Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/mJ82jJJ5k5xB90_FCCEu_ZrdOpc.roa
File: mJ82jJJ5k5xB90_FCCEu_ZrdOpc.roa (raw, json)
Hash identifier: bgbeSx7JZHnFy2X2VZ7CL2Ha+/ySPYWSC9Q8lzUMi34=
Subject key identifier: 98:9F:36:8C:92:79:93:9C:41:F7:4F:C5:08:21:2E:FD:9A:DD:3A:97
Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial: 3409B5EF
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/mJ82jJJ5k5xB90_FCCEu_ZrdOpc.roa
Signing time: Sat 01 Jan 2022 01:53:09 +0000
ROA not before: Sat 01 Jan 2022 01:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9086
IP address blocks: 81.24.192.0/24 maxlen: 24
81.24.192.0/20 maxlen: 20
81.24.194.0/24 maxlen: 24
81.24.198.0/24 maxlen: 24
81.24.193.0/24 maxlen: 24
81.24.197.0/24 maxlen: 24
81.24.199.0/24 maxlen: 24
81.24.196.0/24 maxlen: 24
81.24.195.0/24 maxlen: 24
81.24.201.0/24 maxlen: 24
81.24.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873051631 (0x3409b5ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Validity
Not Before: Jan 1 01:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=989f368c9279939c41f74fc508212efd9add3a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:80:49:5e:6f:fa:5a:5d:39:2e:1a:ba:68:
29:90:7e:df:7a:2f:fb:94:35:0d:bf:75:2e:74:6f:
e4:4e:90:4a:bf:96:1a:5a:73:aa:ea:5c:90:fc:20:
5d:e4:e9:ba:75:b6:69:d4:07:5d:4f:47:d0:51:1c:
10:6f:9a:dc:c8:0d:f1:78:22:f0:07:05:92:84:8f:
c7:7e:18:c7:f6:f5:f0:ee:76:1e:40:cd:35:90:30:
cb:f2:ef:7d:42:36:42:b8:05:69:03:86:91:1e:e5:
5f:85:64:66:ac:84:c9:d6:a3:5e:77:81:b7:ad:1b:
cb:1b:2b:f1:cc:50:25:2b:a3:3f:a0:93:68:de:b0:
67:15:f1:74:f0:dc:b9:df:0f:0d:68:a7:42:b5:95:
9b:5d:bb:d0:bf:71:82:59:48:0d:c3:56:ca:16:27:
73:80:80:ec:79:b3:80:8d:8e:bd:a8:7f:06:e4:7b:
23:04:d6:79:76:d4:f7:9f:0d:19:17:fa:f8:21:b9:
62:1e:be:dc:7a:af:99:39:c7:83:dd:5f:bc:3f:99:
97:56:3d:6c:c2:a7:8b:67:1f:a3:49:23:71:38:42:
4b:29:16:f8:a8:59:36:cb:6f:b8:6d:3d:4b:7a:f4:
b4:a0:d1:0a:0d:4d:1e:d1:d7:56:b9:1b:1f:9c:7f:
d3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9F:36:8C:92:79:93:9C:41:F7:4F:C5:08:21:2E:FD:9A:DD:3A:97
X509v3 Authority Key Identifier:
keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/mJ82jJJ5k5xB90_FCCEu_ZrdOpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.24.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:f8:af:d5:75:7c:a4:81:23:3c:23:78:b3:38:43:61:98:37:
d8:40:4b:ad:d3:1b:61:9c:c7:d8:06:20:08:fe:20:c9:a2:39:
