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:38:BB:13:4B:FB:D3:8D:2C:E3:E9:07:91:00:DB:5E:4B:1B:A8
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/16w4uxNL-9ONLOPpB5EA215LG6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0-81.22.139.255
89.185.0.0/22
93.185.214.0/24
109.72.122.0-109.72.127.255
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f8:65:a9:91:da:e3:c5:94:4a:95:92:e2:95:76:8d:f9:21:
47:0a:cd:c2:2d:96:18:c7:c4:c9:e4:e1:a2:e5:c4:c1:62:b0:
01:ef:eb:f9:34:4a:85:4b:49:cc:af:64:5c:c3:34:b3:01:ee:
35:90:31:c1:a6:ec:47:25:9d:70:18:0d:4a:74:67:46:ae:f7:
cf:34:7e:3e:a5:c2:a3:ba:00:da:0f:46:4c:ea:80:01:cb:4c:
e5:c3:3b:81:ac:13:0d:83:8d:76:75:ef:11:2d:b5:1c:fd:d7:
aa:09:32:16:c1:de:e4:e9:19:d4:5a:c4:fa:30:94:32:00:b2:
7d:f7:d1:a0:4f:05:37:2c:fa:ec:9c:68:02:da:81:ab:aa:9e:
0d:95:e7:cd:59:8a:74:2c:47:d2:17:de:4b:dd:8c:fe:f6:62:
1e:af:21:eb:4a:da:d4:f5:bc:78:77:45:32:44:d8:7d:b2:e5:
72:2b:da:41:a6:31:09:23:12:42:1b:e2:e2:ac:20:8d:cb:5b:
cc:34:ad:e0:74:9f:db:be:c5:be:fe:eb:98:58:e2:3f:28:33:
8f:a6:82:f1:fc:2c:06:c0:67:ac:23:3d:6d:71:c2:68:79:d9:
bb:66:9e:98:2d:ed:2e:be:a4:20:01:a1:db:17:46:17:e2:ff:
ce:25:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org