Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ojKKrAkFngoJ0zn1h233_aAPzeU.roa
File: ojKKrAkFngoJ0zn1h233_aAPzeU.roa (raw, json)
Hash identifier: y8a38+fsQHY8An8cT4ex9D/iTg9E+c2kcIY+6RQSOig=
Subject key identifier: A2:32:8A:AC:09:05:9E:0A:09:D3:39:F5:87:6D:F7:FD:A0:0F:CD:E5
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01841322B7DA43DC397D632927DA18A5DACB
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ojKKrAkFngoJ0zn1h233_aAPzeU.roa
Signing time: Wed 26 Oct 2022 07:12:33 +0000
ROA not before: Wed 26 Oct 2022 07:12:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39719
IP address blocks: 81.23.92.0/22 maxlen: 22
62.177.24.0/21 maxlen: 21
81.23.80.0/20 maxlen: 22
81.23.84.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.88.0/22 maxlen: 22
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:22:b7:da:43:dc:39:7d:63:29:27:da:18:a5:da:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Oct 26 07:12:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2328aac09059e0a09d339f5876df7fda00fcde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:d3:91:38:e6:45:c6:a4:ed:de:01:36:29:
e2:20:86:bd:94:1a:f9:c3:02:4c:7f:65:31:fe:eb:
8a:45:30:70:8b:af:76:a5:a2:b8:6b:49:14:e2:5d:
76:f8:d5:73:3c:53:49:5a:22:ed:7f:c3:c5:57:e2:
04:cb:79:99:22:28:c1:6b:2d:72:22:3c:e3:b4:75:
0f:d4:8c:34:79:e4:71:81:7e:57:ab:0b:10:58:68:
13:aa:2c:75:0d:36:14:66:45:cc:d7:69:e5:96:82:
46:e2:3f:a8:60:98:87:2d:ea:bb:16:ec:2d:db:04:
e2:53:c4:62:ec:62:0d:8d:c3:72:28:f9:4a:1d:b8:
00:79:1f:c5:34:ef:9a:cc:9f:2b:e2:00:c7:01:f4:
b1:0a:59:99:1b:c9:e7:67:30:76:95:50:f2:fc:a6:
c4:18:32:97:64:20:a2:94:ac:75:b1:86:80:e0:d7:
d4:26:47:2e:26:df:61:1c:0a:88:50:9c:d5:ad:da:
bf:d5:d2:7d:c1:13:bc:f2:a7:69:73:1b:a4:34:7f:
cd:8d:fa:0f:59:b8:85:99:c4:b5:56:05:e3:35:c6:
10:0c:a9:81:7e:85:72:67:0f:3b:ac:db:d1:24:b7:
e5:97:0a:d6:70:80:d3:11:5a:7d:63:6f:07:ef:40:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:8A:AC:09:05:9E:0A:09:D3:39:F5:87:6D:F7:FD:A0:0F:CD:E5
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/ojKKrAkFngoJ0zn1h233_aAPzeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.177.24.0/21
81.23.80.0/20
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
4c:22:81:e6:d8:e9:bb:74:ff:89:12:5f:9a:75:2b:40:26:6d:
01:13:e4:a9:42:dd:7a:2c:05:b2:72:60:08:ae:e7:53:35:c9:
0f:6b:15:5b:f2:e4:8d:3c:65:f2:dc:d7:8b:ec:7a:cd:5d:53:
41:0a:bc:b7:fd:02:3b:70:8f:1c:fb:ff:8b:35:7d:29:8a:44:
d0:a5:98:54:e3:16:01:e2:26:51:40:b7:15:e0:1b:a1:0f:e5:
e5:4c:d5:c7:3c:2e:76:5d:99:0d:42:f4:0c:03:cb:8b:a1:f0:
80:4e:3c:bd:9c:44:ba:c5:dc:00:4e:64:82:24:9e:80:80:d6:
3a:c7:c9:2e:dc:e8:42:e0:d7:11:91:16:11:c6:10:e7:ca:cf:
32:a6:a1:db:a3:2d:de:74:d2:7b:c2:8a:37:92:16:9a:8d:83:
56:3c:53:a1:2b:e8:d2:34:ac:4c:47:26:17:f1:67:13:80:1a:
69:a4:ff:79:a2:70:0d:14:58:8e:34:59:31:ae:4a:0c:4a:a2:
c4:40:c3:0b:9a:be:a7:f0:a4:f2:00:c7:00:a3:51:02:73:62:
b2:d8:f1:b8:4e:e6:5b:4b:95:49:4e:fc:aa:6b:8b:d5:a0:bf:
81:23:40:02:dd:0e:52:72:ee:b6:2f:37:a7:a8:f7:36:50:c5:
68:64:c1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:23 2025 by rpki-client