Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/OXpryMV9oWOpF_uVdjXZYYbPGM0.roa
File: OXpryMV9oWOpF_uVdjXZYYbPGM0.roa (raw, json)
Hash identifier: oI3q4QDlHd5Saz8E7BGNHR6XQTjl6yABxshxPT7so9Y=
Subject key identifier: 39:7A:6B:C8:C5:7D:A1:63:A9:17:FB:95:76:35:D9:61:86:CF:18:CD
Certificate issuer: /CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Certificate serial: 1C29CAB9
Authority key identifier: 30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/OXpryMV9oWOpF_uVdjXZYYbPGM0.roa
Signing time: Sat 01 Jan 2022 00:58:10 +0000
ROA not before: Sat 01 Jan 2022 00:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16191
IP address blocks: 185.127.32.0/22 maxlen: 24
81.30.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472500921 (0x1c29cab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3096d7afbb8a5e315a5c489acea7dcb75aa65d04
Validity
Not Before: Jan 1 00:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=397a6bc8c57da163a917fb957635d96186cf18cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:87:5c:59:fb:7e:0a:e1:dc:fe:ff:89:e6:
34:f8:a8:62:85:15:57:09:60:49:a5:bc:73:71:f5:
90:6d:49:d8:7a:6d:99:17:06:b4:dc:1e:ea:9d:a9:
f9:03:6b:9d:70:e8:ce:8a:bc:9a:a4:05:bd:1a:af:
05:28:cf:ea:9f:f6:67:b7:c0:db:54:dd:6d:ca:1f:
cd:07:8b:d9:ef:42:02:6b:9b:33:80:94:96:6b:51:
22:6c:7a:b9:f0:8a:4f:53:ac:7b:7a:8d:20:68:ef:
f4:a1:ef:a0:4c:c3:ac:d1:82:4d:d2:67:89:a7:ed:
5a:ff:ad:ec:e0:cc:05:49:e6:8c:3e:2d:39:b8:f0:
5a:03:4e:b7:d8:5a:74:81:9a:a5:00:0c:b2:07:f2:
de:67:01:30:34:61:cc:81:4f:0f:a1:94:5b:ad:1a:
23:5b:c3:b4:4c:d5:0b:13:2f:4c:b9:b8:0b:64:d4:
a4:57:6c:c2:23:3d:d7:7b:10:39:d5:76:3e:c4:22:
14:ae:4b:8a:1b:7f:22:fb:4f:08:d0:fd:96:3f:05:
65:9f:7a:d6:30:4b:9f:26:ae:17:0d:4b:9c:43:1e:
b8:39:a8:cd:56:81:af:d8:23:e6:f1:63:fa:81:a8:
f3:23:19:bf:0b:6a:b9:6f:38:4f:2b:3f:87:0c:ff:
c4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7A:6B:C8:C5:7D:A1:63:A9:17:FB:95:76:35:D9:61:86:CF:18:CD
X509v3 Authority Key Identifier:
keyid:30:96:D7:AF:BB:8A:5E:31:5A:5C:48:9A:CE:A7:DC:B7:5A:A6:5D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJbXr7uKXjFaXEiazqfct1qmXQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/OXpryMV9oWOpF_uVdjXZYYbPGM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf8f99-e581-4f5f-875f-df4e8c7364fe/1/MJbXr7uKXjFaXEiazqfct1qmXQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.0.0/20
185.127.32.0/22
Signature Algorithm: sha256WithRSAEncryption
29:ee:4d:d0:c6:51:71:e9:fe:91:d9:6f:0d:cd:b6:a0:bd:dd:
0f:f3:80:0a:15:80:fc:7b:08:c3:2f:c4:3a:ee:aa:16:f7:d0:
8d:a6:d0:7b:25:4d:c2:6b:8f:d3:b1:98:f5:ce:40:eb:54:61:
4d:0a:36:3d:59:df:74:0a:16:18:e4:99:d4:a1:81:58:cd:cb:
f8:af:b8:31:5a:53:f2:c4:7f:e2:95:96:52:a8:78:e0:7c:02:
55:f1:59:8f:df:fe:10:5b:e9:53:68:a6:3f:c9:bd:4e:25:fb:
27:6d:bc:97:4e:31:bb:bd:63:5f:16:6e:69:05:6a:5f:32:27:
1d:73:cb:de:7a:0b:78:00:d1:ed:92:76:42:de:8c:57:b7:4f:
3a:ee:3d:c2:8f:95:23:16:66:c2:4b:54:a9:04:06:aa:db:e1:
f7:6b:fc:97:f0:b1:43:68:84:b1:4c:e5:31:70:9a:de:68:1e:
46:ff:f0:ed:83:c6:1f:e7:76:b1:99:f4:db:00:b7:d6:ed:ce:
b4:86:f4:a7:b7:99:ef:de:2a:b6:31:04:4e:f6:4e:32:47:a6:
a2:49:4b:96:ab:f9:ae:9a:e2:00:c3:04:e6:fb:97:a5:c5:10:
05:30:ec:fc:00:98:a0:c3:37:e8:c8:98:9b:3a:3a:45:52:df:
12:18:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:09 2024 by rpki-client on console-fra.rpki-client.org