Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o13Jr02kK7H_Daf-r3Spb1FO_h0.roa
File: o13Jr02kK7H_Daf-r3Spb1FO_h0.roa (raw, json)
Hash identifier: mTc/4cP6bXy/7Em44W/b3HOwqYG5D/+ezcamb69lF68=
Subject key identifier: A3:5D:C9:AF:4D:A4:2B:B1:FF:0D:A7:FE:AF:74:A9:6F:51:4E:FE:1D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37AFB48C
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o13Jr02kK7H_Daf-r3Spb1FO_h0.roa
Signing time: Sat 01 Jan 2022 08:55:53 +0000
ROA not before: Sat 01 Jan 2022 08:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204834
IP address blocks: 87.107.94.0/24 maxlen: 24
87.107.95.0/24 maxlen: 24
87.107.94.0/23 maxlen: 23
81.12.92.0/23 maxlen: 23
81.12.92.0/24 maxlen: 24
81.12.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934261900 (0x37afb48c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a35dc9af4da42bb1ff0da7feaf74a96f514efe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:5e:51:4c:06:bc:1b:cf:ca:35:21:4c:85:
f3:c4:4b:76:94:78:bc:ea:8e:c6:dd:27:97:83:d0:
f2:0e:ab:5a:01:f0:70:a1:a7:d0:10:26:5f:0d:5b:
bc:8c:e2:9c:57:e7:a5:78:a4:05:4b:9d:06:6d:5c:
c2:13:66:80:0a:84:4e:93:22:c4:5d:59:7e:b6:80:
57:43:03:1e:a5:47:47:3a:b7:9f:64:f5:07:7c:96:
84:fe:69:59:26:74:b5:41:56:e4:60:39:47:8f:65:
8b:4d:04:d0:7b:f2:20:3d:04:a0:ef:cd:a6:15:a0:
2d:f9:0e:bd:61:6b:5b:0c:24:fa:55:74:03:56:88:
7b:76:32:2f:bd:c7:cf:5d:03:16:95:a5:22:29:40:
d9:7f:e2:73:79:c6:69:99:b8:9a:65:5f:2e:b3:c6:
67:3b:92:97:f2:3f:0a:dd:c7:59:7f:ba:11:7d:79:
fc:95:42:5c:81:9c:28:51:98:54:e0:da:98:d8:06:
e2:52:fe:f9:ff:be:b2:69:31:c4:8d:64:27:e0:48:
a2:2a:91:3d:8a:e9:9e:d1:8f:0b:86:57:81:a6:8c:
5e:5d:f6:81:e1:2f:8f:f0:4d:54:90:09:6d:8e:d4:
6c:1c:7b:da:da:39:45:4d:cd:db:8d:2f:b2:ed:75:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:C9:AF:4D:A4:2B:B1:FF:0D:A7:FE:AF:74:A9:6F:51:4E:FE:1D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/o13Jr02kK7H_Daf-r3Spb1FO_h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.92.0/23
87.107.94.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e8:42:0a:ca:88:6d:f1:b4:b3:01:2d:28:98:62:a4:a9:89:
dc:81:30:7d:73:6c:c2:cc:c4:9c:37:bb:78:d8:51:e5:b3:67:
31:e8:0a:10:0c:a0:38:11:37:f3:c9:43:89:58:91:13:42:34:
4f:45:33:9f:15:73:6a:41:51:f1:85:9e:c4:c8:c4:b0:7f:ad:
94:c5:b6:ea:e4:18:60:fa:56:f3:7d:05:46:25:a2:1c:1a:f6:
8b:9c:37:d9:6b:0a:bd:f5:71:fe:a0:6e:7e:24:5c:cc:93:0c:
2d:13:e8:a6:70:84:45:84:a5:2f:ca:42:d2:14:42:6f:0a:7d:
54:11:1c:26:85:0b:fd:fd:d7:da:88:ab:59:42:c4:13:dd:fe:
3b:0a:7d:97:14:b5:50:0c:d5:ec:68:4a:bc:f7:33:32:0e:da:
6a:7b:ac:10:fc:e3:85:87:b0:56:69:ae:5e:a6:07:ae:46:db:
42:28:2a:87:22:e9:24:c1:35:ec:60:dc:b2:bf:87:dc:27:05:
7e:af:f7:18:fd:29:e5:ad:a6:0e:36:5d:2f:7b:05:cc:96:bb:
3a:92:ae:d2:65:d7:7d:74:b3:46:78:33:55:da:7e:77:9d:4a:
ad:a8:78:67:4f:40:25:ea:5f:17:86:58:cc:7f:3c:24:dd:1e:
41:af:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org