Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oIUX9YWBBFQCnNPSpuCCbLG_m9o.roa
File: oIUX9YWBBFQCnNPSpuCCbLG_m9o.roa (raw, json)
Hash identifier: eUVly6MvXhQxXTys5MWz+IE48QECv67eleeVmZFzAo4=
Subject key identifier: A0:85:17:F5:85:81:04:54:02:9C:D3:D2:A6:E0:82:6C:B1:BF:9B:DA
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018397E06663278103546F83CC2D70CCC183
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oIUX9YWBBFQCnNPSpuCCbLG_m9o.roa
Signing time: Sun 02 Oct 2022 08:46:48 +0000
ROA not before: Sun 02 Oct 2022 08:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60860
IP address blocks: 81.22.136.0/22 maxlen: 22
109.72.122.0/24 maxlen: 24
109.72.123.0/24 maxlen: 24
185.30.200.0/23 maxlen: 23
185.30.203.0/24 maxlen: 24
185.30.202.0/24 maxlen: 24
89.185.0.0/22 maxlen: 22
93.185.214.0/24 maxlen: 24
81.22.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:97:e0:66:63:27:81:03:54:6f:83:cc:2d:70:cc:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 2 08:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a08517f585810454029cd3d2a6e0826cb1bf9bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:30:fd:fd:24:3d:5d:ee:99:c6:46:1b:b2:
24:ab:fd:f7:f6:dd:5a:e0:84:2a:2f:ed:bf:e5:27:
2d:60:27:9d:12:68:24:08:fa:46:b4:a5:4e:29:8e:
65:6a:c1:cd:62:c4:3e:2c:52:07:5f:4d:7d:67:85:
8f:09:b1:f0:d3:88:1f:45:9d:a2:36:f7:46:b4:65:
b3:f5:04:7f:42:33:de:c9:84:22:97:ac:0f:53:07:
e1:70:4d:52:9f:11:e6:e1:60:cb:40:4e:cf:9e:25:
d8:14:ff:32:5a:23:37:eb:3e:a8:09:18:0e:76:4f:
71:0c:c3:f1:c8:ed:93:8d:ce:56:02:b4:5d:f7:d2:
f2:eb:b4:29:91:a4:2e:40:e3:4f:ea:13:6c:88:43:
66:34:95:52:03:6a:39:98:8a:75:03:d8:83:cc:90:
cc:fd:a6:fb:b6:1b:d5:2c:33:cf:52:fb:36:59:78:
ba:09:5d:e1:ac:81:70:9c:8e:51:50:45:72:2e:53:
bf:5b:34:a2:1e:35:97:3f:39:ba:2b:75:69:4e:54:
07:96:3d:0b:db:34:ee:0f:70:ee:76:ff:3d:67:bc:
d5:e5:e0:13:1f:56:c8:10:95:d5:ed:f9:77:fb:b9:
1a:bb:8a:98:18:f9:d3:a3:c4:bb:8e:b6:19:9e:ae:
c6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:17:F5:85:81:04:54:02:9C:D3:D2:A6:E0:82:6C:B1:BF:9B:DA
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/oIUX9YWBBFQCnNPSpuCCbLG_m9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0-81.22.139.255
89.185.0.0/22
93.185.214.0/24
109.72.122.0/23
185.30.200.0/22
Signature Algorithm: sha256WithRSAEncryption
47:32:c7:80:7f:48:1c:ff:c3:22:63:11:59:cc:a8:f0:a2:7f:
1c:06:21:b7:08:fe:b1:2a:6c:17:1c:ea:48:6e:58:0c:a0:53:
d8:81:dd:6d:80:4d:a8:b2:58:70:12:8b:61:bb:07:d7:ee:ad:
f6:42:d2:28:a2:b7:5a:d3:70:94:f5:0a:3d:b8:8e:f2:02:4d:
7b:ca:73:e7:56:97:a3:f8:9e:93:38:16:e6:82:7f:e1:0d:47:
c6:68:67:8a:39:cd:4a:f3:99:b4:53:68:a2:75:93:91:f3:e8:
19:4b:52:58:4a:b4:c5:3d:24:21:e4:25:cb:d1:68:7a:da:88:
39:b1:b8:9e:07:dc:fa:37:9f:ae:e8:c3:e1:ad:10:af:80:e2:
5b:99:1d:53:63:17:2e:a5:c6:40:32:0d:3c:b4:0d:c3:e9:7b:
69:79:aa:6f:6c:5b:5f:06:43:64:06:50:13:16:b2:ac:76:9a:
f2:ff:cf:3e:b9:9d:3a:a3:30:80:d4:a4:ef:ef:aa:0b:90:af:
68:c0:58:9c:c1:f5:94:38:f1:51:e6:13:51:d4:44:33:60:3d:
f7:bc:ba:56:b2:33:f5:72:b8:c5:e6:72:2f:40:fa:05:68:25:
dd:8a:86:32:00:6f:dc:f2:f8:a2:03:06:29:e2:c0:ed:75:d3:
04:c8:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org