Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aKKnjpeDpj89JqsF7VLLWd7fClA.roa
File: aKKnjpeDpj89JqsF7VLLWd7fClA.roa (raw, json)
Hash identifier: nqhavM6M6NOGjVdzVo2T4MuotickkzliGpq2ofdwgpE=
Subject key identifier: 68:A2:A7:8E:97:83:A6:3F:3D:26:AB:05:ED:52:CB:59:DE:DF:0A:50
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018533FEFC10659A797910072326B0CDE192
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aKKnjpeDpj89JqsF7VLLWd7fClA.roa
Signing time: Wed 21 Dec 2022 09:23:46 +0000
ROA not before: Wed 21 Dec 2022 09:23:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.22.134.0/24 maxlen: 24
81.22.133.0/24 maxlen: 24
89.185.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:fe:fc:10:65:9a:79:79:10:07:23:26:b0:cd:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 21 09:23:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68a2a78e9783a63f3d26ab05ed52cb59dedf0a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:cd:ce:bb:fa:9e:f9:f9:c7:c9:08:b6:62:
9e:ed:98:8f:9a:2b:bf:41:5e:c8:52:f9:b6:06:ad:
f3:52:db:09:7c:8f:cf:b0:80:fc:68:92:d7:1a:7a:
50:ff:5d:19:5a:1f:c0:61:49:13:7b:21:86:9f:0d:
f7:2a:62:ab:12:e3:47:64:21:05:e3:81:e3:c6:fb:
a6:67:00:e7:c5:8b:34:67:c1:ab:50:de:4d:89:50:
b6:cd:09:60:89:79:e2:a3:35:e5:3d:09:cd:bb:a4:
e6:5c:eb:d1:c8:67:17:47:37:72:73:ce:0f:ec:54:
49:c0:8c:ab:97:02:81:6d:01:37:2b:51:e3:d8:85:
8a:4e:20:1a:7c:5d:4b:d1:68:43:74:cb:a6:c4:a2:
1c:39:ca:c2:b1:71:2c:ab:21:3a:8d:af:93:67:55:
91:66:80:60:76:69:b2:7a:f5:61:96:b6:d5:65:e7:
7c:b2:da:44:c2:68:f3:48:58:1c:00:90:d8:7d:1c:
eb:79:cc:99:af:d6:16:92:e4:e5:aa:c7:7c:a7:97:
08:b0:87:ae:bf:ec:01:e3:c9:67:b9:3a:fd:49:37:
b6:74:4e:87:9e:fd:97:3a:cf:54:ed:bb:6d:17:db:
5c:46:09:fe:52:c1:4b:1f:39:51:5c:ff:35:56:3e:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:A7:8E:97:83:A6:3F:3D:26:AB:05:ED:52:CB:59:DE:DF:0A:50
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/aKKnjpeDpj89JqsF7VLLWd7fClA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.133.0-81.22.134.255
89.185.24.0/22
Signature Algorithm: sha256WithRSAEncryption
98:65:e5:c4:e2:7d:a1:03:85:9c:d5:32:c0:e8:1e:ed:ce:18:
ef:a8:90:bc:e3:a3:fc:f0:7b:16:38:32:4f:20:fa:c9:8f:80:
0f:fc:f0:de:8e:d1:64:62:e6:40:25:1d:91:88:e6:1b:c1:9a:
9d:09:9a:8d:ac:f1:08:01:ac:fd:d7:17:07:65:e9:d1:7d:4e:
97:82:c4:62:9f:41:54:7c:28:5f:8d:6c:28:19:71:cf:5e:98:
d1:9b:43:05:06:e2:2b:9d:6a:2b:c2:5a:9a:7c:14:d8:5e:bc:
56:c2:06:3f:c6:86:ee:b6:38:45:85:04:e9:da:a8:92:31:2d:
4a:c2:9f:ce:3f:0e:c5:ba:73:cf:b1:5f:03:1a:b5:1d:47:76:
31:a1:0e:2e:c1:1f:87:d7:c6:6d:86:19:e3:ba:92:86:50:ce:
fc:33:84:58:5b:63:03:17:f5:8c:f9:2c:b9:07:c6:fa:67:06:
37:55:5e:5f:ff:64:7c:21:5c:12:61:14:a5:be:a1:7a:0c:a2:
de:75:6d:19:8e:50:f8:34:10:40:a5:50:22:9b:a1:f4:35:75:
d4:55:f2:48:24:9e:2f:9d:cb:bb:18:8a:5b:b7:22:80:e9:77:
07:e6:a7:57:85:7a:bb:16:9d:ca:59:27:34:1b:60:a3:37:fc:
be:0e:67:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org