Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/S39hdVsLcSHFycAy_Pq0-JvBQz0.roa
File: S39hdVsLcSHFycAy_Pq0-JvBQz0.roa (raw, json)
Hash identifier: RGWa0jSvgYH4udupX5nSd6b5MKx5h/wgBGVaLLTZCoU=
Subject key identifier: 4B:7F:61:75:5B:0B:71:21:C5:C9:C0:32:FC:FA:B4:F8:9B:C1:43:3D
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0183C0FA213252393DFDE0CB34FA0F982BBE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/S39hdVsLcSHFycAy_Pq0-JvBQz0.roa
Signing time: Mon 10 Oct 2022 08:19:21 +0000
ROA not before: Mon 10 Oct 2022 08:19:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.145.0/24 maxlen: 24
81.29.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:fa:21:32:52:39:3d:fd:e0:cb:34:fa:0f:98:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 10 08:19:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b7f61755b0b7121c5c9c032fcfab4f89bc1433d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:12:94:03:2f:d1:8c:50:5c:f1:32:21:d6:
ec:51:81:1b:4b:6f:aa:c0:68:a0:aa:2c:c0:88:95:
56:f7:0c:32:e1:21:07:e9:56:d7:ed:5c:0a:6b:b7:
d2:f1:dc:a9:73:0d:28:01:fc:4b:99:58:54:97:2c:
06:98:ca:ca:1a:cb:75:b2:eb:3d:a3:2c:67:40:ca:
35:16:90:36:cd:de:8e:bb:d8:fa:22:84:65:29:3a:
b0:e5:d5:79:c9:65:27:32:e1:fd:b9:61:58:41:82:
c5:16:7e:11:87:75:b8:9c:53:a8:32:82:6e:f9:d7:
be:4c:ba:38:41:5f:67:88:3c:7b:93:e3:fe:7c:05:
0a:e2:37:66:9d:ee:8c:e1:35:b0:cd:e3:bf:1f:4c:
53:16:5e:54:83:eb:21:6e:70:15:2b:15:9e:56:72:
63:e4:34:3e:34:2e:79:c3:e4:e4:c3:3c:35:19:cf:
5f:7f:3e:18:38:0e:c4:09:fb:00:50:48:9b:8c:b5:
3a:46:51:43:d5:e0:04:bc:73:8f:63:74:c3:2c:0c:
bb:c7:ac:9f:48:21:56:03:6c:7f:b4:85:f8:88:78:
f3:8f:bb:a1:c8:53:e7:be:ed:0b:46:ff:42:23:72:
c1:1e:9b:79:a9:67:a2:c6:d2:9f:76:e1:0a:4f:ba:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:61:75:5B:0B:71:21:C5:C9:C0:32:FC:FA:B4:F8:9B:C1:43:3D
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/S39hdVsLcSHFycAy_Pq0-JvBQz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
81.29.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7c:37:16:d8:81:9a:7d:1d:96:b4:20:52:bd:88:c8:9d:47:
4d:99:e9:e0:46:40:81:fa:34:80:3e:10:fd:9c:ea:ef:ca:46:
9e:f2:22:17:36:6e:c2:74:59:18:fd:f0:22:a7:5d:52:51:70:
fb:3c:28:cf:0a:21:34:45:98:b9:e3:34:02:58:7c:3d:c3:56:
ea:f1:73:72:75:79:8d:3f:e2:43:83:38:bd:d7:3c:f5:ea:96:
3a:0b:d0:21:73:ab:8e:f8:b0:41:ae:f0:50:b7:e4:2a:8b:2e:
1c:01:2f:51:30:8f:7d:13:2e:73:39:9a:9f:ec:98:ce:56:57:
29:f3:2b:7e:67:d0:f3:92:6a:50:81:64:4b:7e:b5:b3:3e:15:
72:f3:56:b0:71:b8:7d:70:e6:34:95:d1:e7:19:cc:15:23:0b:
34:77:2a:81:fd:37:d7:99:f4:b8:37:1c:24:97:55:64:6a:5d:
b7:3c:91:86:ae:82:b8:dd:7a:09:69:62:66:67:df:54:4c:f3:
c4:6e:d5:f2:b6:4b:08:05:2b:14:49:ac:1d:66:56:c7:da:30:
fa:51:86:8a:77:ce:87:14:18:f2:8e:4e:40:76:97:09:95:4a:
2a:da:60:c9:bc:0e:8b:19:d5:3b:f2:04:ec:1e:5b:92:b9:82:
64:8d:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org