Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ILwEBsQoKLewKyMdh7XEqsT96js.roa
File: ILwEBsQoKLewKyMdh7XEqsT96js.roa (raw, json)
Hash identifier: EYGZSiM4mu46kwoU4fpt0F8Zy2AFvrQDx2lBAhYaQQs=
Subject key identifier: 20:BC:04:06:C4:28:28:B7:B0:2B:23:1D:87:B5:C4:AA:C4:FD:EA:3B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 1D63869B
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ILwEBsQoKLewKyMdh7XEqsT96js.roa
Signing time: Thu 09 Jun 2022 17:35:02 +0000
ROA not before: Thu 09 Jun 2022 17:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 81.22.136.0/21 maxlen: 21
109.72.124.0/22 maxlen: 22
109.72.120.0/23 maxlen: 23
81.22.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493061787 (0x1d63869b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 9 17:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20bc0406c42828b7b02b231d87b5c4aac4fdea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:0b:ce:04:2c:9d:15:c2:8c:c1:98:36:2e:
e4:4d:02:db:64:eb:57:db:5f:c7:da:80:cd:a7:0d:
a7:57:d6:a6:7e:bd:f7:d8:2b:54:fd:98:da:68:e6:
72:10:7a:5e:cb:d7:99:69:29:b2:b6:22:bc:4e:b1:
01:ae:0f:04:56:5d:33:25:d3:f7:60:4d:ff:bf:62:
88:d9:5f:10:69:16:3e:95:6a:87:2a:c6:a8:50:80:
4d:5e:0f:b9:cb:fb:61:8c:e6:36:43:79:a1:ff:b3:
a5:fd:a2:6f:d4:42:2a:f8:d2:f9:51:b4:40:93:6d:
f6:20:7c:f9:e3:a8:45:dd:84:4a:22:49:dc:dd:c7:
68:05:a4:98:98:f9:19:79:17:99:b0:32:6f:aa:e0:
e8:b9:1f:7a:b5:ed:2b:b8:e9:df:de:dc:f8:15:6f:
48:49:c6:f4:21:b9:f4:54:25:3b:8e:ed:19:47:9f:
76:ce:99:b1:f8:dc:ea:ec:da:63:86:eb:f2:b4:fb:
8f:f2:fb:d3:69:12:c1:ee:d4:71:e8:ec:42:24:13:
cb:c8:74:6d:60:ba:8c:cd:28:6e:bd:30:f0:94:f3:
78:7b:8f:7c:eb:c1:53:61:88:16:af:f5:b1:30:83:
d5:ed:8d:14:c4:5f:9d:73:bd:8b:da:32:e1:ff:49:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:04:06:C4:28:28:B7:B0:2B:23:1D:87:B5:C4:AA:C4:FD:EA:3B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ILwEBsQoKLewKyMdh7XEqsT96js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/20
109.72.120.0/23
109.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
39:32:32:d4:30:5b:3d:da:8d:39:9c:f4:29:53:21:63:8d:9c:
fa:b5:4d:25:7b:06:61:f0:5b:54:48:7e:60:bd:34:83:40:0a:
de:2d:ad:77:28:35:7d:3e:2d:74:49:27:0a:ea:0f:bb:d1:ce:
4b:5b:99:3e:51:1b:c4:ef:ee:51:5f:60:ad:a4:de:08:81:8a:
d9:a1:62:7e:66:4f:23:f2:4f:23:b2:40:79:ae:8f:22:69:09:
8f:5d:2d:88:55:9f:be:74:77:0a:0b:10:06:42:27:d3:65:33:
b3:cf:16:f2:82:56:1b:4f:27:e3:fd:c3:06:19:40:e9:a5:db:
4e:7a:28:47:45:a5:28:86:3a:f2:17:4f:f2:62:22:2a:82:f2:
48:1b:8c:0e:d9:b0:be:31:c7:4a:ac:7c:27:cb:db:b2:78:7f:
d7:62:2b:f8:cc:84:7c:8a:4b:5c:e0:b2:6a:2f:a8:c6:2b:ee:
24:52:c7:fc:28:53:4a:1c:65:8f:54:b8:ed:4d:d3:48:d9:fe:
fc:7d:f8:30:a4:53:13:78:68:d0:cb:82:4b:6c:29:62:1a:ec:
78:a5:8d:ff:d3:a2:52:38:39:34:7d:71:d7:0e:86:16:2c:c5:
a9:87:7a:3f:4a:62:20:ce:98:c7:2f:1e:f8:1e:05:64:b1:64:
63:fc:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:45 2024 by rpki-client on console-ams.rpki-client.org