Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OqiaoFJm8lsgkdCI9t1hl5qWGCc.roa
File: OqiaoFJm8lsgkdCI9t1hl5qWGCc.roa (raw, json)
Hash identifier: wPKYymKma6iaLiY1nm4+dkJ0OnynCWlKf+ZcO3+yhrk=
Subject key identifier: 3A:A8:9A:A0:52:66:F2:5B:20:91:D0:88:F6:DD:61:97:9A:96:18:27
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018296700CE935B9D86F1B0785C5651C0340
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OqiaoFJm8lsgkdCI9t1hl5qWGCc.roa
Signing time: Sat 13 Aug 2022 09:01:41 +0000
ROA not before: Sat 13 Aug 2022 09:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 81.22.136.0/22 maxlen: 22
109.72.122.0/24 maxlen: 24
109.72.124.0/22 maxlen: 22
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:96:70:0c:e9:35:b9:d8:6f:1b:07:85:c5:65:1c:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 13 09:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aa89aa05266f25b2091d088f6dd61979a961827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:52:df:97:7e:37:c7:0f:b8:04:84:93:43:
7a:06:11:29:bd:ed:f2:73:cb:2a:f7:2f:6b:1d:ca:
6c:aa:27:ef:2c:8d:9f:31:cd:f2:d1:23:7b:0e:73:
d4:b7:a1:e8:b7:5c:23:26:ef:3b:e9:cd:17:cc:54:
cc:55:01:1f:57:3f:1d:09:ac:99:e4:dd:96:3b:90:
13:5b:a7:89:73:42:e0:17:cd:b8:bf:2e:c8:3d:5b:
0b:03:79:cf:e0:3a:ab:a4:f9:e4:70:2a:3c:66:f1:
a0:c3:78:0f:c4:5f:f4:92:5d:9a:8a:f3:5b:78:44:
9a:ed:8b:7e:9a:95:ce:ba:41:99:0e:f5:88:f9:45:
21:a7:00:a4:73:5a:08:42:f2:45:d1:36:86:be:b5:
82:b9:30:5b:f1:35:70:b5:d5:80:6f:44:02:80:87:
19:02:e5:34:db:1e:dd:16:92:08:34:a7:3b:ec:3f:
6c:f7:24:03:57:fa:bc:aa:bc:e0:d8:0a:5a:3f:95:
e4:f1:e7:2a:c5:5e:36:8e:ea:d3:a7:25:3f:98:2c:
4c:fe:d7:8c:39:f9:48:23:72:5c:36:bf:32:6f:c0:
b2:22:47:0b:43:bc:83:75:6a:1e:5b:85:45:39:21:
fd:7a:25:dc:9f:59:a4:8f:a4:24:d9:a9:59:c9:17:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:9A:A0:52:66:F2:5B:20:91:D0:88:F6:DD:61:97:9A:96:18:27
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/OqiaoFJm8lsgkdCI9t1hl5qWGCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
89.185.0.0/22
93.185.214.0/24
109.72.122.0/24
109.72.124.0/22
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:3d:8a:23:34:cb:aa:f2:b6:7f:68:7b:aa:f2:d0:40:13:5a:
67:39:b7:6d:c2:5a:c5:95:1d:66:e7:20:fd:f7:ad:3d:34:6e:
48:73:cc:fd:21:1a:0e:0e:5d:36:3a:fd:4b:12:b2:2f:a2:00:
45:fd:65:b2:f1:91:83:bc:e5:b4:2b:b1:76:34:6c:34:c2:48:
0a:7e:71:33:af:96:e1:ee:42:8c:23:7d:24:19:36:80:6e:eb:
bb:92:d2:0f:c2:72:91:52:e2:c7:70:fb:90:2e:97:20:ee:c5:
86:8e:ef:df:d8:86:d1:af:3e:a0:5e:03:22:69:b0:39:d1:b9:
e9:8a:f2:c5:02:d5:a0:e8:75:1a:0d:46:c1:05:e4:02:01:a1:
5c:04:ff:f0:0d:06:8a:58:f8:62:f5:88:3d:1e:9e:28:76:c3:
99:4d:d0:12:b3:d1:b6:20:a0:29:db:ab:0a:bc:57:b6:76:c4:
2d:c8:13:a2:30:20:cb:63:f7:95:93:fe:34:6d:74:d6:8d:ad:
24:a0:85:a0:05:cf:2b:c1:7e:c3:bc:3c:ec:64:13:a0:1e:61:
af:74:f4:fa:e2:27:1d:1e:78:5b:73:b5:97:c5:44:33:8a:96:
30:2a:79:41:af:78:1a:79:b9:69:ec:00:e0:b5:00:da:ae:f6:
ce:72:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org