Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kt1us5UxheJRRjd1A1uTz4xw8Ug.roa
File: kt1us5UxheJRRjd1A1uTz4xw8Ug.roa (raw, json)
Hash identifier: 6vQu+HILzL1JCREI31EDcdZcEqE60Hb3BLa+A661tuU=
Subject key identifier: 92:DD:6E:B3:95:31:85:E2:51:46:37:75:03:5B:93:CF:8C:70:F1:48
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 379A9069
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kt1us5UxheJRRjd1A1uTz4xw8Ug.roa
Signing time: Sat 01 Jan 2022 08:55:42 +0000
ROA not before: Sat 01 Jan 2022 08:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6736
IP address blocks: 81.12.12.0/24 maxlen: 24
87.107.117.0/24 maxlen: 24
87.107.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932876393 (0x379a9069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92dd6eb3953185e251463775035b93cf8c70f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:b9:3a:de:09:67:8a:1b:3e:9c:19:22:2a:
a3:3a:f7:fc:99:3f:bb:b5:5d:74:bc:36:43:eb:c3:
01:b8:4c:bd:5a:26:e4:03:13:56:fa:da:fc:30:8f:
70:40:e9:19:1c:5f:c5:95:69:a1:86:72:81:f1:35:
90:f3:e1:28:6a:d2:43:bc:fb:14:44:e0:34:8c:03:
7a:99:1c:cd:bf:c9:84:28:00:f2:f5:8b:03:20:ea:
3b:51:0c:87:ea:b6:07:37:47:15:49:82:70:07:f2:
5a:ee:1a:94:ab:92:b9:90:12:9d:af:26:f0:e9:c6:
04:d0:d8:d8:d3:0b:39:62:c4:db:76:48:e9:36:35:
46:fb:17:1b:f8:b8:31:7e:b2:7b:11:dd:22:d9:56:
4e:a6:e2:97:60:1d:86:3c:e1:cf:f7:60:30:b9:0b:
43:6b:88:80:b1:8a:6b:ec:ef:00:52:a9:d7:41:b9:
4d:cb:fd:87:0e:74:3a:b7:0f:8c:4f:6b:e0:0b:f1:
59:9e:57:f4:a9:5c:2e:ff:47:ac:37:d2:f5:c2:90:
f4:65:90:f8:29:4f:df:5e:4b:83:cf:2d:6d:11:89:
9b:98:98:ee:20:ad:f4:e7:19:ee:6a:d4:71:27:c4:
48:02:c2:99:1f:c9:c3:63:bf:8c:a8:3f:04:79:44:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:6E:B3:95:31:85:E2:51:46:37:75:03:5B:93:CF:8C:70:F1:48
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/kt1us5UxheJRRjd1A1uTz4xw8Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.12.0/24
87.107.116.0/23
Signature Algorithm: sha256WithRSAEncryption
05:cc:03:71:ec:e7:69:a1:b5:73:bf:4f:79:49:12:c3:ab:35:
16:11:43:b8:03:fb:a0:63:29:56:6d:2e:57:8f:2b:50:c4:da:
15:fa:c9:ce:4c:9c:69:6b:9c:2e:2b:1c:6e:f7:08:34:25:d8:
c2:d6:82:7a:fe:e0:11:0f:6b:4a:c4:8b:f8:06:42:f0:5f:3c:
7b:c2:23:26:94:d6:53:3d:45:47:24:8f:0f:de:be:a7:05:9c:
7c:a2:d5:63:24:85:a9:5c:47:97:ea:a2:a2:98:7d:37:ff:91:
c9:36:bc:0d:8c:13:2b:a5:06:ea:a9:99:e8:f9:a6:e4:29:84:
34:d9:7d:13:fa:4f:c4:a5:14:83:b1:ab:85:f2:d9:7e:38:8c:
ad:b6:c5:c4:88:c5:fd:4e:e9:99:43:f1:30:37:b5:d0:20:19:
58:c1:6d:4f:95:cb:62:b1:6e:12:a6:29:f3:6e:b0:da:94:98:
21:5c:1c:a9:de:8f:01:9c:a9:56:30:3d:d4:36:d2:a7:69:10:
0a:95:b8:b8:79:ee:f4:02:61:9d:32:22:27:91:a9:6d:26:b6:
c5:d8:32:4d:4d:90:19:78:74:e7:c1:58:89:65:6d:40:11:41:
46:83:a4:4d:f9:fd:98:d5:2d:ae:b8:39:bb:d5:42:75:b3:e7:
43:8f:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org