Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/FoaopnWUPFAfcj9Qxj7-zaAOEi4.roa
File: FoaopnWUPFAfcj9Qxj7-zaAOEi4.roa (raw, json)
Hash identifier: iqy5ZyShHUDfRp/YcRkRAuPQ0pVJmdKy/oLswABg3i4=
Subject key identifier: 16:86:A8:A6:75:94:3C:50:1F:72:3F:50:C6:3E:FE:CD:A0:0E:12:2E
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01831CB84B8976E59B24867D1DDD43F16398
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/FoaopnWUPFAfcj9Qxj7-zaAOEi4.roa
Signing time: Thu 08 Sep 2022 10:49:43 +0000
ROA not before: Thu 08 Sep 2022 10:49:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39719
IP address blocks: 81.23.92.0/22 maxlen: 22
81.23.80.0/20 maxlen: 20
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.88.0/22 maxlen: 22
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:b8:4b:89:76:e5:9b:24:86:7d:1d:dd:43:f1:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Sep 8 10:49:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1686a8a675943c501f723f50c63efecda00e122e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:d5:50:66:5c:cb:ef:ae:46:ea:55:10:9c:
e2:ab:ec:f4:02:cc:db:f3:86:1e:9e:2a:fc:ad:a9:
ee:34:0e:fb:b7:67:67:6c:a9:86:a8:18:f1:91:aa:
e1:d7:7b:88:83:56:d5:73:99:5d:8d:ee:7b:3f:d8:
c3:da:df:23:1e:df:1f:d4:bd:2b:fe:36:6e:1c:79:
ad:bf:e2:04:0a:f2:e2:f1:9d:f7:b1:da:b3:c7:87:
99:6a:ff:0c:96:62:3c:80:93:60:03:76:61:35:81:
51:66:ef:2f:23:5a:a6:2d:36:e6:cc:f7:9b:6c:65:
4a:a3:93:c0:af:89:24:87:73:bd:2f:89:28:7d:4a:
34:00:4a:24:05:ae:70:73:69:f5:6c:f9:0e:76:51:
91:8c:24:a9:59:9c:6a:b0:47:ea:09:c8:cd:99:e5:
0e:83:75:5c:cd:74:28:04:9a:79:97:58:28:b6:46:
91:5b:fd:a9:d2:fa:d9:e6:d1:93:58:9f:63:5e:53:
ed:4f:b1:44:49:c1:aa:f9:54:99:bb:ef:a1:fa:74:
fa:48:0d:06:7f:16:86:34:0c:06:d0:93:6e:56:5a:
2e:c6:9c:75:ee:b7:8a:34:24:b5:b7:6e:ac:9c:74:
6c:8a:4b:22:4e:32:8c:4e:ac:bf:2f:82:60:b9:d5:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:A8:A6:75:94:3C:50:1F:72:3F:50:C6:3E:FE:CD:A0:0E:12:2E
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/FoaopnWUPFAfcj9Qxj7-zaAOEi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
82:56:e4:ea:30:03:b4:6e:d1:ac:01:f3:66:d8:4f:93:79:72:
57:10:1f:17:d1:5b:0b:84:82:4b:78:99:62:c3:0b:09:b0:64:
3d:88:98:cf:2a:be:88:50:d5:50:51:7f:d6:a4:20:c0:5d:75:
47:3e:33:cc:f0:e8:ae:54:64:18:c3:00:16:5f:f2:fc:b7:ed:
e3:c9:c8:ab:9d:d3:90:7c:92:f0:95:b6:80:5d:0e:c4:e9:85:
7e:16:e1:b0:ae:33:27:6e:cd:a6:f4:e6:f4:e5:05:eb:ee:cc:
60:6e:6b:73:e7:25:15:7b:1e:4b:81:d2:a1:f1:f6:99:1e:5c:
57:68:bc:b8:be:98:b7:4a:97:96:f4:b6:0e:1b:4d:58:6d:b8:
b7:43:c5:7a:be:bc:0d:47:29:c1:f5:9e:27:69:18:fa:e6:55:
f7:16:be:5a:6f:49:a6:c2:a6:2f:48:b9:f3:aa:3c:a9:03:11:
4b:5c:59:65:95:d8:d2:2e:f7:d5:b6:36:3e:5d:fc:06:f4:f3:
c5:02:5b:46:51:44:d0:87:a8:6e:f6:0b:4f:6f:96:da:e1:b4:
12:58:fc:12:6a:55:91:a6:85:06:49:f4:62:e9:02:c0:5e:f7:
62:f5:7f:34:49:5b:9a:5d:2a:49:7b:ee:9d:0f:be:52:1d:00:
8f:7e:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:55 2024 by rpki-client on console-ams.rpki-client.org