Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/tzt4ICfpHvGvEmd-krQibu1tmro.roa
File: tzt4ICfpHvGvEmd-krQibu1tmro.roa (raw, json)
Hash identifier: c4rPvWiZhAHvoQohbs4aOvuAwK2c7mrWpuon18ckF/c=
Subject key identifier: B7:3B:78:20:27:E9:1E:F1:AF:12:67:7E:92:B4:22:6E:ED:6D:9A:BA
Certificate issuer: /CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Certificate serial: 37B9BA6E
Authority key identifier: E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/tzt4ICfpHvGvEmd-krQibu1tmro.roa
Signing time: Sat 01 Jan 2022 04:02:04 +0000
ROA not before: Sat 01 Jan 2022 04:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21470
IP address blocks: 81.17.64.0/20 maxlen: 20
81.17.76.0/24 maxlen: 24
91.102.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934918766 (0x37b9ba6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6153fcea19f1d49faf3e47e989db6bf5e6fe5a9
Validity
Not Before: Jan 1 04:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b73b782027e91ef1af12677e92b4226eed6d9aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:93:ca:e9:5a:0b:b1:4c:a3:bf:45:4f:00:
52:64:03:98:cd:14:f5:ce:18:c0:f9:f3:0d:97:9c:
3a:b1:e6:e5:e5:d3:04:78:74:e8:a4:69:38:de:c0:
e2:b8:a2:79:35:a2:d1:d9:dd:c4:d9:d7:0d:cd:62:
69:f4:f9:c1:6c:14:dc:53:6e:80:c5:6b:eb:ac:4a:
65:87:c2:c7:b0:dd:33:50:e9:bf:54:fc:7d:b3:ec:
ee:eb:e7:44:29:da:f0:bc:ef:d6:03:0d:39:ae:fd:
4a:3d:e5:e9:2a:d4:c7:28:c3:c1:8b:64:a1:9f:ef:
49:03:dd:41:9f:ea:cb:fc:33:66:8b:ee:1f:26:1e:
67:b7:42:b5:fe:bf:e3:6a:ce:7a:04:29:bf:0e:15:
19:c5:69:73:b2:05:20:97:ba:e0:f3:90:6c:16:2a:
b6:d3:ff:6b:12:03:d3:f7:a7:ba:8c:11:f3:6a:d4:
bd:e0:15:fe:eb:9a:bc:f1:2b:37:7b:dd:54:0d:cb:
1b:cb:63:cb:2a:99:ae:98:3a:e9:a8:9c:4c:be:dc:
59:ad:bb:18:ba:54:05:79:1a:7c:81:3a:c5:66:9c:
76:ab:ab:0b:50:6f:7e:af:fc:57:93:bd:74:cf:08:
a9:81:c2:50:f4:a0:ed:c6:9b:00:c0:ad:36:7a:48:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:78:20:27:E9:1E:F1:AF:12:67:7E:92:B4:22:6E:ED:6D:9A:BA
X509v3 Authority Key Identifier:
keyid:E6:15:3F:CE:A1:9F:1D:49:FA:F3:E4:7E:98:9D:B6:BF:5E:6F:E5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hU_zqGfHUn68-R-mJ22v15v5ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/tzt4ICfpHvGvEmd-krQibu1tmro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4bb0e2-c9ef-424c-93d3-f9d1f26d29d1/1/5hU_zqGfHUn68-R-mJ22v15v5ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.64.0/20
91.102.0.0/21
Signature Algorithm: sha256WithRSAEncryption
91:cc:df:45:75:6f:e1:88:ff:31:dc:64:70:2d:df:97:2d:56:
ff:57:45:d9:4a:4b:71:8b:96:72:a3:43:e1:5e:f4:6f:14:05:
fa:91:b1:67:01:2e:47:2b:d1:9d:bf:53:ba:59:9c:21:e1:a1:
1d:5b:8a:87:1a:60:06:e5:a1:e7:38:ae:66:bd:24:bf:a3:3c:
41:be:13:8b:55:27:4b:23:0c:8b:7b:c0:c8:1a:05:f7:6f:bb:
ca:4f:50:04:5d:ec:bd:42:a0:e6:1d:15:73:2c:54:b8:6c:a2:
e8:76:1f:cc:ed:93:ac:35:c3:fb:a6:50:78:65:5c:a3:58:30:
f0:83:77:52:b9:d2:ec:6d:f4:83:21:aa:4d:d9:01:9e:7b:d3:
42:2a:70:63:ed:4e:1e:f2:71:9d:72:f6:98:b3:35:fa:a2:08:
92:db:e6:86:a8:d7:dd:e4:5e:c3:27:e1:0a:ca:99:27:65:53:
f8:14:6d:2a:5a:a9:ac:ef:e8:4e:b6:c2:29:c9:99:4e:8b:07:
41:f0:2b:f0:bb:45:cc:e9:70:14:67:57:b7:80:d7:5f:7b:55:
ab:8d:21:17:84:19:69:0e:d9:47:25:0a:c5:cd:81:2b:af:8f:
8f:06:45:83:82:00:c2:3a:82:4c:09:70:39:62:7f:fc:df:50:
cf:16:00:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:16 2023 by rpki-client on console-fra.rpki-client.org