Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSDFkgx0Iu_ZuwagT5-9vvzM-CA.roa
File: FSDFkgx0Iu_ZuwagT5-9vvzM-CA.roa (raw, json)
Hash identifier: INgjBb5L0AziE4hPak4TEYvNtfZJ0s/HtR/sNFCMsaI=
Subject key identifier: 15:20:C5:92:0C:74:22:EF:D9:BB:06:A0:4F:9F:BD:BE:FC:CC:F8:20
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018335FF5796E9E9658C7BAA056D41CB97DB
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSDFkgx0Iu_ZuwagT5-9vvzM-CA.roa
Signing time: Tue 13 Sep 2022 08:37:50 +0000
ROA not before: Tue 13 Sep 2022 08:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 81.22.140.0/22 maxlen: 24
81.22.128.0/22 maxlen: 24
81.22.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:ff:57:96:e9:e9:65:8c:7b:aa:05:6d:41:cb:97:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 13 08:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1520c5920c7422efd9bb06a04f9fbdbefcccf820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dc:85:e0:32:d3:06:1d:4b:d9:59:d7:65:60:
0e:30:b8:95:88:57:11:04:93:e3:22:41:ed:01:db:
82:8c:ba:fb:97:31:a5:d7:7f:cd:22:dc:6e:26:5c:
99:20:05:88:6b:b5:7c:fa:57:b8:96:a0:d1:4d:36:
7e:90:ef:36:ee:ed:19:2e:f6:c2:86:a8:07:56:f3:
02:2d:78:56:62:f1:f8:37:8e:5b:6a:ee:23:bb:c2:
44:da:c2:d4:9f:f8:97:ec:cc:99:9d:66:01:45:d8:
75:c9:09:37:45:75:8b:8b:d9:85:33:4c:34:9a:3b:
63:a9:a6:8b:fb:50:73:54:e0:11:11:c4:b3:9f:c3:
7a:6a:84:9e:9f:54:ee:73:78:ed:23:d9:ed:f5:63:
60:a5:f7:b3:f7:00:3a:1a:4b:e7:eb:12:bc:86:d9:
4b:7d:b1:65:e1:e8:ab:af:3b:a3:2b:70:18:0d:f8:
de:49:00:e2:da:ae:5d:0a:63:c3:a6:c9:6d:26:be:
1c:95:9d:ae:2a:1c:5d:cd:4b:55:f7:c2:d6:52:c1:
c2:53:c3:0f:9e:0c:87:08:ae:ed:94:94:f1:42:e2:
b9:a6:40:e6:bc:ab:88:40:63:58:37:4f:91:1a:39:
cb:9e:42:ea:9f:8a:7b:e7:cf:72:cc:de:91:b2:9a:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:20:C5:92:0C:74:22:EF:D9:BB:06:A0:4F:9F:BD:BE:FC:CC:F8:20
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/FSDFkgx0Iu_ZuwagT5-9vvzM-CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/21
81.22.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:f9:1f:0a:e8:a3:44:41:6e:e6:1a:c7:e7:99:c2:46:a7:68:
10:b9:48:f4:13:09:37:0f:28:72:1d:47:96:b0:9c:22:c5:7f:
6f:18:34:14:b2:82:a1:42:1c:c9:fb:b3:3a:2b:c1:72:9a:83:
ad:a1:cf:bb:f8:a4:20:54:1e:76:0e:12:b2:61:24:d4:96:be:
73:13:6c:d6:3b:c8:9b:ec:20:41:4a:1c:b5:41:92:98:33:cc:
4a:45:8b:8b:a8:c9:ad:87:05:c4:12:89:9b:52:4e:4e:6a:96:
7f:84:c8:6c:30:04:a3:10:8a:d9:ce:6d:2c:45:3d:eb:a3:18:
53:6a:8c:2a:93:f0:19:23:53:b0:32:1e:dd:9e:89:7c:52:e6:
cf:48:6d:60:c3:b8:ab:7f:db:71:e4:6a:20:d1:98:1d:1b:e8:
6d:80:62:31:58:86:d4:7b:5c:8c:ba:f8:ad:d6:69:91:1a:fe:
48:b8:b7:94:f3:84:32:e4:08:ee:b3:b6:19:94:52:8d:56:1f:
8f:5d:e6:38:35:f8:23:b8:e2:88:13:4d:63:3f:b8:ba:18:7c:
a3:c6:d7:53:a0:68:4a:24:3c:f3:a7:ef:a4:d6:12:a7:de:f5:
01:ee:28:60:cb:05:78:c2:dd:c5:eb:f3:e9:92:54:9c:83:d9:
5b:95:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org