Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/sg9nXHafCV_KJRagye4SFqaIbOs.roa
File: sg9nXHafCV_KJRagye4SFqaIbOs.roa (raw, json)
Hash identifier: E1r2hZlE/ebPtubzfCtSq0iZfk3+ihmCMg4cNdMnXoU=
Subject key identifier: B2:0F:67:5C:76:9F:09:5F:CA:25:16:A0:C9:EE:12:16:A6:88:6C:EB
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 38CDE018
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/sg9nXHafCV_KJRagye4SFqaIbOs.roa
Signing time: Sat 02 Apr 2022 11:24:36 +0000
ROA not before: Sat 02 Apr 2022 11:24:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24991
IP address blocks: 81.93.192.0/21 maxlen: 21
81.93.202.0/23 maxlen: 23
81.93.201.0/24 maxlen: 24
81.93.204.0/22 maxlen: 22
2a03:da00:1000::/36 maxlen: 36
2a03:da00::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953016344 (0x38cde018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Apr 2 11:24:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b20f675c769f095fca2516a0c9ee1216a6886ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:67:e0:ee:bb:51:ba:98:a7:66:19:84:a0:
0a:67:0c:94:9a:4f:e7:f0:10:c3:f6:c5:55:4d:2f:
ac:fa:62:50:e0:49:6b:2d:18:d2:85:e6:b9:f4:5e:
55:2e:e6:ec:dc:8c:66:22:5f:b1:3c:e3:ad:9e:bf:
ee:6a:1d:0d:5e:80:a0:6b:1c:32:5e:40:47:71:c5:
57:75:99:96:2b:da:ee:10:92:0f:5c:b1:4c:db:43:
dc:05:3d:8e:0a:87:e9:f8:bd:06:57:f1:8f:18:cb:
93:71:15:f3:cd:ec:d0:5e:8b:b0:60:ab:3c:6b:15:
63:73:51:d3:c4:dd:2c:e9:76:64:f5:49:27:40:31:
8e:fa:fa:b0:67:0c:24:72:c8:68:c2:33:3f:6b:69:
b1:ea:6e:df:7a:28:7e:9c:53:ad:dc:42:25:51:f1:
5e:42:a6:f9:e6:21:de:12:a7:3c:93:3f:89:82:8c:
32:4d:89:87:14:f1:04:50:f3:be:6d:5a:31:5a:8f:
4f:9c:55:c3:51:10:14:d6:a1:1b:5f:45:c1:7d:99:
86:f5:50:0a:6b:90:ca:1e:ac:db:fc:ab:b9:9a:e0:
d2:51:8a:3b:86:78:c5:37:76:62:37:24:1a:0b:dd:
f2:4f:a2:a0:25:11:25:b6:1b:d4:a1:07:f1:b6:21:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0F:67:5C:76:9F:09:5F:CA:25:16:A0:C9:EE:12:16:A6:88:6C:EB
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/sg9nXHafCV_KJRagye4SFqaIbOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.192.0/21
81.93.201.0-81.93.207.255
IPv6:
2a03:da00::/35
Signature Algorithm: sha256WithRSAEncryption
28:27:20:71:73:95:c4:ed:ca:63:61:60:35:97:b9:dd:92:cf:
56:f7:bd:19:bb:27:f3:51:7f:bc:60:7c:d9:aa:2e:17:06:ce:
a4:6f:76:a3:0c:e4:2a:f0:cc:f1:54:f6:b2:40:94:fe:eb:ba:
00:ed:73:68:82:41:9b:15:d2:af:c6:23:af:3d:9f:b3:54:77:
9b:c9:68:d4:02:9d:d0:0a:5c:17:42:d4:fc:e9:1b:68:18:c2:
6b:45:92:14:30:5f:69:e4:c2:3e:94:d8:45:24:ac:51:40:00:
e4:f6:d0:27:73:e0:b9:cc:62:5b:85:d7:5e:35:20:f8:59:06:
d4:4e:bf:6d:7d:71:4c:04:76:2c:e8:f3:85:0b:96:3d:7e:b3:
c3:80:0e:d5:31:bd:12:18:9a:df:03:6e:93:28:42:4a:49:d8:
78:47:79:7a:cc:da:69:90:ad:9d:a8:64:c3:f8:b8:78:3b:4c:
53:46:a6:79:92:b3:53:44:51:16:04:ed:fa:0a:31:9b:ab:86:
d4:c3:fe:80:4a:b3:5d:2c:c8:bf:af:26:3c:22:62:de:7a:f1:
c7:f6:39:6a:5f:7a:ad:a4:16:f7:ba:6e:90:61:c0:d6:cf:a9:
31:bd:51:66:b2:04:70:96:8f:f8:92:e7:48:d7:b9:b8:88:6f:
97:3d:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:44 2024 by rpki-client on console-ams.rpki-client.org