Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C1bqqKUSS7mw2M1YH-w1qmKFF0o.roa
File: C1bqqKUSS7mw2M1YH-w1qmKFF0o.roa (raw, json)
Hash identifier: OaO9GwqDImTyfjaK/Es2MXheK2+pYW2Bz293oPVi5FI=
Subject key identifier: 0B:56:EA:A8:A5:12:4B:B9:B0:D8:CD:58:1F:EC:35:AA:62:85:17:4A
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B6AB877
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C1bqqKUSS7mw2M1YH-w1qmKFF0o.roa
Signing time: Sat 01 Jan 2022 08:58:45 +0000
ROA not before: Sat 01 Jan 2022 08:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 65552
IP address blocks: 81.8.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191543415 (0xb6ab877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b56eaa8a5124bb9b0d8cd581fec35aa6285174a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:a4:ea:78:6a:ad:87:d8:e9:6a:83:83:5c:
36:f2:b0:58:41:c4:d3:09:fa:46:cc:ad:d1:a7:d3:
41:fc:79:c9:c1:72:bf:9d:7c:cb:f5:31:93:e6:5a:
ee:d0:aa:e0:1a:84:82:73:0d:59:31:9d:5d:5e:4c:
d8:3d:51:bd:be:c3:4e:f2:21:65:03:f2:38:13:cf:
df:d4:1d:12:eb:ba:b5:18:00:21:75:15:f3:f9:e4:
7a:2a:75:5e:e8:e6:b1:33:32:84:48:f6:af:a9:8f:
c0:f4:e3:97:f2:4b:fa:ad:ed:b4:8e:7e:69:e8:97:
7c:ef:54:14:3c:0f:f4:d4:01:26:29:d9:62:2a:f0:
78:48:7c:ed:bc:ca:23:af:3c:41:32:b3:56:e9:67:
a2:d2:69:fe:1c:7a:89:87:8c:7e:9a:39:f1:a4:c5:
c8:54:a8:5e:0e:b7:f9:96:5b:3c:5c:3f:87:d9:ad:
f8:72:e4:b0:24:16:76:a2:6c:c8:5c:1c:a7:76:3c:
61:b0:31:58:be:9b:06:95:1f:89:b3:7d:c9:6b:f4:
8b:c6:5e:cf:57:26:ae:40:89:da:1c:9c:f1:91:6e:
54:4a:ba:c7:1f:8d:d9:98:da:62:7d:99:89:b6:50:
a5:2b:e2:2f:40:f5:42:dd:49:5c:ca:f5:63:2a:61:
44:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:56:EA:A8:A5:12:4B:B9:B0:D8:CD:58:1F:EC:35:AA:62:85:17:4A
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/C1bqqKUSS7mw2M1YH-w1qmKFF0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.8.34.0/24
Signature Algorithm: sha256WithRSAEncryption
90:77:1e:fc:5a:d1:9b:12:1c:e4:92:42:c4:91:80:9c:66:aa:
c3:a6:c5:f9:ed:52:82:ea:41:74:5c:a6:b0:bd:a1:9f:62:39:
48:19:c4:d3:ee:eb:94:db:cc:71:85:6b:d1:5a:51:1f:eb:a3:
21:38:1d:7f:95:2e:0e:18:23:9a:a1:3b:22:c6:f0:c2:ec:1d:
55:e5:1a:fb:9a:08:9d:94:9e:c5:4f:c9:48:fd:7a:ed:46:28:
83:7a:26:a9:06:7d:b7:ee:37:5e:65:a2:3b:b5:3c:6e:ff:f7:
ab:85:46:d1:4f:a1:19:79:75:18:87:be:e6:88:eb:1d:a1:ad:
ad:5e:e0:09:53:3e:26:80:9e:3e:8c:8e:2f:f9:57:7f:08:4f:
7e:c0:1b:f0:a6:24:01:91:1a:9b:a2:dc:0c:d2:43:71:c4:a1:
29:71:29:82:09:4b:b2:49:38:de:64:72:0c:5d:a1:8b:22:f0:
e1:ed:32:b1:ca:54:2c:a5:e0:11:55:df:ad:87:19:71:61:dd:
57:37:04:41:8f:62:54:7f:60:78:b2:20:59:ee:e8:0f:42:39:
fd:e7:78:48:97:e2:fc:ff:56:98:71:7d:79:c1:da:96:f8:c9:
37:7c:ae:67:1f:12:18:06:3b:de:29:0d:ab:3c:c8:d0:9c:2d:
b4:93:72:61
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEC2q4dzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NjhmZTM1Y2M5NjI2MzNhMjc1N2FmMTBhMGU2ZThhYjZkMDFmNGM5MB4XDTIyMDEw
MTA4NTg0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGI1NmVhYThhNTEy
NGJiOWIwZDhjZDU4MWZlYzM1YWE2Mjg1MTc0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALBxpOp4aq2H2Olqg4NcNvKwWEHE0wn6Rsyt0afTQfx5ycFy
v518y/Uxk+Za7tCq4BqEgnMNWTGdXV5M2D1Rvb7DTvIhZQPyOBPP39QdEuu6tRgA
IXUV8/nkeip1XujmsTMyhEj2r6mPwPTjl/JL+q3ttI5+aeiXfO9UFDwP9NQBJinZ
YirweEh87bzKI688QTKzVulnotJp/hx6iYeMfpo58aTFyFSoXg63+ZZbPFw/h9mt
+HLksCQWdqJsyFwcp3Y8YbAxWL6bBpUfibN9yWv0i8Zez1cmrkCJ2hyc8ZFuVEq6
xx+N2ZjaYn2ZibZQpSviL0D1Qt1JXMr1YyphRG0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQLVuqopRJLubDYzVgf7DWqYoUXSjAfBgNVHSMEGDAWgBRWj+NcyWJjOidX
rxCg5uirbQH0yTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZvX2pYTWxpWXpvblY2OFFvT2JvcTIwQjlNay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvMzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8x
L0MxYnFxS1VTUzdtdzJNMVlILXcxcW1LRkYwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
MzdlYmU2LThiZmUtNGMxZi1hMTgzLTgzZDY0OGY3OTc0Ni8xL1ZvX2pYTWxpWXpv
blY2OFFvT2JvcTIwQjlNay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEIIjANBgkqhkiG9w0BAQsFAAOC
AQEAkHce/FrRmxIc5JJCxJGAnGaqw6bF+e1SgupBdFymsL2hn2I5SBnE0+7rlNvM
cYVr0VpRH+ujITgdf5UuDhgjmqE7IsbwwuwdVeUa+5oInZSexU/JSP167UYog3om
qQZ9t+43XmWiO7U8bv/3q4VG0U+hGXl1GIe+5ojrHaGtrV7gCVM+JoCePoyOL/lX
fwhPfsAb8KYkAZEam6LcDNJDccShKXEpgglLskk43mRyDF2hiyLw4e0yscpULKXg
EVXfrYcZcWHdVzcEQY9iVH9geLIgWe7oD0I5/ed4SJfi/P9WmHF9ecHalvjJN3yu
Zx8SGAY73ikNqzzI0JwttJNyYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org