Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/ojhIOodlKzXbMWUw_MJOjHEjK3E.roa
File: ojhIOodlKzXbMWUw_MJOjHEjK3E.roa (raw, json)
Hash identifier: fILuepWHenAmaz/DWLg7En8Qcyt2gD8gVKihJSIjEYc=
Subject key identifier: A2:38:48:3A:87:65:2B:35:DB:31:65:30:FC:C2:4E:8C:71:23:2B:71
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01827E02FF0E49DA2A03266F6C7DCCB073B4
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/ojhIOodlKzXbMWUw_MJOjHEjK3E.roa
Signing time: Mon 08 Aug 2022 15:11:41 +0000
ROA not before: Mon 08 Aug 2022 15:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.199.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:02:ff:0e:49:da:2a:03:26:6f:6c:7d:cc:b0:73:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 8 15:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a238483a87652b35db316530fcc24e8c71232b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:43:82:67:ab:24:64:7f:3d:2d:06:c3:42:
8a:e8:75:dd:de:43:6f:83:67:2a:ff:56:1f:af:49:
7f:b9:96:97:ea:c5:3c:d7:37:f6:ff:27:95:c1:de:
eb:ef:0f:b5:a7:ab:34:97:a5:bc:fa:f3:a4:6a:ff:
ea:61:15:8d:a1:5c:ba:b0:5e:c7:3c:32:55:f9:8d:
54:46:73:03:66:67:8b:c1:f2:60:c0:0b:18:39:f6:
d6:78:13:23:1c:91:be:f6:48:6d:24:8c:a6:b3:ab:
64:7f:cf:8f:c7:45:75:62:8f:ba:ad:9e:57:85:2b:
79:73:a9:a7:a9:11:3a:e2:a2:ed:16:fe:72:ef:d7:
68:c2:48:fc:76:a6:12:9c:35:40:05:8d:4f:7c:9f:
71:a3:f8:7f:39:c7:45:eb:2b:e4:d1:49:11:0f:c5:
ac:6b:aa:a3:08:49:0b:5a:40:c2:bc:83:54:69:83:
2d:e9:68:4e:e7:23:e0:78:aa:13:7a:eb:be:ba:d1:
e3:f1:cd:03:4b:b3:89:0e:8a:e7:98:33:cc:51:7c:
29:f8:93:bd:f5:73:a5:00:e7:b1:c2:4f:93:fb:1d:
3a:22:e6:c8:e9:03:31:62:42:d8:9f:a6:f2:a6:12:
d8:e6:b7:23:36:9b:9e:bc:b1:39:38:95:0e:11:da:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:48:3A:87:65:2B:35:DB:31:65:30:FC:C2:4E:8C:71:23:2B:71
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/ojhIOodlKzXbMWUw_MJOjHEjK3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bb:b6:b8:27:34:f4:40:a9:49:9a:9f:b1:aa:7b:c2:91:7e:
ba:61:c4:76:74:80:64:2c:23:69:84:37:a2:01:3c:05:3c:e8:
4c:cb:5c:02:d1:18:d6:6b:16:a9:5d:ae:93:c4:b2:4c:12:2b:
9a:11:b2:c8:68:70:b4:b4:f5:8f:3e:16:42:43:e2:2b:41:07:
27:20:7e:37:44:e1:e1:6f:aa:c2:b9:f4:56:2d:8d:7b:57:8b:
a1:ee:61:94:20:6e:04:e5:ab:5e:22:e6:18:86:ce:ad:20:4f:
9a:0b:af:12:db:9c:92:40:be:88:b7:52:98:29:a5:ad:01:6a:
c0:01:f8:43:f4:84:0d:71:34:2f:b1:d2:ea:66:19:d1:f8:0b:
c7:1c:8a:96:95:9a:11:0e:ec:48:f4:50:fc:a0:a1:d2:b3:33:
e7:42:a4:f1:cd:f8:5c:db:83:f7:c2:49:90:7b:4f:f2:43:33:
a7:f2:13:d1:15:31:8c:02:8d:37:6b:d6:53:aa:c9:15:6a:80:
07:27:55:21:67:64:c2:1f:43:fe:06:c5:c2:a4:d2:39:01:74:
07:3b:db:bb:a9:83:a7:2e:9e:31:28:85:ec:4c:70:b7:53:60:
86:45:c6:09:f5:4b:83:6f:51:ec:42:84:95:e8:47:bc:b4:fa:
1e:4b:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org