Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa
File: rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa (raw, json)
Hash identifier: eohwTbpPKbO8gqnccuLkfKmfWtSAYQnC0jb3oyGamZI=
Subject key identifier: AE:75:7A:C7:FD:1D:63:E0:6D:9D:57:52:EC:A7:E7:9C:7A:98:02:A6
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 1055927C
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa
Signing time: Sat 01 Jan 2022 09:54:25 +0000
ROA not before: Sat 01 Jan 2022 09:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 81.90.143.0/24 maxlen: 24
2a00:e27:143::/48 maxlen: 48
2a00:e20:150::/44 maxlen: 48
2a00:e20:143::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274043516 (0x1055927c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Jan 1 09:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae757ac7fd1d63e06d9d5752eca7e79c7a9802a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3d:11:84:d7:52:07:80:df:9a:80:0e:d3:da:
70:f2:bd:e9:04:0b:1e:1d:6d:be:40:86:c7:a2:c4:
4f:11:83:ff:4a:be:c3:b3:29:08:15:09:dd:23:91:
5b:8a:f3:93:f3:08:48:49:cb:19:49:d2:54:0a:5f:
c4:27:85:4e:38:de:e6:93:25:5c:30:a3:bb:48:c1:
69:55:47:f7:e3:e7:2b:f4:ab:50:0a:55:7e:80:b3:
32:11:f1:6c:b8:e8:3c:fd:96:69:c1:ab:43:ad:4f:
53:48:5b:3c:3b:91:fb:54:45:59:14:7f:57:a1:da:
c6:b4:e0:cb:3f:76:04:fc:ee:09:fa:50:6b:c6:fc:
07:6c:0d:ce:d1:d1:42:93:32:0f:96:71:78:14:f8:
68:91:7b:53:aa:8d:65:96:a0:2b:5f:3a:d6:22:60:
25:f5:7a:51:98:52:b0:c7:30:dd:80:3c:55:f1:e1:
d2:85:54:4f:fe:cf:a2:7e:6b:eb:16:10:4b:63:86:
60:6a:7e:d0:81:15:38:d6:7c:12:dc:bf:3e:a1:79:
dd:7f:17:24:49:0e:5a:42:c0:0d:a8:d0:f3:24:31:
c7:77:95:41:66:28:9f:8b:9f:5f:4a:1d:35:af:9e:
36:d0:a3:b7:49:64:8e:23:f5:d3:68:d5:74:1c:c2:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:7A:C7:FD:1D:63:E0:6D:9D:57:52:EC:A7:E7:9C:7A:98:02:A6
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.143.0/24
IPv6:
2a00:e20:143::/48
2a00:e20:150::/44
2a00:e27:143::/48
Signature Algorithm: sha256WithRSAEncryption
60:64:39:ed:ab:f1:fc:45:fe:75:ee:79:e7:b1:d2:06:2f:42:
32:48:59:7d:5c:a0:d7:73:a3:90:2f:2c:b7:a2:30:d0:c9:9b:
c3:5d:da:aa:cc:d3:a6:57:db:da:dc:2e:f3:f0:56:74:74:be:
87:85:06:67:d0:71:01:53:7c:0c:f1:73:45:8f:7d:82:74:47:
90:7b:b5:ba:cd:75:f9:72:ae:00:90:a7:19:6e:12:39:04:01:
d8:db:d2:a4:b8:78:d2:c5:9f:c5:a1:49:0f:0f:bb:6a:a6:78:
f5:d9:a8:f2:06:45:cc:dd:90:31:42:98:60:41:8a:25:af:ed:
58:6a:99:3b:37:b5:52:57:d7:d2:0c:e8:6b:16:70:ce:e9:10:
59:1c:1c:7b:b0:f3:2d:30:22:a6:84:12:75:57:0c:f4:eb:23:
47:92:3b:cc:57:6b:63:4b:48:36:3e:50:b2:be:e3:46:8c:1e:
3e:5e:ba:70:9d:45:1a:c2:cc:cb:55:da:89:50:24:49:71:a3:
d3:98:cf:dd:86:5e:05:11:42:a9:df:e2:27:6f:76:31:dd:dc:
76:0b:0d:32:53:a1:7d:9b:95:83:59:95:57:b0:4b:66:5a:a1:
55:6f:0c:3b:89:4a:b1:e2:e2:58:2b:55:4a:9a:30:5c:dd:ed:
d6:b5:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org