Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0zrFkWOpaOavM5ydCyHcOfq6pAI.roa
File: 0zrFkWOpaOavM5ydCyHcOfq6pAI.roa (raw, json)
Hash identifier: WEQaPPyfK7Cd7df5nwd9pjF2o9Q7g1sy0ZNWY5gHh1A=
Subject key identifier: D3:3A:C5:91:63:A9:68:E6:AF:33:9C:9D:0B:21:DC:39:FA:BA:A4:02
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01843CDA9A977366378ABDA933A9A5ECB43B
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0zrFkWOpaOavM5ydCyHcOfq6pAI.roa
Signing time: Thu 03 Nov 2022 09:37:50 +0000
ROA not before: Thu 03 Nov 2022 09:37:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211611
IP address blocks: 81.181.198.0/23 maxlen: 23
81.181.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:da:9a:97:73:66:37:8a:bd:a9:33:a9:a5:ec:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 3 09:37:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d33ac59163a968e6af339c9d0b21dc39fabaa402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:6c:97:d7:ae:e9:5a:7b:2b:9c:12:97:35:
2c:9b:aa:6f:25:69:88:7e:88:b8:f9:40:05:07:2c:
5b:f6:c5:8f:ba:1b:6e:9d:61:75:80:95:8a:7d:6d:
b0:3b:9e:b4:b0:54:64:98:22:15:d2:47:6e:61:56:
ad:6e:41:b3:8b:52:e6:0a:cf:33:97:05:da:5f:ce:
b6:e7:3f:a8:d4:be:a7:45:89:65:ee:a3:ad:8f:29:
87:aa:af:8c:f0:16:0d:0b:d7:15:d3:4d:71:b4:0a:
d9:21:5d:7d:25:69:89:1c:cf:19:58:eb:42:29:7e:
8a:52:8f:22:3c:04:af:cc:0c:4e:17:cb:f9:89:5c:
fd:df:2b:f6:ed:ef:b3:61:41:04:cf:e7:86:42:fa:
1e:4a:09:b4:8a:03:f9:ce:0f:cb:9b:05:3a:78:5c:
1a:cf:6b:97:b4:9c:23:a4:40:ec:9e:e3:0e:17:85:
f6:b8:a4:2e:01:00:f7:5f:91:a4:29:1d:3f:d7:5d:
2f:87:8d:7c:9b:72:da:cc:69:a4:27:b7:2e:18:db:
5e:2a:07:5f:74:18:93:8f:94:08:5f:fb:25:55:7f:
d5:91:46:a1:04:ab:97:bc:c7:63:e2:77:f3:b5:6b:
25:10:44:4d:10:24:bf:67:9b:ed:86:ab:8a:bb:6f:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:C5:91:63:A9:68:E6:AF:33:9C:9D:0B:21:DC:39:FA:BA:A4:02
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0zrFkWOpaOavM5ydCyHcOfq6pAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.87.0/24
81.181.198.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a6:6d:e4:82:3b:2e:6e:ac:6d:b0:e4:97:ba:b3:01:10:b0:
86:2a:65:b0:6c:f7:e6:44:16:29:bd:9c:eb:44:84:24:c3:cf:
fb:30:47:6d:68:c0:05:5d:be:ed:bf:11:9e:38:2f:a4:c8:5b:
e5:8a:6b:b4:94:bf:54:0a:de:e4:88:4f:57:f5:00:76:58:08:
1b:58:9c:db:d5:eb:68:bb:eb:d2:04:08:d8:6d:9a:3b:bb:bf:
4a:56:49:38:75:75:4f:de:48:1f:52:7d:10:d5:17:9b:c9:66:
07:ba:99:1a:66:9e:e0:cb:e2:ba:25:65:eb:3f:4f:0e:f0:ba:
02:83:d1:16:05:64:41:f3:39:f8:2e:9c:7b:3c:db:cc:bf:1f:
99:04:e1:7a:4f:06:00:4f:4c:5f:7a:06:99:8e:46:c3:83:a6:
f0:bb:50:d7:b0:d6:85:cc:42:bf:69:63:0b:8a:0e:8e:10:8a:
f0:a9:e0:a6:ad:86:5a:a8:66:a6:1e:f5:1c:47:4c:b0:18:58:
df:3d:68:49:90:b3:69:30:3e:98:49:e1:b9:cd:2b:5f:c5:a0:
07:3b:81:c1:52:25:48:ee:26:16:af:3a:2e:b7:78:67:6c:c3:
1d:fe:b3:cd:76:05:c9:dc:1d:6e:ef:c7:45:46:15:c2:a8:01:
1e:31:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org