Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7jhrGzi7ZAe4grFmcn-bTFVshM.roa
File: n7jhrGzi7ZAe4grFmcn-bTFVshM.roa (raw, json)
Hash identifier: BiZjkUXMYmLinp3sebkcBNB/B4ZoMQmO4kp+y+vZz+U=
Subject key identifier: 9F:B8:E1:AC:6C:E2:ED:90:1E:E2:0A:C5:99:C9:FE:6D:31:55:B2:13
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 02195A02
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7jhrGzi7ZAe4grFmcn-bTFVshM.roa
Signing time: Sat 01 Jan 2022 05:58:33 +0000
ROA not before: Sat 01 Jan 2022 05:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60506
IP address blocks: 81.199.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35215874 (0x2195a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 1 05:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fb8e1ac6ce2ed901ee20ac599c9fe6d3155b213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:02:15:f1:99:31:a3:de:f7:e0:50:64:17:
ac:1a:40:3b:39:fe:94:85:55:80:7f:ba:20:ce:a4:
86:59:ca:df:fc:5f:42:22:82:d7:ba:16:d3:81:ff:
5e:5d:cb:c2:16:77:23:ee:c7:e0:22:1f:9b:a4:a7:
2c:f5:1b:ca:24:15:a8:e4:df:0f:13:dc:35:9f:f3:
57:d3:62:d0:fb:9c:66:9b:48:75:99:5e:ec:86:d0:
02:d6:e3:38:71:ac:8a:74:84:54:65:ee:8c:10:9e:
0a:0f:12:46:ab:21:79:c8:db:99:88:54:e4:95:b3:
bb:7c:bc:b1:4e:6c:7c:40:f6:c4:51:16:0e:a0:63:
8f:e5:9c:3a:51:dd:46:1d:0d:29:3f:88:45:cb:23:
c6:3a:d7:18:fb:1e:6f:a0:ae:ff:ee:63:f4:e5:c3:
a3:47:b8:98:52:63:6d:2a:5d:37:99:ed:e1:de:92:
45:8a:18:08:ab:27:6a:15:79:52:09:a8:35:5a:df:
ac:b8:1e:b6:00:70:83:72:ef:8e:17:05:26:ca:8a:
1f:e1:7c:7a:e7:c2:13:80:3f:4e:91:19:86:38:82:
32:a7:e2:3a:f3:e0:06:14:49:59:cd:1a:b5:84:f0:
d9:43:01:e7:86:90:3d:21:dc:f6:cf:eb:11:cc:51:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:E1:AC:6C:E2:ED:90:1E:E2:0A:C5:99:C9:FE:6D:31:55:B2:13
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n7jhrGzi7ZAe4grFmcn-bTFVshM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.24.0/21
Signature Algorithm: sha256WithRSAEncryption
97:f5:17:18:25:35:4b:de:fc:18:71:bb:af:7c:8a:8a:82:f9:
9f:ba:d0:00:d8:bc:76:8e:49:dd:95:19:d0:08:cd:ce:cd:38:
60:4c:5d:64:4d:e8:29:e6:ad:7e:cc:fa:ac:fc:92:ab:d6:4a:
3d:9f:c4:29:b6:99:61:0b:3a:15:d4:10:a9:4a:ec:e9:a9:7b:
70:bb:28:7e:3d:e4:f3:6a:39:2b:4e:f6:e6:68:e1:45:62:f1:
a2:3b:1b:60:54:fd:a9:01:8a:87:a9:27:00:0b:49:f0:d6:64:
97:58:dc:1d:d1:47:c8:8c:f4:c3:e6:22:40:17:d9:b2:13:03:
c0:c3:df:4c:d5:75:a0:a4:88:fe:53:87:08:26:28:45:77:1a:
b3:44:d9:72:20:5c:cf:4e:0b:5a:5a:c6:4b:cb:cf:df:a8:db:
56:79:34:b7:1c:6f:f7:40:b6:2d:1e:0f:43:a0:81:55:13:96:
87:16:76:81:53:50:96:d5:6a:c1:b6:4c:6a:d1:34:fb:aa:5d:
24:26:e0:63:be:e4:62:16:61:fc:dc:2b:fd:59:bc:e5:23:40:
36:77:00:78:81:75:a7:1d:2c:a2:61:2f:d4:fd:42:94:97:51:
97:9a:ca:00:83:5c:a6:5d:9f:39:bb:d6:d8:78:6d:17:1d:24:
b8:0a:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org