Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZVVwiNcD1vF-ErRr63iDqLwqG1Y.roa
File: ZVVwiNcD1vF-ErRr63iDqLwqG1Y.roa (raw, json)
Hash identifier: 5GPBx/bVxi2BAvZ0ZgU9K94syWH/4+YvHA1bccC7u5g=
Subject key identifier: 65:55:70:88:D7:03:D6:F1:7E:12:B4:6B:EB:78:83:A8:BC:2A:1B:56
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 0182910E2FC5FC37562DE000FA1A0D40C6BF
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZVVwiNcD1vF-ErRr63iDqLwqG1Y.roa
Signing time: Fri 12 Aug 2022 07:56:41 +0000
ROA not before: Fri 12 Aug 2022 07:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 81.22.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:0e:2f:c5:fc:37:56:2d:e0:00:fa:1a:0d:40:c6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Aug 12 07:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65557088d703d6f17e12b46beb7883a8bc2a1b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:a8:6b:ee:1d:1e:63:56:31:d0:8d:ed:4c:
de:7c:2c:56:35:61:dd:32:fa:b6:b8:a3:5e:2d:c5:
bc:62:3b:0e:d3:3f:79:bb:78:4e:c8:e2:ad:c5:53:
02:ca:08:2b:ca:4c:7f:4d:52:54:5c:87:57:4f:b7:
1a:1d:cd:5f:f6:d5:14:bb:94:ed:e3:1a:88:44:23:
1b:30:e1:19:5a:c8:7f:e0:a0:c9:e0:3b:14:b1:6e:
e1:2b:4c:9a:91:e4:ec:43:c9:90:74:e7:5e:83:4b:
a9:70:d9:16:c8:18:96:09:c2:2c:23:3a:65:f7:7b:
00:7f:9a:3a:37:0b:75:fc:5a:e8:1a:c8:72:82:60:
10:66:63:10:42:9f:11:20:96:87:2a:76:8e:3e:86:
34:df:02:fd:d2:74:b0:a9:35:29:15:6d:10:ab:da:
6b:28:d0:eb:af:67:25:ed:a0:f0:4a:f3:d9:45:8b:
ae:58:22:2e:e3:31:53:b0:4c:23:f3:2a:6a:10:d2:
de:47:29:16:d1:e6:f5:36:1e:46:fb:d3:32:af:4b:
fe:4d:27:9e:c7:bb:8e:9f:28:35:2b:53:e8:fa:27:
7d:af:b4:cf:f7:bb:b2:3f:78:03:fc:ee:5b:39:5b:
1d:1f:b3:87:3e:fd:5b:6c:75:7c:55:46:2a:40:48:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:70:88:D7:03:D6:F1:7E:12:B4:6B:EB:78:83:A8:BC:2A:1B:56
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZVVwiNcD1vF-ErRr63iDqLwqG1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:18:27:e3:53:61:25:1c:1b:c5:5b:9d:c5:22:a8:6e:40:e5:
90:97:7a:88:5c:c7:91:d2:0e:04:cd:63:8b:55:fe:4c:f1:7a:
ec:0f:47:b9:b2:b2:b4:49:67:c8:f6:70:12:e5:08:89:fa:c2:
55:fe:e3:f9:17:2d:a6:48:25:41:fb:6a:cb:f0:81:15:c0:22:
0d:b4:2e:74:bb:59:8f:3b:13:46:57:e1:47:f7:13:74:9a:ce:
41:2e:0b:0e:97:e5:75:3d:0b:05:5d:e0:bc:aa:b8:32:53:cf:
42:6f:52:22:be:89:ad:d0:d7:46:d3:24:14:19:1c:4d:0c:8b:
26:b7:f8:cc:c3:3b:74:80:31:2e:98:7f:f0:de:2f:0c:5b:ba:
ef:b6:db:e1:15:df:68:66:5e:20:cb:22:3d:3d:e9:3b:c6:a3:
ff:6b:3b:bf:d2:b6:78:05:5e:ca:9d:8f:1b:43:f2:b1:3c:68:
a2:b4:2c:65:53:04:1a:df:35:80:ce:24:cb:fc:b5:77:40:0d:
b0:0a:c3:76:61:e9:76:1b:e7:67:ad:ea:a6:5b:9c:4c:ba:3b:
85:6e:c8:11:d4:98:67:9e:e3:43:41:ff:16:d0:f4:be:3b:05:
85:d4:d9:fe:9b:76:94:25:5a:61:e3:1c:13:79:4d:4e:54:f8:
cb:08:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org