Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/V8j22UwbyBYCZ_C5gFIsPc8lSp4.roa
File: V8j22UwbyBYCZ_C5gFIsPc8lSp4.roa (raw, json)
Hash identifier: 2WJSjU8fkE6ZiNefa60T3uH8ANKtww0od47lo+VFcMs=
Subject key identifier: 57:C8:F6:D9:4C:1B:C8:16:02:67:F0:B9:80:52:2C:3D:CF:25:4A:9E
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 32BD889B
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/V8j22UwbyBYCZ_C5gFIsPc8lSp4.roa
Signing time: Sat 01 Jan 2022 16:07:30 +0000
ROA not before: Sat 01 Jan 2022 16:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60507
IP address blocks: 81.94.220.0/23 maxlen: 24
81.94.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851282075 (0x32bd889b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 1 16:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57c8f6d94c1bc8160267f0b980522c3dcf254a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:d1:8e:2f:ca:9a:75:b9:c1:2e:0b:68:a9:
8e:dc:e4:56:86:e1:01:7d:6b:03:55:5a:46:3b:7c:
29:da:b9:b4:a9:f5:e5:01:35:9b:26:ca:e3:fb:83:
59:88:ec:34:56:a4:8d:65:20:15:c4:a4:71:d5:79:
b2:a3:13:32:c8:96:aa:bb:8f:c5:f6:f9:c2:12:0b:
34:e9:9b:78:59:af:8b:5e:c0:be:0f:1b:ff:a0:3d:
da:0e:6e:b7:35:7b:7c:c5:c3:34:7e:db:14:38:2e:
94:8c:4b:44:e8:66:e1:50:bc:6b:70:de:54:6c:6b:
09:22:a1:eb:44:7c:c0:17:f1:5c:05:ec:6d:ad:0b:
ad:fa:ac:9f:97:53:b2:14:fe:61:94:50:7a:91:8b:
58:98:ad:67:b0:f2:dd:78:74:7b:6a:9a:f7:cd:e8:
7c:d8:37:9d:1d:71:c3:d9:da:5b:d9:aa:e0:23:2d:
58:16:71:92:e0:a2:76:2a:df:20:37:6c:9c:24:71:
a6:32:81:12:0a:69:1f:94:3f:ee:67:22:7c:3b:1b:
09:b5:21:7a:43:59:85:a7:1c:c3:31:d3:49:f4:b5:
d5:af:ab:63:f2:38:dd:1d:a4:c7:a9:e9:ec:dd:c1:
37:a2:9a:e2:37:57:2a:7d:35:ce:5c:42:6a:b6:62:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:F6:D9:4C:1B:C8:16:02:67:F0:B9:80:52:2C:3D:CF:25:4A:9E
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/V8j22UwbyBYCZ_C5gFIsPc8lSp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.220.0/23
81.94.223.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8d:ba:34:df:b4:2b:66:a6:7a:c5:46:2f:b7:79:4a:82:2d:
2b:ae:be:57:fc:27:22:04:4e:d4:05:8e:3c:72:7c:c9:0a:39:
86:f5:58:bf:d5:2e:3d:96:4e:65:21:22:8c:23:76:68:e7:fc:
d3:75:76:45:f2:d9:34:12:02:29:c1:71:ec:2f:e0:f3:32:b3:
a6:b2:2c:a1:31:ef:e7:f9:2b:8c:c8:07:5b:39:b5:70:0c:de:
1a:89:80:a1:16:29:c5:28:d1:91:8e:73:4a:8f:8a:b8:0d:bf:
bc:ca:9b:e0:fb:9a:02:52:13:e6:a6:bf:e8:38:51:98:1f:ab:
c8:bb:16:18:87:17:cc:5f:c0:59:a0:b3:d3:b4:4e:10:cd:96:
b0:86:15:24:09:75:f7:af:6c:58:f0:cb:53:eb:08:be:56:82:
eb:ab:37:93:5f:b3:40:05:5f:a1:5a:fa:6a:26:c1:62:0c:51:
3f:da:b8:91:ca:de:f8:12:96:1d:34:30:5a:2e:bc:1a:cd:ea:
9f:73:85:29:ce:05:6d:df:8d:7a:fe:7f:09:87:96:48:3a:91:
1b:95:2e:db:45:a9:22:54:f2:bc:2c:9a:53:70:8a:bf:88:a4:
19:66:b0:97:65:ce:3c:b1:96:45:01:c2:d0:3d:67:77:b2:d9:
91:74:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:54 2025 by rpki-client