Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AD1zQN92XHR7pwJYyTMYF4l-Q6A.roa
File: AD1zQN92XHR7pwJYyTMYF4l-Q6A.roa (raw, json)
Hash identifier: AuqQUF+nAG4M7r/1E24thsuxSWygVVLQLvSrU7BFP8w=
Subject key identifier: 00:3D:73:40:DF:76:5C:74:7B:A7:02:58:C9:33:18:17:89:7E:43:A0
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A90AA6F
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AD1zQN92XHR7pwJYyTMYF4l-Q6A.roa
Signing time: Sat 01 Jan 2022 04:52:13 +0000
ROA not before: Sat 01 Jan 2022 04:52:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205034
IP address blocks: 81.15.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982559343 (0x3a90aa6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=003d7340df765c747ba70258c9331817897e43a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:2a:3a:0b:d2:d3:ad:5b:4b:a2:0c:d6:8c:
1a:8c:cf:ea:3d:a1:cc:16:e8:20:f7:88:74:3f:ec:
89:1e:03:af:d3:2f:bc:36:ba:bd:cc:f8:7e:e7:e8:
6a:88:b6:0e:29:7b:f3:01:7e:b7:69:05:6f:16:36:
83:57:9c:8c:7a:93:e8:22:81:7a:ec:ec:ba:a2:b6:
98:25:eb:a2:6e:ab:aa:a4:51:f4:13:4d:28:fd:25:
0f:47:70:71:52:c5:19:bc:06:09:55:7c:43:12:4d:
93:4a:ad:b8:71:11:58:f7:ad:7b:d7:10:f9:e1:f6:
a1:c1:ac:4b:7b:ca:3d:62:fe:05:6e:02:e1:87:e9:
4b:1c:f9:a2:28:2d:68:a4:a2:6d:e4:ce:76:37:ab:
41:f4:2b:5c:88:b9:6a:f3:79:41:ea:eb:24:22:ba:
48:69:ba:87:13:17:ed:62:46:94:8c:59:93:41:c6:
7d:74:a9:f7:21:cf:fd:97:4b:e3:ab:a4:72:08:72:
b4:b7:0f:52:d6:ea:d2:b1:e2:6e:c8:96:db:70:8a:
32:24:f2:89:2c:a3:62:e6:aa:3c:45:91:06:6c:b6:
ba:ee:2f:7b:be:8c:fa:1a:06:59:87:61:51:be:ae:
da:e8:09:99:98:e2:0b:18:cd:4b:e6:c1:6a:83:bb:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3D:73:40:DF:76:5C:74:7B:A7:02:58:C9:33:18:17:89:7E:43:A0
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/AD1zQN92XHR7pwJYyTMYF4l-Q6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.145.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f5:30:fb:f1:b2:ae:34:34:bf:ef:e8:52:f3:5e:8d:f7:ad:
b0:20:6c:2f:e9:84:8f:f9:1d:3d:4e:b7:56:8a:52:00:a9:43:
da:68:0e:f8:8e:f6:7f:1c:7f:15:b2:5c:95:e4:cc:fa:b5:8f:
b0:1c:b0:79:6e:e6:4b:eb:1c:c5:00:04:2a:8a:02:08:1e:04:
aa:1b:56:a2:37:e9:f5:3a:bd:6a:70:f2:37:30:11:58:5a:27:
d4:46:66:65:a6:5d:ff:4d:85:a9:8d:01:db:fc:a0:36:b7:3f:
06:d4:11:39:f3:50:e2:5e:bd:6f:07:87:c8:9c:15:12:d3:b4:
aa:34:ac:71:5a:74:9c:3d:16:6c:b3:75:31:23:01:9b:f8:13:
5b:de:1f:d9:c1:c0:91:ed:7c:d1:31:bb:22:3a:fe:30:29:8f:
00:95:d0:6c:9d:b9:6e:f3:4b:c4:80:0c:fa:8d:9f:82:10:c3:
7d:03:80:25:f7:33:14:bc:e9:0f:a9:75:e0:6b:38:60:08:7f:
67:c6:b3:16:12:f7:62:00:cd:47:f3:e0:e0:a7:47:35:d5:49:
87:8e:64:7e:ff:8a:2b:1a:6f:42:d3:97:70:6f:38:87:0c:ab:
18:76:cb:a4:4c:42:98:62:bb:b8:45:12:14:a4:96:50:fa:2e:
f9:d8:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org