Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fOnFy8SXcUQJkuI9Era8tMxjYTI.roa
File: fOnFy8SXcUQJkuI9Era8tMxjYTI.roa (raw, json)
Hash identifier: UuRNeskqSRUG6CUkKFdYHBIDNDyN1G3O+/sd3C3EljM=
Subject key identifier: 7C:E9:C5:CB:C4:97:71:44:09:92:E2:3D:12:B6:BC:B4:CC:63:61:32
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 0C92985D
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fOnFy8SXcUQJkuI9Era8tMxjYTI.roa
Signing time: Sat 01 Jan 2022 14:06:51 +0000
ROA not before: Sat 01 Jan 2022 14:06:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211695
IP address blocks: 81.199.112.0/24 maxlen: 24
81.199.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210933853 (0xc92985d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 1 14:06:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce9c5cbc49771440992e23d12b6bcb4cc636132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:b9:90:29:4d:98:74:db:eb:23:e1:82:16:
11:e6:79:3a:5a:56:54:6a:26:67:c8:fb:ca:00:3a:
27:01:8f:7d:3d:9b:47:38:b5:10:ef:78:52:a0:63:
96:99:c9:a1:7f:e5:44:ea:43:7a:2f:4c:46:79:19:
dc:2d:77:03:aa:fc:06:25:95:c0:b1:c1:63:ae:26:
89:11:b3:a7:56:68:64:f2:6c:93:50:d4:a2:3b:d5:
bb:1e:7f:da:92:b0:6c:48:6b:46:d5:f7:b3:54:85:
7b:7f:b4:c3:10:1b:6c:d3:75:a6:4a:ae:f1:93:90:
91:bb:1f:4a:90:63:1b:51:d6:f8:e6:53:3a:42:d4:
e5:b0:60:8e:2c:3e:2c:1f:fb:19:a7:66:17:25:18:
bd:e1:57:9f:2b:79:99:83:7f:8a:9d:40:54:f4:a5:
3f:32:2a:87:b3:2a:f6:2f:fd:68:84:a4:ca:a4:dc:
5a:33:38:45:fe:2c:eb:d8:e1:c6:c7:bb:1c:56:f5:
b8:15:45:15:7f:01:48:ab:1d:7a:40:43:ea:ae:94:
03:60:11:1f:fc:cc:88:28:a3:03:9f:96:51:e5:ac:
17:39:b5:49:43:ef:b3:53:86:3b:a8:f9:7f:8c:32:
bb:fe:d4:51:5b:a3:bb:6c:50:87:e1:5d:0a:e5:c4:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:C5:CB:C4:97:71:44:09:92:E2:3D:12:B6:BC:B4:CC:63:61:32
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/fOnFy8SXcUQJkuI9Era8tMxjYTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.112.0/23
Signature Algorithm: sha256WithRSAEncryption
19:5f:4b:97:39:4b:8a:d9:25:fb:d7:d7:da:b0:fb:0d:8d:70:
29:cc:d4:bd:ec:1c:cd:c7:c0:e2:d6:71:f4:4e:98:20:8e:17:
b3:a5:f6:37:f8:1d:04:99:a9:d3:bb:7c:e3:24:23:0c:9d:05:
5e:62:e8:03:5a:58:9b:4d:40:bc:f9:b9:63:a6:f2:dd:a9:b7:
7e:3b:5c:ff:5a:2c:33:48:e8:fa:00:43:f6:e5:17:37:cf:d1:
9d:e0:85:1d:70:35:3a:e3:b2:dc:2d:c2:85:78:07:ab:18:bc:
9e:a0:31:0e:99:ff:17:7b:d1:6b:3e:29:0d:06:7f:4c:66:a7:
13:f2:74:b5:24:39:48:5a:11:26:bd:43:52:b8:eb:03:34:3c:
2a:2c:71:cb:44:e1:6a:85:b5:34:70:f6:db:45:26:ee:07:c0:
d4:a7:5c:b4:8b:71:c5:09:00:e5:2b:07:0f:8f:fe:a7:1a:2e:
b4:ab:34:f9:19:e2:b2:b4:a7:c4:5c:2c:3c:4d:3a:cd:6f:a0:
16:de:a0:07:41:68:ec:db:d1:0f:59:64:4e:55:15:bc:6e:57:
a8:dc:7b:15:0e:58:41:23:31:ed:2c:67:45:7b:9a:ac:d6:36:
e2:ce:74:51:5b:98:0c:43:a5:68:50:e8:5d:75:55:b0:99:33:
63:e0:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org