Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/toThbxay-SQhGbkkqpbZ6UwVhKY.roa
File: toThbxay-SQhGbkkqpbZ6UwVhKY.roa (raw, json)
Hash identifier: G4y2rfMTpErcOSiY+0O4MI+bh9/cbIDVYcM745I41V4=
Subject key identifier: B6:84:E1:6F:16:B2:F9:24:21:19:B9:24:AA:96:D9:E9:4C:15:84:A6
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0183116CA1284709CD65876516DC67027EE2
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/toThbxay-SQhGbkkqpbZ6UwVhKY.roa
Signing time: Tue 06 Sep 2022 06:11:15 +0000
ROA not before: Tue 06 Sep 2022 06:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39719
IP address blocks: 81.23.92.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
81.23.88.0/22 maxlen: 22
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:6c:a1:28:47:09:cd:65:87:65:16:dc:67:02:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Sep 6 06:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b684e16f16b2f9242119b924aa96d9e94c1584a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:cf:68:0b:a3:ff:58:3d:36:cc:91:e5:83:
e0:7e:34:8f:cc:08:9c:a2:5e:f7:66:df:65:36:2c:
b0:d9:b7:6b:3f:2a:56:a9:6c:c5:9b:6f:eb:02:c5:
35:40:98:0c:fa:17:41:da:84:39:67:e9:2d:1a:69:
28:aa:7a:97:59:fa:98:fb:11:d1:e9:d1:3a:c8:f7:
40:60:3c:6c:86:28:42:46:bc:bd:94:9e:29:66:7f:
a7:cf:cb:c1:ad:47:2e:49:5d:14:66:94:37:3c:f8:
b7:3d:ce:55:d6:97:5e:e6:ab:cc:de:40:4c:09:2f:
f6:13:10:6b:5d:cf:e7:62:3d:75:61:13:93:be:d7:
2c:d2:7b:e2:a6:6b:a1:4e:1d:36:7a:c6:17:16:9e:
aa:a6:ef:90:6d:95:43:26:0f:b7:15:35:28:e3:2a:
52:02:01:6a:c2:ca:4a:84:01:29:a6:6c:d2:66:88:
d6:aa:5a:65:47:a9:ac:35:39:86:9a:2a:f2:71:e0:
f1:da:f6:25:17:a7:d1:62:1a:88:52:93:86:c7:93:
84:b5:13:96:55:3d:1f:32:b0:7a:dc:e7:15:e3:ee:
3a:32:a5:51:d8:f8:5b:ad:49:4f:9a:23:19:d6:d6:
14:aa:0f:a0:42:28:3f:ed:85:f6:15:e1:28:d1:6d:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:E1:6F:16:B2:F9:24:21:19:B9:24:AA:96:D9:E9:4C:15:84:A6
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/toThbxay-SQhGbkkqpbZ6UwVhKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.84.0/23
81.23.88.0/21
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
62:2b:9a:b1:fd:6c:48:eb:d8:bd:fd:e6:5f:90:14:5d:08:e3:
2a:56:fc:47:93:79:e7:02:ae:56:d4:66:cf:87:33:97:a7:90:
f2:9e:bb:c5:88:77:3e:d4:76:3f:df:e8:f2:f5:b8:66:ce:b2:
f2:91:58:61:89:40:2a:c2:7a:41:19:fb:12:cd:02:87:71:02:
53:54:01:2a:18:7e:ae:94:b6:d2:e9:d3:de:e5:2f:81:cf:4c:
1c:55:65:16:57:1b:03:61:7f:8d:5b:99:5b:cb:f2:a8:ca:6a:
a6:65:99:21:73:c2:2d:1a:19:78:e3:e3:1b:3d:47:16:8b:53:
16:3e:81:5a:3e:10:7f:0c:05:3d:cf:67:6e:bf:b3:75:46:81:
48:c8:13:89:d8:ef:35:93:ee:85:ff:42:0a:e6:32:d6:d0:df:
52:e1:5e:ae:ea:44:d4:4e:70:c5:12:3d:4e:08:2d:79:64:dd:
50:54:2f:28:a6:98:50:ed:d5:3c:36:d7:d5:1d:18:fd:ea:f0:
be:6c:eb:a8:70:f0:95:52:0a:dd:35:46:18:84:c0:95:a1:52:
cd:14:45:1a:cd:fa:3d:cb:1e:33:89:de:d3:ee:77:1d:2e:db:
1d:55:7e:43:26:6e:44:57:53:07:29:85:ac:03:f3:6c:a3:33:
9d:ec:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org