Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5sFSXy9FmgIk36Pf8One_hxqJao.roa
File: 5sFSXy9FmgIk36Pf8One_hxqJao.roa (raw, json)
Hash identifier: veVojP4PnEig9Ej1M7LhHqw3BN3psny/DqpmKF9STXk=
Subject key identifier: E6:C1:52:5F:2F:45:9A:02:24:DF:A3:DF:F0:E9:DE:FE:1C:6A:25:AA
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018436FEF9C75C1F6874C6B3146D61DFA5DD
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5sFSXy9FmgIk36Pf8One_hxqJao.roa
Signing time: Wed 02 Nov 2022 06:19:50 +0000
ROA not before: Wed 02 Nov 2022 06:19:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140403
IP address blocks: 81.199.96.0/23 maxlen: 23
81.199.98.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:36:fe:f9:c7:5c:1f:68:74:c6:b3:14:6d:61:df:a5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Nov 2 06:19:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c1525f2f459a0224dfa3dff0e9defe1c6a25aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:f1:95:c6:bc:ab:97:2e:ba:43:f6:b0:cf:
35:30:75:41:fa:71:3d:0b:13:68:8a:b3:f7:c7:44:
5c:16:34:b7:cd:54:92:b3:fc:eb:ae:24:cf:21:a4:
7d:20:5b:91:b8:f0:b4:1c:ab:1d:19:df:d6:33:48:
20:4e:3c:1e:6b:ed:04:10:3c:b6:13:b9:74:57:fc:
3c:e3:29:12:fa:74:40:8d:b1:6b:3b:46:4b:5f:bc:
9a:10:f7:80:5e:0a:a1:ab:e2:bc:55:28:27:18:24:
b6:8e:28:d4:e5:f3:a6:e6:b4:23:de:f9:b0:70:50:
6b:fa:45:3d:0a:b4:32:51:d6:b4:9c:02:cc:aa:82:
2f:89:e6:f4:f8:d7:bc:05:be:10:8b:49:b7:14:99:
57:35:3b:f1:de:39:5c:6b:2a:70:49:bf:b8:6a:09:
0d:b6:9c:a2:ec:ae:44:8c:ef:b0:d6:c7:f6:fa:db:
29:b8:15:90:98:3f:dd:02:7b:60:dc:67:10:4a:e2:
86:49:0b:fc:5e:a6:2e:8c:1a:66:12:a4:5b:78:94:
43:9d:08:a2:13:31:93:1e:15:19:5a:12:e7:ce:3e:
13:85:8a:14:48:77:a0:de:4d:73:6a:69:75:76:dc:
36:12:cd:36:22:ac:df:b1:81:66:1f:c7:22:c1:05:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C1:52:5F:2F:45:9A:02:24:DF:A3:DF:F0:E9:DE:FE:1C:6A:25:AA
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5sFSXy9FmgIk36Pf8One_hxqJao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:f0:c7:0c:f3:59:98:46:ac:00:46:6b:24:77:4c:5a:1f:19:
62:e3:24:ba:75:3e:12:d1:72:e5:ba:a6:45:5e:09:2b:e8:bb:
2f:b6:41:c8:95:b4:9d:fe:4a:b6:90:26:13:5c:91:59:ed:7e:
a5:ef:e8:74:7b:7c:aa:a1:38:15:51:5b:17:24:9e:ee:2c:52:
48:a9:e0:0c:3f:07:3c:4c:83:ae:09:5f:55:84:e3:9a:2c:2d:
79:cf:76:a2:16:70:2e:b8:93:78:42:54:d1:6e:bf:63:f6:b9:
79:a7:6e:b5:b9:b9:d2:ba:a3:e9:de:c1:34:5e:7e:c9:f0:1a:
97:a1:00:39:46:80:a0:14:34:6c:8b:ff:c7:24:4a:b9:88:fa:
84:2f:6b:a8:ad:ec:b5:78:81:dc:fa:40:d2:e7:b5:73:70:21:
9f:67:d7:7b:ba:bb:00:75:5c:d8:8e:82:5c:58:4e:62:f4:1c:
d2:2f:82:7e:12:47:ea:a8:d4:31:73:ba:09:24:88:9b:d5:c8:
a6:7a:63:c5:37:00:c9:46:7a:3e:92:55:bb:f3:92:2f:96:72:
6c:89:ae:d9:c6:5f:4b:9f:46:81:14:a9:64:d0:33:32:34:3f:
75:d0:63:37:fb:da:dd:83:4c:04:89:bb:d6:cb:3c:f4:1d:33:
42:4b:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org