Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AIWxgUxqAQFDJEVV5ay6smiLKOw.roa
File: AIWxgUxqAQFDJEVV5ay6smiLKOw.roa (raw, json)
Hash identifier: M5Pkzyc722hyizeh7HpADygBDukb38udsUpbBCdPndI=
Subject key identifier: 00:85:B1:81:4C:6A:01:01:43:24:45:55:E5:AC:BA:B2:68:8B:28:EC
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0185589C1521800E93D4CFE614E33417A395
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AIWxgUxqAQFDJEVV5ay6smiLKOw.roa
Signing time: Wed 28 Dec 2022 12:01:42 +0000
ROA not before: Wed 28 Dec 2022 12:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48944
IP address blocks: 81.12.112.0/22 maxlen: 22
81.12.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:9c:15:21:80:0e:93:d4:cf:e6:14:e3:34:17:a3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Dec 28 12:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0085b1814c6a010143244555e5acbab2688b28ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:12:4c:20:61:e8:5a:4e:ef:25:65:05:3a:
3a:70:12:d1:39:66:1f:26:b0:1a:2f:1a:60:c7:ec:
5e:1c:9b:81:74:7d:26:3a:6c:0b:c8:75:55:53:a4:
cc:1c:65:4a:36:86:cf:23:46:fb:e4:d1:56:60:31:
d4:65:f3:a3:59:65:04:d4:b7:b1:27:6b:b6:8a:74:
11:79:8c:20:b3:6c:95:b9:c6:07:44:04:cd:ed:38:
6f:98:99:81:ac:72:50:b4:11:4f:73:5a:2f:73:29:
bc:14:8a:ed:e5:f2:a5:4e:13:d8:02:2d:c7:27:e6:
1c:fe:dd:8c:e8:3a:23:8e:69:18:a1:59:cb:da:05:
a3:3f:fe:e6:b8:bc:d4:b5:72:c4:06:fd:cd:2b:26:
11:36:9f:e5:21:b3:f3:b2:15:10:2b:ad:dd:f3:25:
e3:00:d6:d4:91:95:70:81:76:c4:17:a9:51:7d:bc:
96:ba:a6:8f:cf:21:df:a6:e5:15:52:83:af:89:25:
02:40:09:c2:b7:06:18:3b:4d:5b:8a:ab:fc:ce:05:
9d:2a:60:e3:d6:ac:bd:9c:67:bc:90:0f:76:94:c9:
e2:5f:fb:6e:ef:7b:14:0e:da:85:da:f5:96:ce:c0:
3f:2c:4f:78:53:86:0d:8a:23:af:1e:c2:f3:ca:09:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:B1:81:4C:6A:01:01:43:24:45:55:E5:AC:BA:B2:68:8B:28:EC
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AIWxgUxqAQFDJEVV5ay6smiLKOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.112.0/22
81.12.126.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f4:11:fe:dc:40:09:5e:84:bd:0d:c4:3c:4d:55:10:fe:3c:
c0:1d:0f:5a:9a:f6:ef:4c:1a:a0:09:04:c6:c6:20:d4:5e:8d:
6d:b1:c8:41:fa:57:bd:d4:42:3b:90:8a:ff:38:d0:d6:f0:e2:
7b:ea:b5:5b:17:1e:e3:65:75:a5:56:1c:ab:b4:b9:92:81:3d:
6c:62:52:1a:76:0f:9d:f2:b0:09:45:fc:1f:ff:3a:61:41:91:
25:67:6f:7f:40:43:f7:99:81:65:ca:b3:ed:dd:c0:3f:69:bf:
7a:5a:ab:fe:f3:07:54:3e:68:59:3a:d5:c0:1b:36:cb:24:e2:
0b:56:f1:47:7b:58:af:5f:2d:fd:c7:cd:67:75:b9:8b:cc:c8:
bb:9a:6e:65:b6:fe:75:e3:0d:9f:af:bb:ed:09:e9:07:1a:71:
9d:65:86:89:5a:77:63:ea:d2:e0:9a:ec:3b:bf:8c:10:3e:21:
36:0e:2c:8d:9a:83:a1:46:66:4b:d6:73:a6:3f:93:9b:57:46:
71:82:a5:d6:ef:e9:39:70:41:1e:71:b5:d2:90:ab:64:cf:a1:
7b:d7:49:d0:ee:40:c0:20:57:ca:60:a7:f1:18:fb:3f:db:ec:
a7:32:a7:7f:36:28:34:ae:73:0f:c5:2a:0e:a1:60:5b:17:e3:
44:8b:7f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org