Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/x8T3YYBPXkuJw-1gCd7rh_Hah54.roa
File: x8T3YYBPXkuJw-1gCd7rh_Hah54.roa (raw, json)
Hash identifier: Y4K+wasvVhhmxAe9GNcFqm+K+RdNERrtFVuhuDcReR8=
Subject key identifier: C7:C4:F7:61:80:4F:5E:4B:89:C3:ED:60:09:DE:EB:87:F1:DA:87:9E
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01830C9A9D3BF98A9C1D684806ACD080A256
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/x8T3YYBPXkuJw-1gCd7rh_Hah54.roa
Signing time: Mon 05 Sep 2022 07:43:22 +0000
ROA not before: Mon 05 Sep 2022 07:43:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39719
IP address blocks: 81.23.92.0/22 maxlen: 22
81.23.84.0/23 maxlen: 23
2a12:1d40:1::/48 maxlen: 48
2a12:1d40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:9a:9d:3b:f9:8a:9c:1d:68:48:06:ac:d0:80:a2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Sep 5 07:43:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7c4f761804f5e4b89c3ed6009deeb87f1da879e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:73:c2:fc:41:e2:6c:e1:9e:2a:21:55:0b:
0c:1a:24:97:6a:d9:14:a9:b2:90:6a:aa:af:cc:b4:
a0:82:9e:f1:a0:33:81:b3:47:b3:f0:f2:27:91:e7:
d2:07:8f:08:f7:e2:12:1c:1e:bb:74:92:c0:4a:36:
7a:86:33:a9:29:26:56:3c:ac:81:87:64:b2:01:b2:
d6:4f:95:9f:1d:6a:8f:91:3b:32:f5:17:f4:90:f0:
95:c3:44:16:d9:9c:54:b1:e3:48:7e:a8:69:e4:b4:
93:23:e0:de:1e:0e:b7:ee:d7:8b:43:61:00:33:f6:
c6:0d:45:11:cf:ed:89:a9:56:21:e9:55:51:11:9c:
9f:eb:f0:f1:24:b8:f5:fd:f6:d1:29:80:d1:59:b8:
55:9d:81:98:2c:3c:09:f3:95:78:54:cd:4d:12:32:
1f:47:6e:05:43:42:e1:95:83:fb:5a:3c:b3:f2:e8:
99:69:09:a4:1f:1a:a4:69:bb:f2:3f:e4:21:40:ca:
e5:d7:e4:7d:61:6b:41:41:fb:85:9d:59:77:43:53:
7c:ed:79:2c:f0:12:63:2b:fe:84:13:7d:a9:69:d4:
16:2e:12:1b:f0:c0:9f:cc:3c:6b:e6:7c:43:13:58:
e9:89:06:0f:40:c8:82:ca:d4:75:cb:46:c2:86:3e:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C4:F7:61:80:4F:5E:4B:89:C3:ED:60:09:DE:EB:87:F1:DA:87:9E
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/x8T3YYBPXkuJw-1gCd7rh_Hah54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.84.0/23
81.23.92.0/22
IPv6:
2a12:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
43:44:78:e8:86:c0:94:24:b7:ea:cb:3e:5e:43:9c:c2:50:a5:
f4:81:51:b5:ec:19:1c:87:94:b2:1c:23:86:01:6c:fd:ff:fd:
1f:7a:a7:3e:95:f8:4a:6d:94:41:85:56:1e:52:db:bb:07:6c:
11:9f:ef:43:08:3e:0a:d0:63:32:7b:31:34:26:a1:74:dd:a5:
5f:cf:6d:c9:0f:5e:ec:42:00:e5:42:1e:65:41:41:cb:8c:80:
b0:3c:f8:ed:96:f9:e8:e2:ee:c1:ec:df:e5:d8:2d:d1:38:68:
17:ad:cb:c5:15:f2:4d:1b:ac:2e:90:07:c4:a8:66:fd:0e:b9:
3e:04:3d:48:31:42:52:bd:35:85:04:2e:2b:2e:cb:48:9c:cc:
4b:79:07:7b:d9:ee:57:b6:02:d8:d7:23:8b:2a:4b:60:aa:cb:
92:98:34:37:87:68:ab:f8:05:e4:1a:b3:24:67:41:da:b5:06:
84:24:c3:85:60:4b:1a:2d:90:f4:d1:49:1b:e3:7d:c0:3e:c6:
7c:d4:63:23:70:34:14:b3:a5:da:3e:96:4b:7a:27:1a:4c:6d:
04:9f:29:70:f2:2c:09:d8:3f:ed:41:b7:01:6a:b8:af:9e:36:
a8:7a:0b:6a:64:af:c9:c6:fc:ff:d7:96:4c:c7:81:c2:ca:a8:
c0:64:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org