68:c2:99:09:c3:86:fb:2f:ae:87:3d:04:31:71:97:b5:1a:8e:
ad:14:3c:2a:c2:09:d0:f4:75:6f:85:62:cf:3f:7f:85:78:bf:
2f:e4:c1:8a:f8:ee:55:09:d6:e1:44:59:45:bc:96:75:d8:bd:
1c:ee:57:b7:a4:1d:6e:15:2b:ad:fd:c7:71:3f:95:ea:bc:ad:
2b:93:4a:20:2f:16:e2:fd:17:c5:f8:97:5a:a4:54:13:01:71:
cd:39:06:3c:b6:11:71:74:23:db:75:2a:31:d5:5c:4c:24:84:
d1:36:25:35:78:24:f0:70:0d:19:57:70:0c:28:2b:d5:53:f6:
15:f0:d3:d2:f2:fd:ee:26:97:3a:c1:1f:12:6b:3c:97:95:7a:
1f:6b:38:d0:95:32:6a:7a:30:4d:ef:d5:1b:d4:61:8c:82:50:
62:ea:f5:e6:e1:a0:84:df:b1:08:e1:99:c3:e6:a3:e3:85:33:
b4:c4:ac:be:ab:cf:ad:14:44:95:8b:0d:21:4c:24:9e:6c:89:
b4:f5:03:d2:da:f8:cb:58:60:3b:14:04:96:07:f5:8f:43:88:
b7:c3:a5:4b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENAm17zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZWZiNTY0MTVmMzVlNjNmYTc0MDNhNTAxZmRlZGRhZWVjZWE0NzVhMB4XDTIyMDEw
MTAxNTMwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg5ZjM2OGM5Mjc5
OTM5YzQxZjc0ZmM1MDgyMTJlZmQ5YWRkM2E5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMnHgEleb/paXTkuGrpoKZB+33ov+5Q1Db91LnRv5E6QSr+W
GlpzqupckPwgXeTpunW2adQHXU9H0FEcEG+a3MgN8Xgi8AcFkoSPx34Yx/b18O52
HkDNNZAwy/LvfUI2QrgFaQOGkR7lX4VkZqyEydajXneBt60byxsr8cxQJSujP6CT
aN6wZxXxdPDcud8PDWinQrWVm1270L9xgllIDcNWyhYnc4CA7HmzgI2Ovah/BuR7
IwTWeXbU958NGRf6+CG5Yh6+3HqvmTnHg91fvD+Zl1Y9bMKni2cfo0kjcThCSykW
+KhZNstvuG09S3r0tKDRCg1NHtHXVrkbH5x/018CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSYnzaMknmTnEH3T8UIIS79mt06lzAfBgNVHSMEGDAWgBSe+1ZBXzXmP6dA
OlAf3t2u7OpHWjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L252dFdRVjgxNWotblFEcFFIOTdkcnV6cVIxby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvNzViNDNkLWU3NDItNDhlYS05NDVhLWFhODMyZGI3YjUwYS8x
L21KODJqSko1azV4QjkwX0ZDQ0V1X1pyZE9wYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
NzViNDNkLWU3NDItNDhlYS05NDVhLWFhODMyZGI3YjUwYS8xL252dFdRVjgxNWot
blFEcFFIOTdkcnV6cVIxby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBFEYwDANBgkqhkiG9w0BAQsFAAOC
AQEAXfiv1XV8pIEjPCN4szhDYZg32EBLrdMbYZzH2AYgCP4gyaI5aMKZCcOG+y+u
hz0EMXGXtRqOrRQ8KsIJ0PR1b4Vizz9/hXi/L+TBivjuVQnW4URZRbyWddi9HO5X
t6QdbhUrrf3HcT+V6rytK5NKIC8W4v0XxfiXWqRUEwFxzTkGPLYRcXQj23UqMdVc
TCSE0TYlNXgk8HANGVdwDCgr1VP2FfDT0vL97iaXOsEfEms8l5V6H2s40JUyanow
Te/VG9RhjIJQYur15uGghN+xCOGZw+aj44UztMSsvqvPrRRElYsNIUwknmyJtPUD
0tr4y1hgOxQElgf1j0OIt8OlSw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:28 2023 by rpki-client on console-fra.rpki-client.org