Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D2OgmMQuSN1rf6CeQWqrebBhy2c.roa
File: D2OgmMQuSN1rf6CeQWqrebBhy2c.roa (raw, json)
Hash identifier: Tt22LuGPk7rvJRvSqkMsxxH2qX5Zmb8C8ZcBEb64zVQ=
Subject key identifier: 0F:63:A0:98:C4:2E:48:DD:6B:7F:A0:9E:41:6A:AB:79:B0:61:CB:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018220E700AA0255CA11A6D2AF801A15C240
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D2OgmMQuSN1rf6CeQWqrebBhy2c.roa
Signing time: Thu 21 Jul 2022 13:16:26 +0000
ROA not before: Thu 21 Jul 2022 13:16:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
82.115.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:e7:00:aa:02:55:ca:11:a6:d2:af:80:1a:15:c2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 21 13:16:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f63a098c42e48dd6b7fa09e416aab79b061cb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:99:d3:76:11:f7:4a:6e:9c:7c:c4:f3:7b:
35:72:60:3a:bf:44:c0:30:d0:d9:3e:3c:5c:2d:6f:
35:9b:b2:ac:29:41:0e:d8:c1:4d:af:38:d7:99:ab:
c4:50:d0:af:d4:ea:12:a9:5a:e2:51:17:c6:99:19:
2d:77:e6:ae:7d:e9:9e:e2:cb:5e:79:f0:06:b0:83:
b3:d2:08:e3:71:63:25:d4:5d:10:79:b9:33:2b:65:
c2:2f:dd:ab:57:c5:8a:5c:22:cf:ea:72:4d:8b:f3:
2a:17:17:96:9e:09:46:7c:2c:d8:16:74:70:47:f1:
91:25:2a:cb:20:d1:05:ed:2e:df:e6:ec:35:41:7b:
25:cb:4f:7f:4f:43:64:67:ef:92:39:d1:38:30:aa:
ab:53:84:09:5d:1f:b5:97:fb:cc:6d:28:d4:27:c5:
51:30:22:bc:da:65:15:e1:63:65:ee:ee:61:97:28:
6b:2a:99:82:bf:9f:c8:f3:99:09:06:91:c5:22:6f:
dd:4e:1d:7c:64:36:c2:c9:43:5f:5f:94:cb:5c:e8:
58:62:ff:e3:e5:5c:75:ef:f4:af:0d:02:8a:ba:c6:
cc:d2:a1:d1:80:fa:25:34:48:1f:c4:2c:e1:45:d0:
e0:58:e3:14:f7:ef:b7:0a:8e:eb:a5:74:55:d2:be:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:A0:98:C4:2E:48:DD:6B:7F:A0:9E:41:6A:AB:79:B0:61:CB:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D2OgmMQuSN1rf6CeQWqrebBhy2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
82.115.208.0/22
Signature Algorithm: sha256WithRSAEncryption
72:99:08:c8:56:8e:e1:5b:dd:ea:6b:e4:cf:26:78:e1:6b:96:
7c:82:d0:c1:15:c5:11:56:08:51:93:2a:d7:5e:58:be:f3:2c:
f9:d3:a3:a7:3e:e8:fd:f0:41:01:c8:08:10:ce:62:e4:68:7f:
71:de:4e:65:01:23:d1:09:d0:b0:cc:cb:79:ae:d4:31:f2:1e:
56:53:86:08:e3:7c:3e:6d:37:7b:31:f7:45:c4:cc:6d:45:db:
ec:25:cc:bb:c1:41:8d:d6:e7:15:8c:80:5c:ee:72:f1:b8:45:
3a:69:1f:fe:30:62:29:aa:54:7e:f4:2b:c8:80:82:e8:85:85:
51:30:16:72:5f:4d:09:cd:d3:e0:bc:7b:e4:34:f0:aa:53:05:
09:43:7d:82:fe:87:0f:4a:26:e9:be:4c:dc:38:b6:bc:cc:b5:
26:ed:06:0b:e9:84:95:52:08:25:4d:62:d2:d3:83:93:1c:20:
2e:5f:d6:0d:b4:df:69:5b:b2:f2:5c:b8:03:cc:18:9d:d3:fc:
56:2c:d5:3c:91:83:ca:d1:73:6e:0e:65:ac:b2:b9:7f:7b:37:
64:ea:b9:4a:0a:27:ca:21:54:27:2b:63:fd:33:32:b2:1d:87:
2e:6e:93:fb:db:29:44:fe:8e:47:c4:78:a0:e6:3e:61:ad:b3:
24:69:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org