Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KPQWNWtzww8hs71J7i2R4PXnCIo.roa
File: KPQWNWtzww8hs71J7i2R4PXnCIo.roa (raw, json)
Hash identifier: TQ/8rwk0WuO2yapvr2bJCbaW1PcBAVbgwl3qq48L2Dk=
Subject key identifier: 28:F4:16:35:6B:73:C3:0F:21:B3:BD:49:EE:2D:91:E0:F5:E7:08:8A
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 043234EC
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KPQWNWtzww8hs71J7i2R4PXnCIo.roa
Signing time: Thu 10 Mar 2022 08:32:49 +0000
ROA not before: Thu 10 Mar 2022 08:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 81.19.131.0/24 maxlen: 32
81.19.135.0/24 maxlen: 32
81.19.134.0/24 maxlen: 32
81.19.140.0/24 maxlen: 32
81.19.141.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70399212 (0x43234ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Mar 10 08:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28f416356b73c30f21b3bd49ee2d91e0f5e7088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f7:b4:09:55:af:0b:6c:02:97:22:54:b2:cb:
c3:0b:71:7b:56:d3:de:c2:ca:68:80:09:7d:65:a8:
3e:59:e8:c5:f1:46:e1:85:d1:fe:71:29:4d:0c:f0:
91:fe:08:3c:8c:fd:4f:f2:00:43:c8:c0:4a:6e:a6:
60:25:02:97:c3:7a:ee:3d:ab:92:00:d8:6a:e9:b2:
b8:8f:da:aa:9d:4a:04:3c:9f:0d:01:68:01:85:f3:
76:ff:41:5c:d2:26:9d:a9:79:9d:fe:88:fa:90:47:
66:70:9b:22:64:dc:6b:e2:b9:1e:bf:eb:1d:4b:7e:
21:2f:f6:e9:55:3a:28:ea:8a:68:18:9a:07:91:95:
fd:7b:53:78:43:ea:a6:a8:ce:c7:49:24:bd:f6:03:
cf:ad:38:a5:e2:57:42:d5:69:8f:c9:19:40:15:0f:
c9:9f:d7:7c:e8:c7:90:cb:72:4c:42:82:e2:85:ed:
58:4d:65:49:36:b7:a8:b6:97:05:35:85:33:da:c1:
5c:d3:22:e3:fa:4d:ba:7e:f6:33:e6:c0:4e:66:91:
7e:7e:c4:25:b7:ce:96:56:01:6c:9a:ff:75:38:46:
0e:43:e8:94:a0:8b:e7:07:7a:2c:c8:ff:df:56:94:
ab:ab:11:d5:15:be:39:3e:29:9f:5f:1c:7e:95:6e:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:16:35:6B:73:C3:0F:21:B3:BD:49:EE:2D:91:E0:F5:E7:08:8A
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/KPQWNWtzww8hs71J7i2R4PXnCIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
81.19.134.0/23
81.19.140.0/23
Signature Algorithm: sha256WithRSAEncryption
86:4a:3a:ac:e7:eb:8f:0d:a2:9f:77:f8:e7:4c:69:d6:40:16:
28:0a:da:16:f6:25:17:fa:a1:de:e2:49:30:82:f1:dc:56:29:
1e:c1:77:3c:1b:13:39:25:75:0f:a2:97:ff:94:18:df:8d:73:
2f:37:f0:04:81:7e:e0:50:bb:ac:ac:71:4e:a9:0a:22:c2:af:
4b:42:c5:f5:37:fe:d8:af:f5:d3:0d:28:ca:08:a3:ae:16:97:
d2:22:a7:0f:ee:33:61:35:93:be:fb:7f:b3:a7:0b:5c:72:92:
c1:c3:d7:48:37:ab:98:e5:8d:eb:28:32:40:cf:84:ac:fd:a6:
ee:5f:66:84:3c:63:27:78:bf:c5:bc:0d:67:29:85:2c:93:b9:
e5:ec:14:b0:6e:7f:43:fb:48:5a:66:dc:cf:95:b0:d0:ed:51:
dd:de:a9:0e:a3:8b:2d:c2:74:1e:28:85:8a:f2:0c:71:9d:5e:
f0:42:98:34:ae:45:e3:5f:08:41:05:e6:22:1c:59:72:a7:d2:
73:26:f0:cc:47:9a:b4:a8:2e:36:a5:b2:e3:46:0a:6a:c6:89:
45:99:26:4d:88:62:11:30:37:f6:b4:c1:d5:5b:4d:11:a3:b4:
11:5b:56:b7:76:71:e0:e9:bc:e9:23:eb:28:35:61:43:60:fc:
ee:cd:1c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org