Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xbkTNqUT7WhPVp1vHGeMAMvbVlY.roa
File: xbkTNqUT7WhPVp1vHGeMAMvbVlY.roa (raw, json)
Hash identifier: YqJqMEBXVAif7UkgQYuxteyM86dIp/l832pmpjG7djU=
Subject key identifier: C5:B9:13:36:A5:13:ED:68:4F:56:9D:6F:1C:67:8C:00:CB:DB:56:56
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01853088BFD5163C770B3810A8F65AE4B6E3
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xbkTNqUT7WhPVp1vHGeMAMvbVlY.roa
Signing time: Tue 20 Dec 2022 17:15:46 +0000
ROA not before: Tue 20 Dec 2022 17:15:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46450
IP address blocks: 81.22.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:88:bf:d5:16:3c:77:0b:38:10:a8:f6:5a:e4:b6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 20 17:15:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5b91336a513ed684f569d6f1c678c00cbdb5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:43:e4:7b:c1:96:32:68:fe:b5:5f:8b:96:
b3:34:6c:a1:89:c8:40:ea:c2:15:a1:c1:58:d5:83:
87:0d:cd:31:0e:c6:04:c3:73:a1:89:36:de:a8:4a:
15:e3:2b:61:f3:e9:59:69:aa:71:26:b7:29:33:d6:
24:35:bc:df:e0:48:15:81:91:85:52:3a:e0:24:0b:
e8:9a:50:39:c5:58:a4:d8:62:11:8e:75:ed:86:12:
d7:f2:7b:7f:4f:eb:e2:f5:8c:ad:7c:97:d4:06:b9:
5a:52:66:67:8d:aa:92:86:e6:c6:71:8f:1e:32:21:
72:a2:7a:fb:d5:04:a3:b2:4f:26:54:94:8c:b3:ad:
3d:1d:18:6b:6b:e4:a6:fa:79:ff:58:e1:18:c9:1b:
9f:e2:5b:c6:52:d7:42:40:ca:a7:a1:8f:4d:c2:83:
3b:1c:2f:8a:ec:23:c7:70:a4:40:63:fd:86:38:0c:
9c:43:b4:c4:16:d3:42:77:ad:14:1f:86:f6:f9:18:
52:28:71:20:b6:5b:57:a9:86:62:e9:7f:53:32:03:
df:6c:7f:2c:ab:13:15:fa:0f:4b:3b:4b:2c:8c:ac:
7a:e8:51:bc:4e:54:b4:6a:90:90:9f:b1:cf:78:cb:
63:e5:c7:ad:5f:e4:e9:8b:74:e1:de:92:d8:45:bd:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:13:36:A5:13:ED:68:4F:56:9D:6F:1C:67:8C:00:CB:DB:56:56
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/xbkTNqUT7WhPVp1vHGeMAMvbVlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:42:d6:9a:de:71:40:0a:f7:aa:54:9e:46:29:67:88:a5:59:
e4:66:62:71:47:e9:70:71:f9:07:2c:12:7a:c1:94:f4:de:56:
61:32:dc:6e:c9:81:3b:a1:38:ed:8d:9c:19:e7:ae:53:7a:0c:
a4:5d:c8:61:41:7b:a6:52:ae:60:39:51:d4:23:b4:aa:b7:af:
21:5b:7e:79:fc:05:59:fa:f4:9a:db:90:2e:5f:52:56:c2:22:
5f:e4:fb:72:4b:fe:9c:ff:d4:2e:0b:cb:63:de:45:7d:11:30:
38:55:a0:2a:5a:0a:29:07:0a:3f:48:26:18:8a:d1:36:68:0e:
b9:dd:a0:ab:32:43:9d:f6:64:4d:26:96:7a:a9:3b:22:a4:22:
04:76:65:4f:94:04:d3:a9:70:09:97:2e:b5:75:f0:04:2a:78:
0b:e8:18:2c:b4:ae:d0:7d:39:c2:d0:ed:ce:1a:7c:45:2d:92:
21:d1:a0:39:c5:f9:1f:77:5f:5e:c7:71:3b:d8:05:f7:cb:2a:
c0:6e:84:26:2d:8e:31:99:ee:91:8b:91:dd:c4:e2:e6:27:fb:
e7:05:ed:d3:79:54:7d:e8:42:c9:4c:65:b1:b4:4b:b9:3a:f8:
65:cd:65:6c:e0:1d:5b:92:b6:2d:9a:2b:9a:9f:8e:60:88:98:
cd:07:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org