Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/7QtBOefkCO7WvqB280d0L2qHve0.roa
File: 7QtBOefkCO7WvqB280d0L2qHve0.roa (raw, json)
Hash identifier: 4L0MgNH6QgpRf8/JQDh1Xr1GzkcquhqnSnv3Vcx+2OU=
Subject key identifier: ED:0B:41:39:E7:E4:08:EE:D6:BE:A0:76:F3:47:74:2F:6A:87:BD:ED
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 01845CE94D0ED3D72E324FA96A2CD378448C
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/7QtBOefkCO7WvqB280d0L2qHve0.roa
Signing time: Wed 09 Nov 2022 15:01:43 +0000
ROA not before: Wed 09 Nov 2022 15:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29165
IP address blocks: 81.199.116.0/23 maxlen: 24
81.199.120.0/22 maxlen: 24
81.199.252.0/22 maxlen: 24
81.199.250.0/23 maxlen: 24
62.56.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:e9:4d:0e:d3:d7:2e:32:4f:a9:6a:2c:d3:78:44:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Nov 9 15:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed0b4139e7e408eed6bea076f347742f6a87bded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:ce:17:f6:61:ac:85:b9:21:11:62:f6:15:
3f:d9:61:f0:e6:4e:30:05:0e:02:35:36:97:c3:b8:
f3:7f:a8:10:c5:ca:df:ef:85:ef:d1:b7:8f:9f:2e:
ce:7c:67:36:83:40:4b:55:4e:2c:69:52:78:37:da:
2c:07:1a:53:f2:bb:ba:00:34:34:1f:1f:d7:d6:4e:
d4:ce:c8:be:6a:ac:a8:99:59:cc:30:04:c1:4b:4f:
66:5d:52:fb:aa:e5:d6:5a:07:6e:ff:e6:88:9b:b4:
3c:45:6b:db:04:25:f6:ce:7e:0b:2e:78:e0:3f:d5:
25:77:b5:82:a5:0d:73:90:3f:25:82:f8:95:ed:79:
8c:52:1f:dc:f3:99:5d:bf:4e:ee:d5:a5:e6:da:f1:
ba:09:fa:b1:48:3b:c3:2e:cf:2a:f6:37:a1:c0:71:
02:39:b0:30:47:e8:2b:61:cf:bd:0d:3c:9e:0d:93:
bc:20:bb:99:25:9e:c3:4e:3f:ba:81:58:58:cf:38:
55:9f:f4:ab:01:8f:c4:3f:ed:b6:ff:46:29:2b:6b:
2e:84:63:20:0a:91:c2:52:8b:83:41:94:de:19:78:
c5:4c:a1:72:18:12:c8:1b:25:14:01:2c:90:9c:5d:
bb:00:66:e5:9c:2b:9d:14:e0:af:94:56:2a:a0:b1:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0B:41:39:E7:E4:08:EE:D6:BE:A0:76:F3:47:74:2F:6A:87:BD:ED
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/7QtBOefkCO7WvqB280d0L2qHve0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.56.252.0/22
81.199.116.0/23
81.199.120.0/22
81.199.250.0-81.199.255.255
Signature Algorithm: sha256WithRSAEncryption
a3:9e:6f:92:69:9b:e3:9a:1b:16:2e:3f:98:a9:18:57:8c:b2:
04:f0:8c:8b:b5:bb:49:46:ea:35:d5:08:57:28:11:9c:19:3b:
01:8d:05:ec:52:2d:d3:e5:a6:d8:97:da:ea:e8:20:b7:fb:f2:
45:ea:cb:d0:40:72:37:2d:f7:f2:6d:c0:31:a7:ae:61:79:57:
2b:3b:1a:d5:ac:91:89:90:21:09:f3:62:c8:e0:db:31:f0:5a:
f3:bf:1f:b6:bc:6a:4c:95:f3:1c:48:9d:0a:6c:57:26:a8:0f:
7d:d7:3e:35:42:ef:65:1f:01:bb:43:df:f1:fa:f7:fd:1e:b8:
c4:d8:e5:c6:18:8d:10:7e:26:6f:46:9f:ae:47:bd:41:ee:8f:
2d:2d:44:35:da:eb:83:fe:d2:f5:8b:41:4d:f2:d8:a1:e8:a1:
54:e8:50:76:fd:13:8b:2e:d3:38:c2:b0:32:26:54:fc:68:87:
5b:7c:e5:fc:1b:a8:ee:69:93:ab:2c:87:6d:84:c5:fb:f7:74:
fb:7c:16:d1:87:cb:fd:4c:ff:dc:cd:93:12:c0:b5:27:08:f7:
c4:5c:d9:4d:f5:0b:9a:65:c1:de:1d:af:52:b1:fd:f3:67:12:
92:2d:b4:6f:c0:49:83:a9:5b:c3:02:1d:bd:c7:77:e8:1e:c1:
b7:bc:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org