Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4BAVpdLxFBarG84L6Ng_zu0VSk4.roa
File: 4BAVpdLxFBarG84L6Ng_zu0VSk4.roa (raw, json)
Hash identifier: 5SLkZSi/i8SelO7ZfqZFJFk4Par3ZP3fvhCZ3jYf/jo=
Subject key identifier: E0:10:15:A5:D2:F1:14:16:AB:1B:CE:0B:E8:D8:3F:CE:ED:15:4A:4E
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04E2F89E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4BAVpdLxFBarG84L6Ng_zu0VSk4.roa
Signing time: Tue 24 May 2022 15:37:13 +0000
ROA not before: Tue 24 May 2022 15:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 81.19.131.0/24 maxlen: 32
81.19.136.0/24 maxlen: 32
81.19.139.0/24 maxlen: 32
81.19.134.0/24 maxlen: 32
81.19.140.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81983646 (0x4e2f89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 24 15:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e01015a5d2f11416ab1bce0be8d83fceed154a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:fa:6a:a2:93:99:7c:2f:0f:40:72:06:b7:
9e:64:4c:3d:70:e7:d9:cb:6d:c5:f7:6a:dc:fa:d4:
8b:16:6f:78:e6:63:36:a6:cc:38:ff:31:cc:eb:a9:
b2:44:53:cc:20:05:5b:90:47:07:11:e4:97:bf:5c:
4b:e1:21:7a:92:de:c3:10:30:63:78:96:e4:1f:32:
10:a3:1f:94:0c:4e:50:f9:c0:30:ba:9d:71:a6:46:
3e:7d:91:7b:7f:8c:f7:15:20:b3:5d:03:65:19:e0:
d3:f4:9e:3f:49:9f:62:74:60:95:58:3c:0b:f3:08:
ef:46:6c:9c:05:96:ac:04:14:48:f0:6b:9f:4e:05:
07:18:49:f9:40:c3:a4:4b:b0:c4:e5:dd:47:e2:60:
f9:6f:2b:f8:cf:58:fb:02:4b:5e:96:c2:94:c7:65:
22:db:5a:d3:d5:46:6c:d8:c8:ac:0e:50:d0:4f:c7:
67:1d:76:50:f3:cb:2b:62:fa:ac:15:60:54:a3:8f:
91:e6:4f:a9:f2:b0:5d:55:38:e2:57:0d:94:6a:8d:
40:72:32:f3:1c:51:d5:5f:c8:46:05:3d:68:f6:ff:
ac:8f:52:d5:3f:c0:0c:37:ed:2b:e7:1a:ba:ae:53:
3f:7e:70:9a:be:f2:c2:2f:30:a9:7a:07:19:19:93:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:15:A5:D2:F1:14:16:AB:1B:CE:0B:E8:D8:3F:CE:ED:15:4A:4E
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/4BAVpdLxFBarG84L6Ng_zu0VSk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
81.19.134.0/24
81.19.136.0/24
81.19.139.0-81.19.140.255
Signature Algorithm: sha256WithRSAEncryption
22:0a:e8:4c:ac:f3:8b:33:97:3b:85:24:b9:77:7e:9d:91:c9:
fd:0f:99:7c:42:02:28:8d:6c:d5:81:8a:2d:f8:1a:db:4a:f8:
7b:82:f9:c3:2c:ba:0e:ba:c9:7c:0f:d1:e2:e4:ab:63:43:72:
89:43:dd:86:03:49:b3:3f:06:24:b7:fc:9d:36:4f:57:bd:dd:
6c:38:5b:3c:b3:f9:d1:3c:b8:3b:bb:95:60:16:20:46:75:2d:
1c:ad:77:3b:6f:46:86:86:b4:31:62:4c:94:4f:58:3d:c2:a9:
b0:21:9e:fd:60:7c:6c:e7:5b:33:a5:c3:f9:b7:42:ae:39:7e:
5e:70:77:4d:b9:4d:b5:8a:72:96:d4:4e:5c:8a:3b:b0:b1:44:
dd:5a:87:fe:b6:62:34:a2:8a:be:1e:cc:8a:89:0b:c7:c7:b5:
31:71:a8:5a:cd:ee:9b:0c:c3:05:3f:38:00:ee:d9:16:06:f9:
7d:c3:92:47:99:71:78:8a:23:71:b3:80:d0:bf:a5:e3:a7:90:
3c:a7:fd:47:39:cc:22:ca:65:36:c3:a6:fd:d9:e9:84:18:6d:
88:89:b8:b0:a6:92:86:60:39:68:b1:5e:b5:75:c4:03:36:eb:
fb:30:75:fa:26:fb:b4:41:a0:e8:3b:95:5d:74:cf:27:e8:d8:
8d:00:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org