Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/0s6VqfQXGloWgfIU-lSwLAmitTI.roa
File: 0s6VqfQXGloWgfIU-lSwLAmitTI.roa (raw, json)
Hash identifier: DEGLgn1uBeI8loncsEQD6RvaX20FPkjQXhupHdCh3gE=
Subject key identifier: D2:CE:95:A9:F4:17:1A:5A:16:81:F2:14:FA:54:B0:2C:09:A2:B5:32
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 160FCA1C
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/0s6VqfQXGloWgfIU-lSwLAmitTI.roa
Signing time: Sat 01 Jan 2022 11:58:40 +0000
ROA not before: Sat 01 Jan 2022 11:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43131
IP address blocks: 81.161.226.0/24 maxlen: 24
2a03:e842::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370133532 (0x160fca1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jan 1 11:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2ce95a9f4171a5a1681f214fa54b02c09a2b532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:e6:c8:fe:81:20:2e:8c:c1:30:d4:e2:40:
5a:0a:b4:4e:90:60:6f:4e:53:87:03:ca:2f:40:63:
db:e8:0c:44:ee:b4:f2:a6:58:f6:e9:3f:31:48:09:
1d:34:59:a3:7c:f1:ae:48:ca:1a:ec:9c:77:d4:d4:
3b:4b:98:67:63:da:00:12:ee:ed:76:20:78:90:32:
58:01:40:86:95:dd:23:75:8d:1a:0b:03:95:63:f0:
d0:67:e5:77:8f:10:cc:de:16:07:15:81:e6:f8:71:
74:97:64:8d:cb:e7:2a:c0:d3:1c:f6:e7:50:a8:4a:
12:ac:37:40:6d:49:34:c0:df:4d:6d:68:44:88:67:
d4:89:be:e1:e4:51:e6:97:90:26:15:1a:37:71:ef:
b4:ab:d7:da:be:b1:bf:9a:59:c6:22:4c:58:bd:53:
c2:9e:0c:83:0c:d8:ec:f4:30:f9:0a:cf:64:fb:ee:
4b:e8:63:0b:08:27:15:fe:6c:4d:ed:a6:d3:77:2f:
d2:2f:82:f0:c8:bb:b1:07:af:ed:69:8f:3c:9b:b1:
ce:59:98:6d:86:7e:9e:d5:09:36:2e:d6:fc:b9:90:
83:9a:c3:eb:a2:cd:31:39:93:60:70:62:5b:5a:8f:
2d:58:b2:0b:5b:47:2c:03:15:35:d0:fe:cc:50:15:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:95:A9:F4:17:1A:5A:16:81:F2:14:FA:54:B0:2C:09:A2:B5:32
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/0s6VqfQXGloWgfIU-lSwLAmitTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.226.0/24
IPv6:
2a03:e842::/44
Signature Algorithm: sha256WithRSAEncryption
32:8c:a2:ad:83:8f:da:61:9f:9d:6f:5a:96:ed:f5:8d:2d:3e:
42:14:53:86:0a:3c:80:8f:f0:06:b0:1d:1e:45:18:eb:41:67:
54:bc:f0:c5:08:c1:a3:df:4f:47:5b:35:11:e3:37:f1:94:de:
92:12:48:af:17:5f:16:80:3c:4d:4b:29:7f:7e:02:30:5a:6f:
c3:d2:22:a5:74:cd:7f:eb:33:71:fb:7f:32:80:dd:b8:84:0e:
e8:55:b3:8c:23:06:17:d6:5b:2c:08:48:a8:32:21:60:c6:94:
a3:b2:a2:51:5c:01:65:d9:e0:de:30:32:1d:3f:0d:b9:7d:60:
40:04:9e:66:0f:11:c3:a5:d2:28:52:43:35:ec:7c:d9:63:9b:
d7:0e:1a:bd:88:49:ad:b2:cb:e2:d2:df:0a:aa:83:f8:a0:ee:
7d:da:ed:3d:11:63:9c:17:d2:cd:d8:b1:26:10:96:a2:82:a5:
bf:dd:2c:9e:5b:28:06:da:b9:c5:84:b1:9d:2a:4a:59:b5:75:
ab:21:71:95:4a:6d:be:44:2e:2c:19:e2:38:0f:41:bb:2f:50:
2e:16:36:15:81:3d:15:b4:bb:3d:d3:4b:41:13:f5:ad:55:6c:
f3:5a:ff:4d:dd:bf:14:fb:61:8e:fb:4f:82:41:8b:ce:20:ed:
1a:af:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:35 2024 by rpki-client on console-ams.rpki-client.org