Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/rurAuQZINSh3OvH3BHJey8YO3VM.roa
File: rurAuQZINSh3OvH3BHJey8YO3VM.roa (raw, json)
Hash identifier: GWUnKZmimkIWme/f8gvX6yRkjtjQ6hyxJGD+dJPIKJk=
Subject key identifier: AE:EA:C0:B9:06:48:35:28:77:3A:F1:F7:04:72:5E:CB:C6:0E:DD:53
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 04FD8D73
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/rurAuQZINSh3OvH3BHJey8YO3VM.roa
Signing time: Fri 06 May 2022 06:47:50 +0000
ROA not before: Fri 06 May 2022 06:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39729
IP address blocks: 81.88.48.0/20 maxlen: 24
2a01:8100::/29 maxlen: 48
2a01:8100:2000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83725683 (0x4fd8d73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: May 6 06:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeeac0b906483528773af1f704725ecbc60edd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:e6:14:de:26:6f:50:05:7f:bb:e0:3c:89:
9d:e1:4d:ca:80:8b:53:91:24:4f:49:ee:8a:b7:a3:
c5:2b:ed:5e:75:54:20:46:d9:e7:27:0f:4d:c5:69:
f5:00:bd:df:44:e2:cf:bb:e5:61:02:57:dd:3b:69:
b7:6b:44:12:15:9d:50:91:80:05:91:fe:11:8b:41:
55:6b:92:f3:09:74:74:75:cb:03:b5:92:13:1b:37:
55:c9:1b:8a:a8:26:e8:95:2b:f6:1d:e7:47:8a:d5:
2f:b6:ea:06:67:c5:f1:bd:93:c8:a7:16:7f:49:17:
c0:af:6a:3d:f1:c2:70:a4:d9:32:1d:1f:67:1c:12:
27:d5:a5:b9:12:f1:ee:05:b6:78:a5:9d:c3:73:77:
a5:f5:82:17:2e:19:0c:2e:31:c2:a6:95:f8:2c:98:
b7:17:df:bd:03:1f:44:11:a4:3e:70:68:52:c2:da:
ee:5e:53:41:6b:1c:76:1d:b3:76:29:d8:ca:52:a6:
dc:65:4c:8f:0f:50:a2:ea:12:68:f2:1a:39:7e:06:
ac:c1:dd:67:17:2d:d9:c3:a9:d2:b5:33:a1:7c:90:
95:ae:eb:c4:bc:73:51:d2:ac:a4:4a:a4:ec:46:c7:
69:92:d4:10:be:e3:5f:32:41:e6:1d:ff:36:af:de:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EA:C0:B9:06:48:35:28:77:3A:F1:F7:04:72:5E:CB:C6:0E:DD:53
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/rurAuQZINSh3OvH3BHJey8YO3VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.48.0/20
IPv6:
2a01:8100::/29
Signature Algorithm: sha256WithRSAEncryption
10:1f:c6:12:5d:57:7a:39:75:19:46:12:41:f3:ce:04:dc:2e:
5f:95:cc:c9:44:31:48:ce:1a:52:6c:b6:d1:f3:9e:8e:6e:58:
42:8a:a6:c6:af:67:08:19:96:e5:16:87:2f:77:c1:0c:46:e2:
6b:56:fc:08:06:3e:64:f4:59:74:df:fa:a6:e6:ca:62:d7:14:
0a:bd:ae:f1:30:f9:28:87:22:31:a6:80:74:2f:5b:c2:0f:00:
be:6e:4c:0f:ba:aa:85:b1:cf:09:0d:48:9c:76:f8:63:98:87:
e7:c0:00:18:65:0f:7e:d8:65:91:d3:88:3d:a5:cb:31:e7:2e:
64:79:5b:e3:b7:d9:75:d6:35:6e:59:79:ae:47:47:38:ae:b2:
fd:26:0e:6f:7e:8a:42:b2:a1:df:7e:70:eb:ea:3a:40:ed:23:
ed:2c:85:5a:ec:fc:a8:12:50:24:fa:f4:ef:c9:ed:b3:ce:31:
e4:03:81:48:70:09:93:ec:01:aa:6f:57:13:66:9f:b8:06:4c:
4c:9d:ea:d3:cb:dd:4d:71:06:fa:fd:e6:09:a1:ff:86:b0:bf:
08:88:58:b9:51:69:74:80:a1:b2:4c:5e:b8:ac:70:f2:ab:80:
1b:38:10:00:4d:59:07:96:22:77:c6:34:72:22:b3:e0:8e:9f:
b3:51:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:43 2025 by rpki-client