Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9B1SJQdv_-cJhgsDC3tpJDbixLY.roa
File: 9B1SJQdv_-cJhgsDC3tpJDbixLY.roa (raw, json)
Hash identifier: oZkHzn7MBBNGXOr/fFOh9WMu2p3z9YjTauXpSN5mY7s=
Subject key identifier: F4:1D:52:25:07:6F:FF:E7:09:86:0B:03:0B:7B:69:24:36:E2:C4:B6
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0184BE7E53BA80DBCF2A49FBAF59D8544BA6
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9B1SJQdv_-cJhgsDC3tpJDbixLY.roa
Signing time: Mon 28 Nov 2022 13:47:40 +0000
ROA not before: Mon 28 Nov 2022 13:47:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.150.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:7e:53:ba:80:db:cf:2a:49:fb:af:59:d8:54:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 28 13:47:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f41d5225076fffe709860b030b7b692436e2c4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:d8:da:fc:77:82:23:d6:8a:12:94:f9:f5:
5f:48:0a:20:e8:3b:0a:2e:99:1d:58:dd:17:8b:9f:
26:53:dd:1f:d1:26:15:f7:24:5d:80:f0:72:c0:13:
33:81:f8:5e:29:ff:45:6f:21:9f:83:15:14:d6:76:
72:98:32:74:6e:80:e3:7c:21:4b:b1:10:5f:53:15:
2f:cd:1a:8d:ac:27:40:91:72:36:74:1b:e5:e1:9d:
ca:a4:89:d8:53:73:ae:a7:fc:fc:56:86:55:a6:6d:
06:aa:53:1e:f4:ca:e9:1d:c3:75:b4:bd:8b:88:db:
99:24:44:69:98:68:2f:1a:92:d4:ed:5e:fa:94:a7:
c8:fe:fa:47:55:00:99:d2:c1:f5:5e:02:ee:48:0b:
15:cd:f0:d8:b5:2d:57:ff:fc:27:16:72:7b:62:00:
92:5f:95:2f:ac:16:dc:de:b3:81:ed:bd:07:d4:ee:
44:72:ef:12:eb:5c:2d:e8:e0:e9:22:07:dc:fd:a9:
0e:e4:f6:df:4e:f3:d9:7f:63:e3:f3:a2:ea:f7:f1:
1e:2c:cc:1d:28:cc:82:ea:b4:ca:53:80:82:b2:12:
c8:cf:73:71:2d:cf:46:53:3d:ca:c0:fa:58:02:fb:
4c:03:f4:81:7c:b0:48:36:1e:1a:a7:7f:2a:02:74:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:52:25:07:6F:FF:E7:09:86:0B:03:0B:7B:69:24:36:E2:C4:B6
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9B1SJQdv_-cJhgsDC3tpJDbixLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.147.0/24
81.29.149.0-81.29.150.255
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0b:ef:a1:52:9a:88:85:ca:0f:88:0a:6e:28:1e:7e:40:ae:
58:c2:a4:2d:b1:98:5f:a8:45:1d:67:33:f4:28:44:a1:6c:9c:
33:21:5e:a2:2c:9e:e4:bb:00:2c:cd:0d:90:6f:bb:3d:35:a8:
33:14:41:16:72:2b:2b:bb:41:a3:62:eb:67:79:56:fd:5b:17:
46:72:65:bd:ec:4f:16:01:98:24:99:7d:be:3c:ba:53:20:fb:
5b:d5:9d:53:56:10:b3:31:47:44:60:cc:bd:c9:5b:ce:b6:b9:
89:4d:55:2b:06:68:c6:ba:19:af:90:5f:3b:a8:bf:1b:15:f2:
6a:9d:97:ef:92:1f:53:e0:07:d3:44:15:59:24:fd:c7:eb:93:
51:bc:7c:7b:d9:4f:1a:37:31:42:9e:00:f7:b0:b3:fb:93:e2:
3b:8a:cf:8a:5a:12:af:d0:c8:03:3d:7b:f2:23:a6:95:f0:43:
9c:87:38:db:3c:cc:fc:63:6d:c5:05:c9:d7:17:28:56:08:b2:
a1:c4:7f:6a:ab:75:66:89:25:af:9c:24:30:f2:ee:e6:49:4a:
ba:a1:7a:31:67:3f:87:65:18:31:e6:85:6b:da:ec:a9:ae:03:
48:7c:25:c1:08:ba:c2:5f:8e:dc:c6:19:a7:1b:17:3a:3c:11:
48:38:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org