Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oJK56pz2skSGVMjl5qn26yMTS4I.roa
File: oJK56pz2skSGVMjl5qn26yMTS4I.roa (raw, json)
Hash identifier: MWMPQulUFEclvIBz4PIj+EKxt9nf4rxy/Xl/7RsUzas=
Subject key identifier: A0:92:B9:EA:9C:F6:B2:44:86:54:C8:E5:E6:A9:F6:EB:23:13:4B:82
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018400F2A312F41E8B86844FD273E6DB9F6B
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oJK56pz2skSGVMjl5qn26yMTS4I.roa
Signing time: Sat 22 Oct 2022 18:26:52 +0000
ROA not before: Sat 22 Oct 2022 18:26:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.232.0/24 maxlen: 24
81.31.252.0/22 maxlen: 24
185.84.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:f2:a3:12:f4:1e:8b:86:84:4f:d2:73:e6:db:9f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Oct 22 18:26:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a092b9ea9cf6b2448654c8e5e6a9f6eb23134b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:70:f6:bb:bf:0b:79:0c:c1:5a:01:23:f2:
cd:28:fc:97:62:39:43:19:f4:00:45:a9:8d:a2:6a:
ed:bc:06:8f:86:5b:9e:df:2f:29:d3:43:3b:e6:ce:
2b:67:3d:9f:5a:d4:5d:15:a3:03:07:02:c4:2a:ac:
83:ec:fd:6a:2f:83:ba:6e:85:19:60:03:35:a5:0f:
30:e0:59:38:37:a5:ae:c1:d3:c9:7e:cb:84:2a:81:
a8:a6:f0:d1:81:24:24:44:d0:95:e3:6b:ee:d1:7d:
83:12:e9:3e:1f:f4:96:e3:e3:40:b4:96:ba:bb:99:
9a:4d:1b:18:53:85:62:2b:e7:70:f9:04:56:d4:7d:
cf:1f:01:50:09:dc:de:92:15:a1:e2:2f:c5:1d:50:
32:b6:c6:fc:c7:90:45:10:f8:fc:c0:95:29:52:57:
a6:8b:44:07:cd:61:56:6d:75:eb:33:4d:51:82:35:
0e:e6:3d:d3:b2:9b:69:66:d9:9b:6a:f7:07:5d:9d:
62:58:3b:13:94:01:e5:f4:af:9a:60:63:89:16:84:
e1:43:b9:9b:0c:84:03:e4:d1:94:df:98:5a:6e:ee:
13:a1:6e:62:3b:f0:e5:09:b0:07:ca:30:8c:8a:0a:
15:79:82:bf:a6:eb:4f:7b:84:9b:0f:c9:74:77:0f:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:B9:EA:9C:F6:B2:44:86:54:C8:E5:E6:A9:F6:EB:23:13:4B:82
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oJK56pz2skSGVMjl5qn26yMTS4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0-81.31.232.255
81.31.252.0/22
185.84.162.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:5e:45:b4:36:71:ad:a2:37:bc:94:30:57:9c:55:b1:fb:ca:
e2:06:04:b3:1e:14:74:04:d8:9d:68:f2:3f:e2:f5:0c:6d:9a:
69:95:75:6d:14:44:2a:38:0a:32:06:7a:70:47:94:ec:54:40:
a7:70:b8:60:b0:48:0f:b8:43:e1:39:de:fa:f7:c8:b3:00:e4:
9a:2e:0d:ed:74:c9:bc:4b:f0:93:d9:f4:e0:06:42:36:74:db:
64:fb:e0:f2:74:ef:82:c8:8c:9b:bd:ae:e9:21:62:97:cf:da:
13:9a:20:9f:df:1b:88:70:06:a6:25:67:33:46:ee:e7:ca:3b:
6e:be:46:c8:a2:17:48:50:8d:fb:97:20:3c:ed:ac:07:2e:1a:
b0:d3:00:a7:b8:d4:9c:60:8c:24:7c:ed:94:36:92:02:4f:42:
5f:f7:1e:20:4a:e7:4e:1b:86:60:7f:7d:67:78:97:9c:cc:d9:
e8:91:13:8b:a7:6e:15:a0:3a:4f:c4:ca:c8:31:ac:d2:2c:72:
f9:75:1e:8f:dc:70:de:53:5a:51:08:7c:aa:ec:19:9e:66:9b:
ff:0e:8a:33:fd:ae:5a:f5:d4:ef:46:71:55:eb:e2:70:24:fa:
60:c5:79:ac:c9:d0:6d:b8:90:78:d9:51:1c:78:11:03:32:ec:
74:9d:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org