Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pnXrtj3UdG3eRXuFXLJ1xHCe6Cs.roa
File: pnXrtj3UdG3eRXuFXLJ1xHCe6Cs.roa (raw, json)
Hash identifier: 9LmxaKVT7cVFmfwGK/NuC99n7LxZFCDZKI97sHvYzv4=
Subject key identifier: A6:75:EB:B6:3D:D4:74:6D:DE:45:7B:85:5C:B2:75:C4:70:9E:E8:2B
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 1D98CF70
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pnXrtj3UdG3eRXuFXLJ1xHCe6Cs.roa
Signing time: Thu 30 Jun 2022 07:44:02 +0000
ROA not before: Thu 30 Jun 2022 07:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 81.22.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496553840 (0x1d98cf70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 30 07:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a675ebb63dd4746dde457b855cb275c4709ee82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:26:69:e8:14:f4:65:08:fd:ca:c9:8f:d5:
d5:b6:21:34:62:d3:6b:cb:f0:2a:35:56:a6:47:c3:
d5:7d:89:30:8c:00:50:17:dd:04:80:29:e2:ef:05:
c6:8b:12:35:87:1f:fa:be:2f:38:72:e5:7f:a8:3c:
cf:84:33:9c:87:ae:4d:38:23:d4:9b:b9:74:cc:e8:
2a:01:b4:94:5a:c0:4c:1e:49:e9:bd:d9:d9:3c:ff:
71:56:f4:e8:49:4f:dd:9c:41:9b:26:e2:dc:0d:95:
17:d9:03:18:b5:18:0a:5c:99:d1:3a:30:d3:97:22:
95:fc:45:4f:99:6b:0c:ee:f7:32:45:dc:44:89:77:
00:84:90:41:54:1a:92:c2:93:07:4c:0e:d5:53:2d:
bf:73:51:6c:c0:b2:f1:6f:92:8b:e1:bd:44:7a:db:
15:09:f4:c9:0d:61:3c:34:6e:e9:35:d6:79:5e:05:
09:aa:22:97:f5:ce:15:ea:1f:88:61:03:07:a9:d4:
5e:83:9d:8a:e4:c6:eb:c9:f4:3a:4f:3a:2b:61:fc:
11:e7:17:af:5a:8b:16:0b:e8:55:2e:33:50:d1:55:
7d:00:f7:5b:b9:d3:41:c9:ac:57:5f:32:0a:a5:12:
f1:31:79:a3:e2:bc:5b:d1:b4:33:01:6c:ec:21:74:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:EB:B6:3D:D4:74:6D:DE:45:7B:85:5C:B2:75:C4:70:9E:E8:2B
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/pnXrtj3UdG3eRXuFXLJ1xHCe6Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a9:46:02:5c:76:5e:eb:da:a3:00:74:3f:9f:16:7b:38:3e:
1b:15:99:1f:c5:47:cc:dd:87:57:b2:8c:d8:07:82:6c:44:f6:
01:1d:71:b0:2a:db:d8:6b:9e:a2:df:8f:d7:e0:ef:11:41:1d:
15:39:a4:f0:30:ea:a2:35:4a:80:f5:2d:84:ff:e4:34:03:23:
ba:1b:a4:b1:9c:62:20:8f:7f:5a:84:ae:58:06:e2:93:6d:22:
70:ce:c9:7e:4c:41:5c:1f:18:e0:bb:6e:31:87:b8:e8:17:51:
60:6d:29:55:90:63:44:fe:d3:db:4e:d8:3b:74:b7:c6:10:8f:
62:e5:d8:e8:a5:91:50:f2:cd:e8:0a:b2:09:3c:e7:71:73:06:
91:46:46:fa:26:85:9d:f2:8f:d1:70:62:c4:66:cf:4c:75:42:
98:c7:08:05:3b:ae:8f:be:1a:5f:f2:6c:79:df:95:c9:c7:7c:
c0:95:51:2d:a0:9e:a7:ff:56:bc:61:b1:f2:c3:d6:0c:12:c2:
36:c1:1b:dc:30:ee:a0:aa:86:ba:4f:ff:82:59:b1:0a:79:b5:
00:f1:eb:20:56:51:7b:55:29:66:9d:68:f4:65:66:6d:e5:a5:
3c:97:9f:69:cd:99:ce:44:fe:83:53:b0:16:17:55:44:23:84:
a0:4a:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org