Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/nz9giLGF7e1VyExokKRIeTYT3Fc.roa
File: nz9giLGF7e1VyExokKRIeTYT3Fc.roa (raw, json)
Hash identifier: OMON/PUSxHFsQIKrfOXV8MA6WQ/SizNtmCK2x7OkQjo=
Subject key identifier: 9F:3F:60:88:B1:85:ED:ED:55:C8:4C:68:90:A4:48:79:36:13:DC:57
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 04F10F1E
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/nz9giLGF7e1VyExokKRIeTYT3Fc.roa
Signing time: Fri 27 May 2022 10:20:14 +0000
ROA not before: Fri 27 May 2022 10:20:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 81.19.131.0/24 maxlen: 32
81.19.139.0/24 maxlen: 32
81.19.134.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82906910 (0x4f10f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: May 27 10:20:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f3f6088b185eded55c84c6890a448793613dc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:84:5a:71:4f:6e:a6:7d:22:bc:f5:86:c1:16:
03:24:7e:d0:93:bd:78:1a:eb:df:cc:47:58:88:f1:
9d:d0:c2:b0:c0:7a:a0:29:03:e8:de:a5:60:09:b9:
26:ee:9a:a5:23:00:03:3a:5b:96:3e:a7:f4:47:c1:
11:77:67:c1:e7:b3:c6:51:af:c6:ae:86:68:63:10:
85:6b:24:37:f6:45:23:36:8f:72:79:15:d5:f5:e3:
85:a3:25:44:f9:31:6b:33:dc:0e:a5:2c:27:9d:7a:
6a:24:76:f2:77:5d:7f:a2:b7:04:11:ef:5e:15:d3:
b0:ee:e9:3b:d4:78:de:83:32:7c:0c:76:d7:ee:58:
9b:b2:44:66:f0:a6:b2:af:28:f0:a5:ae:5b:eb:03:
c2:bc:0b:63:62:d4:8c:da:17:6d:5b:c1:e6:dc:ae:
dc:d3:e9:40:b0:ed:2c:0e:03:df:05:a3:c3:54:31:
e8:98:50:57:b6:52:2b:31:04:71:1d:20:41:81:50:
9d:92:b3:0c:a8:15:a6:61:5b:f5:54:96:82:82:2c:
2c:78:e5:f4:92:1a:b7:d9:0e:6b:75:26:eb:1a:28:
1f:dc:55:a6:b4:15:d7:a6:23:58:ef:67:1e:66:4f:
fe:c9:84:7c:a4:c6:0a:d1:d8:b1:b9:40:4b:6e:08:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:60:88:B1:85:ED:ED:55:C8:4C:68:90:A4:48:79:36:13:DC:57
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/nz9giLGF7e1VyExokKRIeTYT3Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.131.0/24
81.19.134.0/24
81.19.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:88:3c:9b:7b:fa:6b:66:f9:6e:9c:b2:08:5c:8a:d6:f4:28:
9d:7f:a0:a3:06:52:89:44:96:1b:ca:8c:d2:10:e5:d7:6d:a4:
23:33:da:2a:23:91:4b:34:b3:e3:9e:f0:5e:e7:4a:ef:10:5c:
d6:ea:4e:69:f6:61:f3:a9:da:7b:3a:24:3e:62:86:0e:b0:71:
cc:a5:28:62:0a:2d:cd:f9:63:7c:8f:a0:72:48:19:98:57:7a:
57:25:11:c8:b0:fe:34:83:33:6a:46:ce:0c:83:43:ad:03:90:
bd:40:b1:3a:cb:32:3d:7b:2d:38:32:09:47:78:1d:c8:90:4b:
21:34:a3:b9:67:3e:56:d2:5a:51:c2:c7:97:35:3a:77:e1:29:
09:64:fc:ac:a5:21:87:12:fe:66:b5:df:aa:f3:5f:e2:80:4a:
5f:de:e3:a2:3c:54:a2:f8:14:86:eb:0b:dd:35:95:dd:86:e6:
a1:43:e0:60:54:1f:6c:8e:66:8a:a3:ba:7d:64:ac:0b:1d:0d:
18:a8:13:0c:e8:88:b9:b5:2e:4e:fc:0e:c3:90:f0:13:de:2f:
ce:dc:18:60:d6:f4:d3:c9:c7:8d:5f:28:83:f2:eb:b7:c5:32:
56:30:c7:af:16:ad:39:ff:c8:d1:66:a0:9a:94:37:cc:2d:22:
cf:3d:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org