Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JOciIjWZXsbeiuYvAt73LcD9bVM.roa
File: JOciIjWZXsbeiuYvAt73LcD9bVM.roa (raw, json)
Hash identifier: S+BkxFRjjUL64YWwyNXOVLbH5b8U8c2hGCp4hJ6iIJ0=
Subject key identifier: 24:E7:22:22:35:99:5E:C6:DE:8A:E6:2F:02:DE:F7:2D:C0:FD:6D:53
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01827EAC61DFA6254000E90BD3CD677026A9
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JOciIjWZXsbeiuYvAt73LcD9bVM.roa
Signing time: Mon 08 Aug 2022 18:16:42 +0000
ROA not before: Mon 08 Aug 2022 18:16:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:ac:61:df:a6:25:40:00:e9:0b:d3:cd:67:70:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 8 18:16:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24e7222235995ec6de8ae62f02def72dc0fd6d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:ad:f3:91:64:0f:7e:42:9c:c2:dc:34:e3:
0b:d3:68:a3:1d:63:9e:b1:5e:40:8b:f1:1b:ef:64:
93:2e:27:97:76:1d:b4:c6:49:0d:57:0b:e1:ed:58:
9a:9b:29:41:eb:4f:cd:2f:a5:6e:44:6d:b0:e2:e6:
b2:8e:17:9b:fc:f3:89:e6:a3:d7:34:5a:6a:99:6a:
76:1b:ce:69:47:53:37:cf:85:f2:f3:8f:5a:6d:63:
db:8a:37:cb:83:ec:95:b0:c5:dc:f8:9c:72:1f:56:
68:17:c8:25:6e:62:55:87:d9:99:0c:c8:69:4a:85:
f4:75:e6:03:e4:a0:18:66:d8:4f:57:1a:2c:ba:ad:
7a:6b:6e:ac:48:a7:27:3f:b8:4a:2c:07:14:1a:f3:
f7:0b:b5:37:bf:3c:fb:3b:75:e1:df:4c:68:0f:ae:
8b:d7:d7:27:7b:8f:05:fd:0a:1f:b7:67:dd:ce:08:
f8:e4:9f:8b:de:22:15:20:8a:12:03:42:7e:01:10:
b8:7b:42:f7:9d:3a:d9:21:d2:80:86:63:af:e5:d2:
e5:ee:59:1d:2b:1a:34:40:dc:09:bf:6c:60:bd:73:
36:f1:f5:b9:b7:e9:f2:f9:f6:90:db:1a:f1:ca:12:
8e:0c:f1:bb:0c:ff:d1:41:f9:63:78:8b:5f:8f:37:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E7:22:22:35:99:5E:C6:DE:8A:E6:2F:02:DE:F7:2D:C0:FD:6D:53
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/JOciIjWZXsbeiuYvAt73LcD9bVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:86:6c:87:3e:c2:db:07:b5:00:72:8f:40:59:ff:ee:67:f6:
05:f8:b1:9e:08:d1:a8:e0:42:d8:39:3f:14:24:5f:a2:05:0c:
f1:42:02:08:3b:cb:87:f9:e7:66:78:d9:4e:6d:be:d3:91:e1:
5f:52:6a:24:2c:7d:99:df:0b:f0:6d:84:28:80:68:f7:c8:e1:
4f:dc:11:3e:7c:64:9d:15:56:7f:82:fe:ca:c9:d9:a1:24:e7:
eb:2d:de:d7:15:f5:c7:30:5d:02:58:1b:ca:57:85:79:ee:64:
17:8d:6e:d3:06:0e:ea:ec:1c:5d:b1:68:e1:8e:d0:c6:03:f8:
29:22:e2:09:40:f4:4c:2b:c8:fe:0c:e3:5b:9b:44:22:2c:63:
ec:53:ad:f0:ed:80:4a:13:84:6f:60:82:b7:e6:f9:48:6a:76:
ad:52:10:81:a4:46:8e:fc:65:02:00:ea:e5:dc:5b:f2:be:7b:
de:11:5b:7a:85:84:fe:da:72:6d:0f:fb:2e:f9:fc:08:d4:84:
79:52:b6:ed:da:33:57:d3:f7:b9:8b:d7:e9:84:08:b0:52:11:
bb:cc:45:d2:44:76:b5:e2:71:09:14:cc:59:72:4a:b2:3f:bd:
f1:fb:b8:01:fa:53:2b:7e:6a:10:0c:90:b3:c8:e4:bc:ea:c6:
e9:45:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org