Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1WVphCzzG3YNWlIqMXSNi7tkTBQ.roa
File: 1WVphCzzG3YNWlIqMXSNi7tkTBQ.roa (raw, json)
Hash identifier: N3YALcjFtl+LTNwh6ovP7dyPjoeeYNh7+NyRVy7ZnEg=
Subject key identifier: D5:65:69:84:2C:F3:1B:76:0D:5A:52:2A:31:74:8D:8B:BB:64:4C:14
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01851145EB84CE0EC7CEC749FABA13085DAE
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1WVphCzzG3YNWlIqMXSNi7tkTBQ.roa
Signing time: Wed 14 Dec 2022 15:34:32 +0000
ROA not before: Wed 14 Dec 2022 15:34:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:45:eb:84:ce:0e:c7:ce:c7:49:fa:ba:13:08:5d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 14 15:34:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d56569842cf31b760d5a522a31748d8bbb644c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:3c:19:6b:8b:bd:f7:3a:6b:03:ec:83:37:
48:6b:ff:25:c7:e2:6c:18:60:48:9f:d6:12:e6:9a:
ac:cb:40:2a:a2:ac:0e:67:0f:77:cf:b9:c4:0b:ee:
20:82:2c:f8:f4:4d:d0:2c:a9:6a:01:b2:06:d3:3e:
78:57:f1:9a:a9:de:3f:14:40:f3:5a:45:bf:d3:e7:
18:70:fe:fb:34:f6:d2:a7:6e:0d:fc:73:01:53:e9:
ca:42:49:36:cc:04:00:f9:c2:37:40:a0:e8:8f:49:
9f:3b:db:0e:30:31:40:99:9d:4b:c3:0e:58:53:a9:
93:ec:f9:a4:6d:84:98:d0:b7:60:19:a2:97:e9:f5:
ce:96:8d:69:16:ae:84:72:f1:3f:15:cf:f6:a7:a3:
46:aa:c3:b9:4b:12:ff:a4:77:c8:b7:cf:c6:96:a0:
a5:ba:8a:a5:b4:5b:39:52:07:2a:ff:39:7a:df:ca:
99:78:43:c2:eb:16:61:a2:26:eb:cd:44:fa:c3:82:
10:4f:66:09:ea:8f:0c:dc:61:59:b4:82:8d:50:a8:
f4:8c:82:a1:a5:04:3d:c4:0a:1c:87:4e:28:9d:2e:
a5:fd:3d:56:d7:67:02:e2:de:b2:65:5c:20:51:29:
af:8d:44:8c:be:9e:81:3d:94:c4:80:50:c3:70:5a:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:69:84:2C:F3:1B:76:0D:5A:52:2A:31:74:8D:8B:BB:64:4C:14
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1WVphCzzG3YNWlIqMXSNi7tkTBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b1:b8:09:32:7b:01:63:13:43:a0:cd:ba:89:07:97:a4:b1:
6d:48:2c:e3:c3:e6:5f:44:eb:49:df:6f:b0:c4:65:74:d9:e2:
a2:aa:53:c9:bd:92:81:e4:43:54:be:89:ac:5b:24:47:bd:ff:
b4:5d:56:f3:fc:c7:c4:94:fc:13:40:22:75:5e:50:14:fe:f4:
6e:ce:e3:29:5e:79:af:fa:a1:92:45:57:72:cf:f7:fd:56:d7:
95:f0:fa:5a:0f:3e:18:98:6b:1a:fa:f6:c9:5c:fd:cd:c7:8f:
25:96:5c:03:0a:06:e1:52:c5:59:e4:5b:c2:74:47:1a:ca:39:
3a:69:f9:99:e5:6d:61:79:67:41:44:d2:95:06:ec:cc:b5:12:
c4:b7:8b:91:95:6d:0a:41:8f:8a:2e:80:50:c1:d9:f1:73:72:
52:3e:c5:93:d0:9c:aa:30:2b:27:07:57:98:21:b2:1b:cf:e0:
22:a0:2a:5e:59:bf:c7:d2:ea:c7:ad:e0:22:d9:96:b8:8d:48:
5c:9c:80:88:6c:44:98:c7:fb:1d:34:f5:83:1e:28:f7:dc:46:
f2:7c:2c:e3:c7:26:9f:ac:b1:2c:10:fc:81:ca:94:a9:b2:98:
4b:65:0b:84:66:5c:6d:a8:2d:b3:71:07:d4:ce:08:75:1c:8e:
73:60:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org