Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/_fAykEXNXX0sJXDzrzj6LWvlTx0.roa
File: _fAykEXNXX0sJXDzrzj6LWvlTx0.roa (raw, json)
Hash identifier: MNkAs7JVREkx+G4xiToERTY36PGU5WZbgtND9flRmT8=
Subject key identifier: FD:F0:32:90:45:CD:5D:7D:2C:25:70:F3:AF:38:FA:2D:6B:E5:4F:1D
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 1AA8D002
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/_fAykEXNXX0sJXDzrzj6LWvlTx0.roa
Signing time: Sat 01 Jan 2022 06:52:03 +0000
ROA not before: Sat 01 Jan 2022 06:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49036
IP address blocks: 81.94.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447270914 (0x1aa8d002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 06:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdf0329045cd5d7d2c2570f3af38fa2d6be54f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:92:69:e0:97:73:c1:ed:f2:b8:5f:2f:a1:
34:02:5a:20:cf:bd:e8:5b:f7:be:7a:00:06:b4:af:
e2:2d:be:a7:cd:df:ae:c7:ee:7b:ff:28:e7:b1:a4:
a4:5a:3c:0b:29:ec:e0:3c:9a:41:17:d7:28:2f:3d:
c8:d9:60:67:c4:e9:92:36:14:92:5e:d0:0e:ea:79:
da:cc:4b:d3:8c:b4:1a:9e:d4:2e:83:c7:8f:07:72:
5b:80:ac:46:e9:e2:2b:30:1d:13:18:8a:81:93:b8:
10:53:09:bf:96:9a:ad:4c:50:a1:e8:9c:f0:1c:f7:
8c:29:62:46:d2:f9:04:4b:05:2d:99:b5:45:0c:f9:
d0:10:35:37:d4:19:e4:20:7e:9d:3f:a2:68:11:60:
2c:ca:b7:55:3d:fa:21:85:2b:18:91:c8:a0:0e:14:
95:f5:96:12:5a:a3:c6:63:8a:bc:28:a1:92:89:67:
33:8d:17:cc:84:db:53:ee:31:7e:d0:e6:66:da:11:
af:7d:2c:aa:7f:ea:91:72:1f:97:d5:95:ef:d4:b1:
db:90:72:ff:88:a0:f9:1a:64:a6:52:93:69:fe:f7:
53:2c:a9:09:0e:fe:0b:74:b7:12:a7:2a:d6:1c:81:
e5:98:5f:f5:84:33:1c:69:db:0c:62:cf:81:8e:85:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:32:90:45:CD:5D:7D:2C:25:70:F3:AF:38:FA:2D:6B:E5:4F:1D
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/_fAykEXNXX0sJXDzrzj6LWvlTx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.238.0/24
Signature Algorithm: sha256WithRSAEncryption
36:73:53:5b:87:a3:96:21:36:65:61:0a:52:c7:3e:aa:85:e9:
60:46:b2:e4:53:97:8b:71:c2:ed:6b:19:8a:90:92:af:57:d9:
21:fc:17:18:e7:40:49:a9:dc:55:8e:85:a3:80:40:aa:68:d7:
96:ef:35:f7:49:35:26:8a:67:29:f5:78:7e:e9:25:53:4d:03:
74:6e:92:bc:52:02:75:04:2f:69:fc:f4:8a:f6:ce:d7:21:ac:
ca:45:34:24:fc:44:d7:70:79:f6:df:c8:66:85:16:89:38:c0:
eb:3c:00:02:4f:39:95:f0:ec:a7:09:e9:c1:bd:bb:19:74:27:
70:c4:4f:9b:f8:48:b0:c2:3a:ae:fb:6f:d3:a9:f9:ae:1c:1c:
7b:6c:74:45:40:49:03:fe:6c:50:c4:11:6f:b4:e5:91:86:77:
2f:5b:b6:80:20:2b:07:34:59:bb:b4:2d:fb:2e:e6:fb:e4:be:
ce:33:e2:cb:93:94:11:5d:fe:8f:0e:38:2d:da:0b:81:4f:6e:
de:b6:69:d5:14:0d:05:fd:2b:e5:de:24:46:b9:92:43:8c:f3:
ba:c6:18:9d:96:be:63:a6:b1:b1:fc:4f:00:ab:01:64:5d:b0:
54:17:1c:b5:95:cf:e4:9c:a7:6c:7a:8b:aa:d4:a6:dc:e2:f0:
57:6b:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:59 2023 by rpki-client on console-fra.rpki-client.org