Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AUBUyqTr-_EsZS9dtkyggdS9s6I.roa
File: AUBUyqTr-_EsZS9dtkyggdS9s6I.roa (raw, json)
Hash identifier: 1B5gUMTvmYOmQv9C7hnbdnuhz6PD62ScwM0SvQWoA8Y=
Subject key identifier: 01:40:54:CA:A4:EB:FB:F1:2C:65:2F:5D:B6:4C:A0:81:D4:BD:B3:A2
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01852E23584EC6E803B6614EF05A48476DFE
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AUBUyqTr-_EsZS9dtkyggdS9s6I.roa
Signing time: Tue 20 Dec 2022 06:05:46 +0000
ROA not before: Tue 20 Dec 2022 06:05:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 81.46.240.0/21 maxlen: 21
81.46.244.0/22 maxlen: 22
195.55.104.0/22 maxlen: 22
195.55.104.0/23 maxlen: 23
195.55.106.0/23 maxlen: 23
81.46.192.0/20 maxlen: 20
81.46.192.0/21 maxlen: 21
81.46.200.0/21 maxlen: 21
81.46.208.0/22 maxlen: 22
81.46.212.0/22 maxlen: 22
81.46.208.0/21 maxlen: 21
81.46.215.0/24 maxlen: 24
81.46.216.0/22 maxlen: 22
81.46.216.0/21 maxlen: 21
81.46.224.0/20 maxlen: 20
81.46.224.0/21 maxlen: 21
81.46.220.0/22 maxlen: 22
81.46.232.0/21 maxlen: 21
81.46.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:23:58:4e:c6:e8:03:b6:61:4e:f0:5a:48:47:6d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Dec 20 06:05:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=014054caa4ebfbf12c652f5db64ca081d4bdb3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:9e:86:28:ea:5a:0b:8a:75:a6:0e:6e:fc:
09:f6:8f:22:59:68:fa:b5:eb:7e:61:4d:89:f1:7c:
32:f9:77:a3:c5:1f:5b:e3:e4:8e:85:9f:c3:4d:fe:
70:b4:b5:03:6c:8a:a4:e9:ac:55:16:df:85:85:d5:
e4:39:f2:dc:3f:96:0b:51:08:ea:a9:1d:c0:d2:21:
f0:75:03:08:fd:24:ee:2d:08:86:d9:68:e8:e4:b5:
b6:7b:7e:0a:66:bc:3a:ff:20:ae:e8:05:b9:38:3a:
bc:14:49:17:36:7f:7a:c8:6c:78:e1:51:c7:62:dd:
63:79:c6:31:ed:dd:e0:6a:42:04:e2:39:72:be:29:
39:5b:cd:7d:0c:7e:cd:e2:95:bc:22:9a:38:63:06:
26:9d:3b:16:40:13:5a:8d:1a:d2:d3:05:74:95:87:
bf:cc:de:f0:3e:f1:2a:13:6d:ef:4e:a8:c8:f2:5c:
6d:0a:7e:e7:4c:54:c9:c1:e8:50:37:f2:c6:e3:fc:
54:c4:cb:77:78:2c:15:61:6f:bd:fc:fb:94:b8:35:
86:00:f3:1e:2e:4b:dd:78:7d:c3:c8:47:b3:29:ca:
a0:5b:8b:39:1b:e9:ce:4a:49:92:7f:e5:75:fb:4a:
ea:f2:31:ff:33:31:f9:03:90:57:79:3b:8f:01:82:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:40:54:CA:A4:EB:FB:F1:2C:65:2F:5D:B6:4C:A0:81:D4:BD:B3:A2
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AUBUyqTr-_EsZS9dtkyggdS9s6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.46.192.0-81.46.247.255
195.55.104.0/22
Signature Algorithm: sha256WithRSAEncryption
eb:36:e7:ec:09:6f:fd:5b:06:f5:f9:c9:6e:0a:10:63:6b:bf:
11:20:dc:00:02:63:b6:46:d9:19:5b:52:fb:4a:04:88:ca:29:
f6:55:60:d7:63:71:9b:41:6b:9c:82:c1:ea:5e:aa:e2:eb:c3:
6c:6b:3b:4d:c5:da:64:24:24:29:39:b4:f8:00:80:24:0b:fe:
56:99:e3:2d:a0:e7:3d:77:fd:f0:31:7c:76:38:c6:f6:e9:2f:
de:50:bb:ee:af:ff:d0:ca:ff:2c:6e:7e:ad:95:7e:84:a9:fe:
3f:6c:bb:38:47:7b:72:cc:7d:fa:3a:60:60:d3:b5:3e:76:b5:
dd:b6:5d:66:f5:82:ad:6d:2a:b4:8e:9d:92:63:59:59:8e:5b:
df:f7:89:68:45:56:b8:e6:dd:57:bf:f3:38:02:b7:3a:39:15:
fb:cf:6a:2e:c9:a7:16:45:dc:3a:5e:03:d4:7b:b4:7b:72:6d:
2f:b1:c4:e2:5d:1b:6b:29:4a:4c:93:97:ef:bc:2b:66:e8:ad:
5f:90:aa:48:b8:d5:28:a3:ef:39:a1:29:f9:66:5d:81:e7:2f:
02:d2:82:82:06:51:d0:55:cb:f5:9d:61:4f:dd:56:79:84:30:
33:42:99:e0:3b:02:c4:c9:39:8b:fa:20:c2:de:39:14:cb:23:
d1:19:1c:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org