Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0q4hVevEFS9gwreA5tV4lWn9ZQM.roa
File: 0q4hVevEFS9gwreA5tV4lWn9ZQM.roa (raw, json)
Hash identifier: 4hpx0v8if7xw2lkV1yLa4zo7z0oEbcaJWbMmKtlyxC8=
Subject key identifier: D2:AE:21:55:EB:C4:15:2F:60:C2:B7:80:E6:D5:78:95:69:FD:65:03
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183FAE93A3710A795656FEF9A18890C22DD
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0q4hVevEFS9gwreA5tV4lWn9ZQM.roa
Signing time: Fri 21 Oct 2022 14:18:52 +0000
ROA not before: Fri 21 Oct 2022 14:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29577
IP address blocks: 81.12.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:e9:3a:37:10:a7:95:65:6f:ef:9a:18:89:0c:22:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 21 14:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2ae2155ebc4152f60c2b780e6d5789569fd6503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:c7:e3:3b:d9:5a:ec:91:57:0f:0a:87:ef:
bc:89:12:ea:83:42:72:bd:15:a2:4e:2a:46:55:cc:
b6:ce:a2:54:71:9f:a5:7d:1a:89:ed:23:1e:1f:2c:
60:3e:e6:3d:54:83:48:d7:2d:f2:a4:d8:20:0b:3a:
d4:a4:8d:a8:ff:08:37:42:fc:ab:5c:58:44:89:ae:
5f:56:2a:7c:be:28:ad:b5:7a:47:ce:ac:b0:bd:61:
9c:7b:58:06:1a:67:b3:76:38:f0:ec:d9:fb:83:28:
d7:64:fd:80:8a:39:5c:37:6d:0a:ae:ac:e9:f5:d8:
12:52:c2:16:fb:0b:0d:5b:f8:a4:d9:18:62:12:de:
ea:0e:da:7b:59:21:78:e2:13:74:52:bb:8f:d0:4e:
81:32:90:bf:3f:17:be:7f:69:24:ae:02:e4:dd:37:
16:82:4d:f6:b9:97:ef:35:4d:5d:7d:3c:e3:c6:37:
07:81:4e:ca:18:df:86:96:db:b8:14:c5:8b:13:5c:
90:5f:14:6d:53:40:d5:bb:47:50:40:5b:6c:69:9c:
0b:4b:13:95:b8:b8:5e:69:fa:b1:6a:60:a7:da:4f:
3f:c2:2f:22:2c:e2:55:4b:c0:0b:07:a3:ef:c4:71:
7a:00:77:68:9e:9d:6d:7e:3f:ec:fe:72:26:fa:2c:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AE:21:55:EB:C4:15:2F:60:C2:B7:80:E6:D5:78:95:69:FD:65:03
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/0q4hVevEFS9gwreA5tV4lWn9ZQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.0.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:2b:20:58:26:13:9c:c0:db:a1:83:53:80:07:f5:c0:e1:be:
e7:9e:48:88:30:e0:72:b7:9b:dc:ea:2a:a0:bc:6f:5d:42:53:
6b:16:5c:54:53:02:39:a9:44:55:50:80:37:8f:9c:6d:46:09:
6b:aa:e6:9c:91:69:e0:7f:2f:ca:a7:62:e8:b1:d9:bd:fe:9d:
a5:c8:49:37:e3:6f:02:c6:62:87:93:b8:da:ae:47:19:df:b6:
6a:60:52:2a:ac:12:df:67:44:c6:7a:93:90:46:60:c8:b1:20:
d3:2b:21:ff:ea:01:36:2a:36:93:83:25:7f:7f:a2:ae:64:b6:
01:53:35:ea:8f:86:ea:36:71:6e:38:14:64:0f:39:b1:d5:3a:
da:aa:74:62:be:40:a9:3f:90:55:40:82:55:c9:70:36:35:71:
ab:72:24:97:f4:b5:80:cb:ac:11:a6:94:39:69:e9:23:bd:42:
44:9a:7c:92:30:59:5b:6b:f8:d2:41:41:9f:0a:c4:32:f2:82:
51:d9:3d:43:24:ae:63:ec:17:73:4d:10:5d:7b:0d:b5:f4:33:
e8:f5:b0:ab:04:76:cf:1d:b3:4a:e2:e6:1d:ee:73:fc:9c:bf:
9e:dd:76:59:2f:45:74:be:32:78:33:2d:4a:05:4a:03:1a:24:
95:33:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:07 2025 by rpki-client