Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/4HGA_XrF1vxQprWoJtp1FGaJHcA.roa
File: 4HGA_XrF1vxQprWoJtp1FGaJHcA.roa (raw, json)
Hash identifier: r4IEtb5T8OEpwOAuf8nHSouQioS6bo87X0DMtzjkSys=
Subject key identifier: E0:71:80:FD:7A:C5:D6:FC:50:A6:B5:A8:26:DA:75:14:66:89:1D:C0
Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Certificate serial: 3529D413
Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/4HGA_XrF1vxQprWoJtp1FGaJHcA.roa
Signing time: Sat 01 Jan 2022 04:51:38 +0000
ROA not before: Sat 01 Jan 2022 04:51:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15589
IP address blocks: 81.200.130.0/23 maxlen: 23
81.200.132.0/22 maxlen: 22
81.200.136.0/22 maxlen: 22
81.200.136.0/23 maxlen: 23
81.200.139.0/24 maxlen: 24
81.200.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891933715 (0x3529d413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f
Validity
Not Before: Jan 1 04:51:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07180fd7ac5d6fc50a6b5a826da751466891dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5a:14:4d:d5:61:67:99:f4:78:ee:d3:84:47:
1c:1c:ab:10:84:32:8e:7c:83:5b:7b:5d:9e:f0:18:
3b:bf:78:97:b4:8a:bf:fd:9a:0e:84:63:e8:49:e8:
ea:61:1b:9d:0c:74:23:35:8b:4c:84:13:0c:96:37:
04:6f:e4:51:82:67:94:33:e5:81:d5:e5:3a:cd:1f:
fb:06:4a:10:df:5c:d6:f4:53:1c:5e:a4:5e:8b:01:
61:87:36:39:d4:42:5d:5a:0f:cf:bc:5a:b3:7e:5c:
b8:f2:3c:04:b4:ce:ed:ea:9c:6b:9d:16:75:18:54:
89:db:8d:7b:35:83:f6:53:9f:e1:85:a9:4b:fd:ce:
09:ea:e3:cb:20:2e:3d:41:9b:f6:98:ab:b5:06:6f:
1c:bc:65:3c:10:cf:eb:3a:b6:60:51:a3:3e:fe:3b:
56:fc:b2:5d:8e:e8:77:07:b1:df:82:a1:d5:f3:f6:
04:f5:bf:b4:82:f7:75:91:d2:1a:bd:7c:f2:61:a7:
3d:94:bd:1b:10:c1:62:37:ab:d8:f1:a6:49:71:0d:
ff:89:df:50:92:4d:d8:ce:6d:19:83:fc:16:78:d9:
19:39:54:3c:3f:e7:d4:48:af:d8:67:ad:78:1a:20:
83:a0:2b:26:4d:cf:56:42:f8:bb:07:bb:2c:f0:64:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:80:FD:7A:C5:D6:FC:50:A6:B5:A8:26:DA:75:14:66:89:1D:C0
X509v3 Authority Key Identifier:
keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/4HGA_XrF1vxQprWoJtp1FGaJHcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.200.130.0-81.200.139.255
Signature Algorithm: sha256WithRSAEncryption
09:35:d6:66:2a:9d:00:f7:a6:1c:2d:01:d3:69:2c:45:3a:38:
ba:ef:5c:a2:91:9b:a8:c8:90:3e:4d:0c:97:50:34:b3:59:bd:
14:4a:aa:86:98:56:ac:c0:77:19:f2:5b:e3:c2:e8:6a:6f:a7:
71:c0:26:ac:0f:45:e9:4a:7b:3b:c9:c2:bb:0a:6f:0a:cb:75:
92:1a:23:2f:79:c3:4a:83:c3:3d:84:0e:fc:a3:90:3a:cc:8a:
f9:95:4d:9f:75:7f:9a:44:0f:d4:eb:3e:42:0f:64:36:3a:05:
59:ad:0e:d2:83:3a:71:e9:cd:79:07:a9:18:6a:fc:e6:32:90:
fc:52:e7:50:3a:c8:68:00:5c:cc:5e:5a:f5:51:96:77:23:7a:
b9:ea:a9:84:83:3d:1c:72:86:0e:aa:34:ce:dd:39:92:a3:ea:
84:f5:f5:0b:7a:9c:dd:81:ab:c8:15:3b:18:a9:2a:0a:07:ff:
6f:dd:64:c5:49:c3:7f:6e:e2:eb:46:91:2f:ef:4d:be:6f:de:
26:c5:13:2b:26:17:38:19:11:5d:4d:1e:0e:72:c6:21:60:87:
e1:4c:8d:19:7a:96:db:9c:c1:9a:59:5c:d9:e3:0e:6d:8a:af:
51:f7:62:e7:1d:2b:88:42:ef:da:ae:85:20:9b:c5:b1:a2:a7:
25:76:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:16 2024 by rpki-client on console-ams.rpki-client.org