Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TIgSFpESiUQSpaNvsnVcOpTJFPE.roa
File: TIgSFpESiUQSpaNvsnVcOpTJFPE.roa (raw, json)
Hash identifier: i86EfWX8dllgH3WAsFkBKotmq/lAwUgt/66PAKbX1qw=
Subject key identifier: 4C:88:12:16:91:12:89:44:12:A5:A3:6F:B2:75:5C:3A:94:C9:14:F1
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1AF456AF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TIgSFpESiUQSpaNvsnVcOpTJFPE.roa
Signing time: Wed 04 May 2022 11:33:21 +0000
ROA not before: Wed 04 May 2022 11:33:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31554
IP address blocks: 81.181.76.0/24 maxlen: 24
81.181.78.0/23 maxlen: 23
193.226.92.0/24 maxlen: 24
81.181.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452220591 (0x1af456af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 4 11:33:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c8812169112894412a5a36fb2755c3a94c914f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:e2:3e:af:92:f4:d2:7e:04:2e:df:f9:57:
2b:a9:a1:b4:d5:66:7d:70:1f:58:39:87:4e:10:db:
a9:b9:b7:fd:52:ad:de:f6:b4:99:39:4b:4b:0e:21:
ab:33:98:56:39:d9:92:1d:e2:ad:b8:6a:f0:05:ed:
46:fc:68:d0:26:40:f4:6f:6d:38:16:95:66:41:81:
65:d3:b3:7d:eb:a2:ee:3c:fc:6d:31:7d:f3:bd:ad:
da:95:79:84:ab:d7:d1:42:6b:b1:31:8f:1a:80:3f:
4c:d3:cb:31:12:32:07:61:b6:54:fe:15:f3:56:cc:
10:0a:6a:09:82:1e:6c:b4:97:4e:1b:0a:f9:65:d9:
ad:d2:63:59:1b:94:80:30:c5:27:35:57:18:80:70:
2c:f6:36:3e:42:e8:81:37:1c:82:ad:37:6b:24:6e:
97:fe:20:39:2c:fb:4b:21:bd:28:3b:50:f7:45:1a:
48:d7:d5:e5:46:d9:3c:0f:8d:a0:0e:6b:40:e9:86:
1c:95:08:56:39:f6:b5:95:19:09:1e:95:eb:11:aa:
75:18:a4:20:f3:d0:88:de:9b:0e:bf:14:d8:7e:f5:
be:ed:b6:93:9d:70:ba:69:44:29:3a:b6:b6:de:d0:
45:4b:d6:b1:06:ea:95:40:72:6d:7c:c5:de:d7:0b:
5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:12:16:91:12:89:44:12:A5:A3:6F:B2:75:5C:3A:94:C9:14:F1
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/TIgSFpESiUQSpaNvsnVcOpTJFPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.76.0/24
81.181.78.0/23
81.181.165.0/24
193.226.92.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f9:44:75:9f:3a:8c:5d:4f:74:d9:50:0c:4d:7c:80:f8:6b:
0b:e1:0b:6c:70:05:db:85:9a:33:2d:7c:f3:bc:35:32:61:dc:
3e:3e:98:69:dd:18:e6:02:1a:9a:3c:aa:d2:6a:d2:1e:97:7e:
f3:e9:8f:db:32:6e:c2:f4:4c:45:9b:fc:55:72:cc:f0:67:92:
4c:79:87:2d:7b:b0:05:51:24:69:03:15:99:26:62:d7:66:79:
e4:70:3e:84:bb:a3:b4:b9:34:fb:cd:1e:7a:1f:eb:a2:45:b4:
64:7e:06:9b:fe:96:99:86:b5:87:b8:61:6b:ee:9c:6e:46:e5:
64:54:ec:02:c0:c6:a5:15:2d:81:7a:5e:66:b9:59:0b:f7:84:
a9:fc:69:ce:3c:16:09:e5:dd:3d:df:20:a2:35:d7:68:f8:97:
65:2b:88:18:51:a5:81:17:80:f8:59:dc:fe:08:04:9e:39:c3:
b2:28:d4:95:8e:dc:d1:f7:d1:b0:39:ea:78:3f:f3:36:cd:39:
f3:ff:f9:36:14:40:fc:c1:fe:17:e3:6f:e3:85:1d:d1:00:85:
44:6e:86:82:a9:3e:64:34:2f:75:56:f9:36:a0:45:17:ff:2d:
64:67:82:b7:c7:bf:d8:7a:b2:a2:41:9a:bd:6d:75:08:1e:51:
57:6d:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org