Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iZQ1Nl7_E_Bgx2-2rp-G9ENxUdQ.roa
File: iZQ1Nl7_E_Bgx2-2rp-G9ENxUdQ.roa (raw, json)
Hash identifier: tpUmMkUKO/QlDNGYTFs8bjD5NBq4UfYEWy4mpHn/AVk=
Subject key identifier: 89:94:35:36:5E:FF:13:F0:60:C7:6F:B6:AE:9F:86:F4:43:71:51:D4
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A74328C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iZQ1Nl7_E_Bgx2-2rp-G9ENxUdQ.roa
Signing time: Sat 01 Jan 2022 04:51:55 +0000
ROA not before: Sat 01 Jan 2022 04:51:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43769
IP address blocks: 82.177.95.0/24 maxlen: 24
82.177.92.0/23 maxlen: 23
82.177.100.0/24 maxlen: 24
81.15.187.0/24 maxlen: 24
82.177.110.0/24 maxlen: 24
2a00:4120:8001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980693644 (0x3a74328c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=899435365eff13f060c76fb6ae9f86f4437151d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:1d:d2:38:f3:74:c8:c8:75:dd:2f:0f:82:
da:67:ff:bf:13:0b:7d:8e:c1:cc:29:0c:8b:d4:73:
33:0a:92:61:97:ef:83:16:1d:02:95:52:4a:88:13:
52:ce:32:91:ee:a2:b5:aa:77:79:df:cb:d7:87:08:
11:83:1c:df:3e:1e:02:3e:4c:e7:de:89:4b:a4:2c:
d7:a1:5b:f8:3e:87:f5:a3:97:f6:51:55:9e:94:0b:
6f:3b:93:c8:c4:c0:f1:c4:74:b6:04:63:9e:97:ae:
ed:d8:a0:5b:d2:55:bf:bc:cf:93:b6:3e:69:19:68:
57:33:f3:f4:eb:3d:50:d5:77:a3:ed:2a:ed:2a:1b:
fa:7a:b1:41:c9:ac:61:17:08:c0:87:78:77:46:4f:
02:a7:2a:61:2b:8c:3f:e5:c9:22:de:e5:53:ff:83:
c7:da:e4:ac:a8:82:ff:1d:49:ec:68:07:c4:67:13:
b2:09:8d:79:57:24:77:dc:e4:e5:ba:2e:07:35:98:
ce:fd:c0:7d:0b:5d:17:ec:f1:f1:d0:01:92:0e:bd:
5e:e5:40:eb:ab:25:98:50:c2:cd:39:9e:30:74:aa:
1b:ca:27:27:45:f5:e6:05:bf:e5:b8:ae:c2:cb:ef:
f7:f0:ef:17:99:7a:13:97:59:ca:9b:b6:0f:33:f4:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:35:36:5E:FF:13:F0:60:C7:6F:B6:AE:9F:86:F4:43:71:51:D4
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iZQ1Nl7_E_Bgx2-2rp-G9ENxUdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.187.0/24
82.177.92.0/23
82.177.95.0/24
82.177.100.0/24
82.177.110.0/24
IPv6:
2a00:4120:8001::/48
Signature Algorithm: sha256WithRSAEncryption
19:e7:68:4e:57:16:d1:2b:04:09:2d:d7:f7:5b:92:27:78:ab:
f4:07:09:f8:1d:81:82:79:ea:f2:a7:96:13:e5:73:a6:a4:4f:
80:9d:ba:cb:68:2d:b5:84:a7:1f:06:ec:e1:ea:13:7b:bb:3e:
6b:4b:c2:6a:2e:e8:d6:ae:00:c6:72:39:f6:0e:a1:54:19:91:
50:48:0a:32:89:0b:a8:2a:27:5c:a5:04:a2:c0:8c:ae:4f:e1:
00:3e:8c:3e:c7:92:4c:13:70:34:fb:e7:a3:da:d9:9e:30:db:
56:00:eb:9f:5b:ed:90:df:85:ca:e4:cc:ee:79:4a:3c:2a:9b:
a0:02:f7:fe:3e:c8:fb:c4:6c:45:63:e8:2a:7d:ea:c0:3f:01:
31:d2:cb:c7:70:5d:d8:79:43:11:38:b1:14:32:c7:82:b2:cf:
7e:7b:48:7f:56:4f:ce:ac:ab:18:dc:a1:d3:d3:bf:66:af:8a:
8e:c2:02:02:eb:aa:1c:4e:ca:61:3c:50:94:b4:3a:bf:3b:56:
e2:48:d0:a1:26:bf:d2:0e:3f:7b:f1:49:57:09:bb:1a:76:2a:
b4:05:d6:63:62:3d:80:5e:d8:4c:7f:9b:ee:dd:32:fa:23:13:
e7:0b:3a:7e:0f:67:91:ee:b1:9d:17:6e:bd:e3:49:f0:a4:9f:
2e:94:76:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org