Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bs0mGFTBrdyc1qi6NlyTjzrvzrA.roa
File: bs0mGFTBrdyc1qi6NlyTjzrvzrA.roa (raw, json)
Hash identifier: V1NmslmR/mKW6bcwPWeau5Brl+Hsih+/JxuBIZWVYsA=
Subject key identifier: 6E:CD:26:18:54:C1:AD:DC:9C:D6:A8:BA:36:5C:93:8F:3A:EF:CE:B0
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01821605ECB6D0EEB285BB65A059CD8F6CBE
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bs0mGFTBrdyc1qi6NlyTjzrvzrA.roa
Signing time: Tue 19 Jul 2022 10:34:23 +0000
ROA not before: Tue 19 Jul 2022 10:34:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.244.0/22 maxlen: 24
81.31.242.0/23 maxlen: 24
81.31.252.0/22 maxlen: 24
185.84.162.0/23 maxlen: 24
185.84.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:05:ec:b6:d0:ee:b2:85:bb:65:a0:59:cd:8f:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jul 19 10:34:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ecd261854c1addc9cd6a8ba365c938f3aefceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:5d:1e:3d:49:85:ac:9e:76:e4:a7:32:1d:
c8:b4:db:01:a6:d6:e4:03:10:33:f1:3b:fb:31:ae:
c2:24:0f:3a:33:e0:a0:9e:62:42:f2:1b:e3:df:60:
a5:9d:0f:28:7c:96:97:e2:85:fe:ed:97:a7:9b:36:
de:67:95:95:22:92:88:37:f6:16:1f:b3:1c:88:a2:
f4:cd:dd:06:b8:8d:d2:fa:0e:a6:2a:56:2c:7f:ed:
d0:08:86:15:7d:b3:85:ee:e1:f2:3a:85:3f:16:17:
4d:15:60:56:fc:f3:ca:95:d0:92:ab:c9:33:83:7a:
49:5d:1e:1c:7c:c6:c8:c4:7d:7b:15:00:ad:90:55:
45:69:33:be:d6:80:5e:4c:be:31:37:34:5f:12:88:
47:52:44:8b:2e:b0:d0:1e:48:f4:10:1d:5d:f7:cc:
ec:ba:9b:85:26:f1:41:a1:b5:dc:d3:b6:55:cd:dd:
0b:61:fe:89:66:e7:00:cd:d6:6a:05:94:77:ef:1a:
0a:ea:e5:45:33:e2:23:1f:12:5c:cd:12:c3:11:88:
96:ce:2d:96:ed:79:ea:a6:c5:ec:41:da:89:a1:7c:
0b:f0:e7:55:6c:a0:fb:ef:70:81:bc:6e:a8:e0:f1:
80:e9:7f:43:26:d3:d6:e3:25:65:73:3c:91:ef:38:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:26:18:54:C1:AD:DC:9C:D6:A8:BA:36:5C:93:8F:3A:EF:CE:B0
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/bs0mGFTBrdyc1qi6NlyTjzrvzrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0-81.31.247.255
81.31.252.0/22
185.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
13:2b:80:17:12:72:7e:be:aa:be:8f:0c:06:92:89:c0:0c:ad:
82:59:e2:a1:dd:dd:5c:9f:b3:f2:a5:02:85:57:d8:51:c4:32:
45:8a:28:85:66:38:86:f7:dc:f3:a6:49:9a:7a:cf:e0:d5:b8:
57:fb:6f:5c:a6:03:11:81:b7:20:6d:f9:05:6e:ad:c9:aa:38:
b9:bd:d0:85:78:27:4a:8d:93:6a:64:32:9c:c3:87:a8:11:72:
78:fd:10:69:6a:e7:b0:a2:2e:c6:05:2d:ff:15:83:49:3f:5e:
38:55:47:30:a7:7d:d2:27:12:54:bb:30:e0:8e:8e:9e:2a:0f:
66:c0:cc:31:6b:28:05:06:3e:de:c3:6b:50:32:2c:0e:c1:dd:
e8:b0:fa:f8:02:34:4e:ac:47:09:47:52:05:98:2e:6d:e9:93:
5f:56:37:b4:4c:0a:7e:39:b4:40:97:fa:da:4b:52:43:be:d2:
65:35:7c:5d:7c:e0:0b:0c:63:95:eb:37:63:92:75:78:d1:53:
94:d1:23:ea:2a:04:25:a2:da:a9:e7:10:29:cf:ee:57:39:19:
a9:a8:c0:dc:67:fd:41:9e:c7:99:7c:c6:11:a8:48:ea:c6:20:
68:33:54:0a:13:57:15:e2:0f:d9:a5:b3:80:34:bc:65:c3:89:
8e:69:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org