Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dyp-wgkseaIwV-aj-YXc6GFIc4I.roa
File: Dyp-wgkseaIwV-aj-YXc6GFIc4I.roa (raw, json)
Hash identifier: ZRQcdumLf6TBdt1blqhhFxqkdBwSbbCgg9xNMSKgWgk=
Subject key identifier: 0F:2A:7E:C2:09:2C:79:A2:30:57:E6:A3:F9:85:DC:E8:61:48:73:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184BD8EF07A36E210AAE73FAA55026D06BF
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dyp-wgkseaIwV-aj-YXc6GFIc4I.roa
Signing time: Mon 28 Nov 2022 09:26:12 +0000
ROA not before: Mon 28 Nov 2022 09:26:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 81.5.191.0/24 maxlen: 24
82.153.245.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
81.168.119.0/24 maxlen: 24
81.168.126.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:8e:f0:7a:36:e2:10:aa:e7:3f:aa:55:02:6d:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 28 09:26:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f2a7ec2092c79a23057e6a3f985dce861487382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:de:30:18:5f:13:72:54:f1:27:41:ff:a5:
62:7e:e9:37:b5:26:8f:81:c9:cc:9e:59:e9:7d:05:
6c:f8:29:15:29:02:38:59:c3:98:f7:94:44:62:25:
cd:24:24:bd:d6:62:1f:15:9d:7a:a0:99:c6:b7:9d:
f3:cd:25:76:8c:e5:9d:2f:a6:a9:ae:36:44:92:5c:
1d:8b:65:4e:3e:de:cb:c7:06:95:d2:c9:fc:9d:3e:
74:99:2d:fe:3d:97:2c:28:64:61:14:28:84:b7:4e:
bc:8b:90:73:4c:14:74:8e:10:67:72:81:57:be:9f:
c0:f0:6a:62:bb:2e:5c:cb:a3:e8:98:42:1f:3b:3d:
f3:14:6d:38:9b:ee:03:80:31:5c:58:dc:08:df:5f:
ae:00:76:7b:81:10:8a:88:3d:43:f6:e9:cd:7e:1a:
3d:ab:53:15:3b:bf:61:fe:45:fb:99:c1:a5:1b:94:
72:82:de:52:91:70:91:8d:16:cc:b9:a6:47:a0:b3:
b5:e4:6e:17:89:7a:43:d8:68:ba:06:37:70:f1:d5:
04:95:ba:97:fe:a0:db:3e:48:93:35:aa:d8:d5:f2:
f5:ef:b2:8c:c9:87:02:e0:e6:c5:7c:44:54:09:f7:
1c:2e:a0:ea:48:dc:5e:92:9c:2d:89:99:3b:a5:26:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:7E:C2:09:2C:79:A2:30:57:E6:A3:F9:85:DC:E8:61:48:73:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Dyp-wgkseaIwV-aj-YXc6GFIc4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
81.168.119.0/24
81.168.123.0/24
81.168.126.0/24
82.153.1.0/24
82.153.245.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fe:8a:c6:84:c7:84:d7:18:d6:39:08:97:bf:f8:7c:f5:e9:
75:67:4e:4d:f2:df:23:28:76:23:95:e4:9d:0d:fe:ef:f7:ea:
78:37:02:a9:39:3b:ce:4b:3b:5d:98:1c:b4:cf:b6:61:df:c0:
cd:a8:d5:f5:73:c6:5a:bd:58:c7:0d:cf:ba:c9:b3:f8:d7:91:
1a:e0:cb:ae:d5:dd:8a:cf:e5:75:be:29:38:5f:bb:71:e1:d0:
b4:e7:bf:8a:23:67:fc:fb:de:06:16:3f:89:53:5b:ca:a6:b2:
9f:84:93:8e:3a:b8:6d:66:aa:c5:67:99:13:36:d6:f0:24:51:
cf:61:aa:25:90:d9:e9:e5:07:a0:4a:3a:94:86:cb:a6:b5:70:
a1:9a:3e:9d:a6:4c:77:06:51:eb:be:de:1a:e5:01:f5:e0:af:
17:57:03:7c:5e:6e:73:a0:98:8a:a8:28:ac:71:af:c8:cd:e8:
e0:45:24:52:b6:3d:31:f5:f8:5b:6c:af:4d:8d:fe:2d:38:48:
79:a0:a6:07:3c:f1:e2:68:37:87:2d:54:34:16:4d:92:43:cc:
e6:fa:3f:1a:39:98:41:99:79:d9:5f:12:11:a2:bf:19:b0:e6:
93:91:88:c2:11:d3:79:47:76:68:70:ae:7d:75:b7:d2:d6:b3:
16:f7:55:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org