Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z1maGl-jD9nVLEEVulSau8QZX8E.roa
File: z1maGl-jD9nVLEEVulSau8QZX8E.roa (raw, json)
Hash identifier: XWBp+9opW6GRTnPVaLi9Mip3YwccxeYNG5I6+xyfQG0=
Subject key identifier: CF:59:9A:1A:5F:A3:0F:D9:D5:2C:41:15:BA:54:9A:BB:C4:19:5F:C1
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 380F0725
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z1maGl-jD9nVLEEVulSau8QZX8E.roa
Signing time: Tue 08 Feb 2022 09:09:39 +0000
ROA not before: Tue 08 Feb 2022 09:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202251
IP address blocks: 81.12.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940508965 (0x380f0725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Feb 8 09:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf599a1a5fa30fd9d52c4115ba549abbc4195fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:41:f8:7e:0d:83:14:94:e7:20:51:f8:1d:
0c:7e:0c:c8:8b:dc:a6:22:c3:e4:1b:75:53:95:68:
95:c6:e4:49:3f:ec:8d:a0:07:a1:a5:7a:ff:c1:71:
fb:17:ac:c8:6e:f7:7e:6e:b8:7a:ee:3c:c0:ae:1c:
5b:01:03:c8:0b:fa:db:a1:b7:86:27:2d:83:40:94:
71:d9:59:ea:b9:96:65:58:b8:14:6d:be:66:d1:51:
12:f7:95:5c:8a:6c:1f:cd:4d:b2:50:f0:7a:37:5a:
ba:ff:99:25:84:3c:c5:a6:3a:e3:75:b2:c2:59:5c:
bb:31:fa:d5:52:07:9b:ec:c1:34:d2:9b:da:38:ab:
60:d6:ce:92:99:25:c1:d5:22:62:05:4c:ed:b5:d0:
b2:e0:9e:83:5a:78:f7:c1:ba:a7:91:8f:48:c6:69:
48:da:35:fa:bb:33:4c:52:76:4b:9e:72:2a:4c:5f:
89:98:2b:ec:8b:4c:fa:4b:2a:42:24:b6:e9:9e:3b:
1b:7b:73:39:df:cb:dd:a7:e4:c8:bd:2b:75:d8:1f:
d5:68:5a:6f:45:4c:93:ea:60:5f:27:db:a1:25:d4:
0b:b0:dc:c8:5d:14:a9:13:9f:3f:4a:16:57:ca:67:
94:70:1f:44:6a:cd:6a:60:3c:fb:b8:8a:06:a9:1b:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:9A:1A:5F:A3:0F:D9:D5:2C:41:15:BA:54:9A:BB:C4:19:5F:C1
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/z1maGl-jD9nVLEEVulSau8QZX8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:21:ae:b5:9d:90:74:e4:fc:d0:3d:0f:d0:9f:d0:a4:c4:ee:
29:5b:c0:b9:40:63:4e:29:cb:91:08:a4:de:f3:25:04:22:c6:
70:a7:e4:43:a7:c8:b7:eb:51:56:d6:78:96:9a:59:2d:bc:bb:
cf:ed:c6:74:e8:73:ba:3e:4a:9a:bf:40:0c:3a:f3:17:e9:58:
00:41:82:af:bd:55:f4:5c:12:33:aa:9e:fc:aa:63:78:d8:8d:
86:7a:c9:db:af:68:2b:e1:e5:47:9d:37:e5:fd:dd:a6:77:78:
78:e5:0d:1e:3e:48:cb:71:42:ea:1e:b7:49:7d:a5:f0:9c:9d:
a4:fa:10:1f:16:7b:95:4e:ec:b1:6f:9f:c2:89:04:0d:dd:73:
45:8a:c3:4e:76:02:b9:2d:2a:6f:b6:d0:46:75:7e:e9:79:f5:
60:db:be:7d:e5:4b:bf:41:1a:7c:e3:bb:f8:47:9e:68:c5:d3:
7a:11:85:e3:e9:6b:2f:65:57:b9:d1:65:c6:6d:06:20:c4:65:
95:dd:7b:0e:45:85:71:bb:cd:56:06:c4:5b:e6:4c:56:fd:6a:
3a:c2:ac:b3:d7:7a:5e:5d:de:18:06:07:29:e7:cf:b1:cb:27:
e1:64:6b:b8:08:0c:9b:b9:b0:31:5d:79:61:6a:39:28:57:13:
2b:f4:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org