Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/93kk-Gp2HaC7kknd1bzJWD2aasE.roa
File: 93kk-Gp2HaC7kknd1bzJWD2aasE.roa (raw, json)
Hash identifier: 9rXI50kgrrBmqwdAmNiGOXCvBhRD7l+6OiteIiglHiM=
Subject key identifier: F7:79:24:F8:6A:76:1D:A0:BB:92:49:DD:D5:BC:C9:58:3D:9A:6A:C1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0185056A733C8E3DFF2C3DF4C4B3BAF28EC6
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/93kk-Gp2HaC7kknd1bzJWD2aasE.roa
Signing time: Mon 12 Dec 2022 08:19:00 +0000
ROA not before: Mon 12 Dec 2022 08:19:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48944
IP address blocks: 81.12.112.0/22 maxlen: 22
81.12.126.0/23 maxlen: 24
87.107.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:6a:73:3c:8e:3d:ff:2c:3d:f4:c4:b3:ba:f2:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Dec 12 08:19:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f77924f86a761da0bb9249ddd5bcc9583d9a6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:40:75:c5:8b:31:84:0e:6e:0c:a7:e1:59:
7c:9a:2f:a4:de:5a:a6:2e:31:f9:fa:d7:ae:6f:91:
89:54:4b:01:61:12:85:23:9c:92:e3:05:40:13:79:
1b:40:5b:79:61:3b:58:71:29:21:33:f2:e3:ab:32:
56:34:e3:68:19:4b:b7:14:8e:28:ae:4b:a4:4f:2b:
e6:b8:88:46:e6:89:b8:db:ab:32:89:d0:46:ef:b2:
67:ca:74:12:aa:07:94:38:ba:54:8e:27:8f:18:0f:
fa:7e:83:46:34:28:55:61:d1:b8:5c:f5:ee:27:28:
cf:79:e9:0a:2c:52:91:8e:79:76:1a:4b:45:7a:9a:
51:9c:d2:a9:20:81:77:07:09:5b:63:16:d4:87:38:
dc:2e:c7:a7:b4:d4:dd:8c:b3:33:aa:24:87:64:f2:
b1:7c:84:6c:49:69:29:b6:41:a6:70:c4:0f:cb:2f:
be:4b:62:fd:60:4c:ff:04:2f:1c:03:2f:f5:6a:1e:
42:0c:35:00:25:d0:5b:03:9a:b6:1c:55:8e:c8:50:
c4:50:0b:9e:34:5e:c7:86:d1:f4:22:d4:15:97:37:
a9:d9:5a:d5:85:49:ac:3e:26:9d:03:f2:18:c7:22:
0d:49:d4:5c:26:2f:b5:2d:d3:a7:1b:cf:31:ac:dc:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:79:24:F8:6A:76:1D:A0:BB:92:49:DD:D5:BC:C9:58:3D:9A:6A:C1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/93kk-Gp2HaC7kknd1bzJWD2aasE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.112.0/22
81.12.126.0/23
87.107.176.0/21
Signature Algorithm: sha256WithRSAEncryption
10:50:10:e0:32:4e:39:56:9e:7b:6f:78:b3:68:be:3f:9e:09:
c3:54:3d:5f:c2:20:71:f8:9d:2a:33:e8:e7:fe:70:ec:ae:75:
e9:62:d5:0b:1e:aa:a6:64:f7:9b:a2:5e:fc:4a:45:04:f5:43:
42:76:54:c0:89:d7:b7:8f:11:c6:cc:c2:bc:b1:35:b6:cc:fd:
50:50:88:18:7e:99:1b:b2:8c:6e:1c:f1:6c:ec:89:31:62:04:
07:9c:b0:28:4a:a8:8f:27:ec:aa:f8:8a:0b:62:6b:db:8e:a9:
22:90:78:8c:ee:64:62:a3:ad:8b:cf:24:41:6d:c1:82:e1:22:
dc:fe:3d:a9:05:8d:82:30:e6:a4:08:15:2b:3f:70:2b:f8:cc:
9e:32:d9:23:38:dd:5b:5e:90:bf:38:af:a1:64:24:58:4c:04:
13:34:34:4f:be:39:6e:cb:dc:dc:70:c0:cd:f5:61:ed:90:f3:
0a:44:a6:21:bc:4e:7e:d0:22:78:14:87:b8:99:4c:97:44:5a:
6b:16:bd:c8:24:e4:77:f6:ee:ae:a1:fc:3f:37:5a:fe:56:27:
af:18:8c:51:82:4a:f7:76:76:71:8b:5d:cf:cc:12:53:45:cb:
f4:15:56:9b:b7:eb:66:27:f2:4c:c2:a6:3b:a4:3f:57:c8:89:
f0:cc:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org