Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Adtgc_7uXibx6hqMZB6B7YZW5c.roa
File: 1-Adtgc_7uXibx6hqMZB6B7YZW5c.roa (raw, json)
Hash identifier: eJmbr7os2OwnvQVY5BqCyoI24rlo9WvGmArAdE0PwBs=
Subject key identifier: F8:07:6D:81:CF:FB:B9:78:9B:C7:A8:6A:31:90:7A:07:B6:19:5B:97
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184384716270CB611C0699E8F15F857F64F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Adtgc_7uXibx6hqMZB6B7YZW5c.roa
Signing time: Wed 02 Nov 2022 12:18:13 +0000
ROA not before: Wed 02 Nov 2022 12:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 81.161.237.0/24 maxlen: 24
193.58.121.0/24 maxlen: 24
193.58.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:47:16:27:0c:b6:11:c0:69:9e:8f:15:f8:57:f6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 12:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8076d81cffbb9789bc7a86a31907a07b6195b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:4c:0f:c8:91:eb:0a:2b:f4:23:91:e0:82:
c7:3e:a8:87:de:49:a1:28:79:3b:cf:1a:9e:e3:ea:
72:3e:ad:b9:5f:3b:95:b3:25:aa:5d:de:6c:fe:4b:
37:c0:9e:38:5d:ca:5b:e5:dd:9a:2c:60:f3:7a:d4:
6b:02:96:90:16:a5:75:96:05:6b:e3:15:ba:e4:db:
da:23:3d:14:fc:bb:8a:af:9e:ae:cf:c1:91:71:68:
4a:70:73:20:cf:5e:cf:a7:88:ac:87:f7:e7:ac:61:
ac:d0:ed:71:ef:0a:8e:66:d4:ec:5c:ae:14:0a:aa:
7d:a9:75:ae:8e:aa:8a:3f:1a:0d:fc:d8:19:25:81:
7d:17:cb:71:3f:9a:fe:28:09:1e:a1:1c:35:78:76:
1b:5f:b8:92:eb:6b:74:a7:5a:c5:ad:1f:ef:26:b1:
04:99:5a:62:ef:68:37:f2:a1:47:4d:fd:e7:65:cd:
40:d5:11:ae:e3:85:d8:df:7c:6d:65:d8:dd:2d:79:
56:60:da:90:cf:26:17:6c:92:c0:18:05:d4:4e:29:
f7:9f:dc:f9:6d:60:f1:73:8c:48:33:c9:ba:7b:71:
9b:a0:2c:32:d5:4f:50:80:7d:6b:5e:c1:85:4b:44:
37:5f:6f:7b:bd:e7:2e:6f:62:0e:fd:ca:ff:96:d4:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:6D:81:CF:FB:B9:78:9B:C7:A8:6A:31:90:7A:07:B6:19:5B:97
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-Adtgc_7uXibx6hqMZB6B7YZW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
193.58.121.0/24
193.58.123.0/24
Signature Algorithm: sha256WithRSAEncryption
94:f3:28:e9:55:d5:ff:8c:5b:c5:89:38:ac:60:74:2e:6c:c8:
47:87:e4:db:55:fd:99:df:e5:71:15:a6:0d:87:a4:9a:49:5c:
ad:a9:10:5e:de:95:cb:e0:7d:51:a2:4e:59:1b:1b:e4:de:cd:
08:dd:ff:61:68:38:53:43:9e:09:3b:84:97:99:2c:d2:c3:f5:
45:d4:23:7a:af:b4:25:48:ef:bb:71:cf:f2:80:49:b3:2f:bd:
18:73:ab:56:3d:7d:af:4a:ac:8f:bc:f8:15:1e:85:fc:aa:d0:
2d:e9:18:24:3d:38:52:a2:cd:7c:de:1f:83:c5:d1:ed:d9:d8:
b3:f0:fe:cf:2c:c1:7c:cb:0b:c6:05:eb:31:a6:44:a9:f2:06:
ed:6c:60:88:b6:ea:31:a0:a2:b4:4e:4d:6b:ad:59:66:6a:83:
c7:1b:f0:1d:56:70:e9:07:9f:d5:39:aa:3d:b3:d6:86:25:0b:
7c:d3:96:52:1e:68:46:47:94:62:c8:86:75:61:f4:32:9f:23:
c4:65:84:76:eb:da:4a:ca:dd:28:3e:66:bb:cc:2c:b7:9d:6d:
cd:f1:07:b3:bb:f7:8e:c2:26:df:ab:f0:ac:e1:9b:d9:ad:2c:
d2:f0:b2:e5:9f:0e:4a:5e:eb:aa:04:e7:2f:70:cb:bf:27:ef:
a7:ca:b3:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org