Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/f88FQGwrNMhW3caDk0M46_9phIM.roa
File: f88FQGwrNMhW3caDk0M46_9phIM.roa (raw, json)
Hash identifier: GPzUaIFQJ7unIeaBcldpXupMJOHSkW9ncDtMP5g1QLM=
Subject key identifier: 7F:CF:05:40:6C:2B:34:C8:56:DD:C6:83:93:43:38:EB:FF:69:84:83
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 018321A7B943A6B63BC2D46EBC30C9FC143E
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/f88FQGwrNMhW3caDk0M46_9phIM.roa
Signing time: Fri 09 Sep 2022 09:49:43 +0000
ROA not before: Fri 09 Sep 2022 09:49:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30778
IP address blocks: 81.6.138.0/24 maxlen: 24
81.6.136.0/23 maxlen: 23
81.6.140.0/22 maxlen: 22
81.6.128.0/21 maxlen: 21
2a00:cd80:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:a7:b9:43:a6:b6:3b:c2:d4:6e:bc:30:c9:fc:14:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Sep 9 09:49:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fcf05406c2b34c856ddc683934338ebff698483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:2d:b0:0e:9d:02:0b:53:cc:39:d7:9d:8b:
e5:da:4d:bc:48:83:eb:3c:e8:a7:b1:61:a9:ff:21:
a8:42:60:c7:e9:b5:45:6f:f2:3b:67:e5:36:31:c0:
cd:7d:bf:1e:b2:8c:31:4e:d4:ec:41:13:2b:c2:77:
32:f6:ff:4e:80:55:1d:5d:f8:76:07:46:18:93:b3:
2b:5a:78:48:8a:68:2f:45:2b:40:19:00:ab:71:87:
87:2f:4d:5d:d4:01:e2:08:38:6a:8f:c4:b6:ac:d1:
85:de:64:10:f8:78:38:bf:fa:43:5e:05:61:0a:ce:
ad:72:ad:e4:86:09:44:d6:b7:b5:27:82:6c:7d:45:
f1:b2:30:3c:13:2b:a5:35:24:c9:bb:9c:fb:20:ad:
e5:31:ef:55:25:b7:74:9d:3a:04:de:67:b0:8c:ce:
fd:d7:21:51:09:54:dd:20:f2:12:41:a6:82:88:b8:
5c:84:6d:27:cd:18:fc:e6:5c:da:ad:65:be:76:f1:
e5:ca:94:b1:af:d9:da:47:da:c7:67:3e:8c:35:dd:
96:26:7c:09:a4:2f:eb:da:2c:f2:b3:11:cd:bf:07:
84:52:0f:0f:5c:b6:87:76:95:f0:9f:f2:fe:24:fa:
60:0d:82:f7:77:80:85:42:f8:82:da:b7:d5:6b:76:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:05:40:6C:2B:34:C8:56:DD:C6:83:93:43:38:EB:FF:69:84:83
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/f88FQGwrNMhW3caDk0M46_9phIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.128.0-81.6.138.255
81.6.140.0/22
IPv6:
2a00:cd80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
10:65:d6:83:7a:8e:55:71:0f:15:28:81:d5:bd:de:71:89:0a:
0b:ed:97:23:aa:87:05:2f:fe:b0:ed:d7:e6:cd:44:ec:23:f9:
e3:e9:a2:36:ce:5f:8e:26:d8:75:07:55:6a:9e:d9:94:cf:81:
65:80:95:26:7c:b6:2a:cb:51:66:a6:d1:09:04:2f:d7:3b:05:
d2:17:d0:57:6f:2d:49:7d:4c:3b:d6:fa:2f:a2:15:61:95:68:
58:a9:1d:e8:62:8b:5f:44:d1:16:7e:57:76:c7:a0:3b:36:ea:
a7:c4:c3:37:63:51:f4:5c:f2:6d:06:0d:88:7e:02:60:9f:74:
14:cb:63:21:27:ef:91:0d:33:18:29:99:74:ef:40:d4:18:b7:
38:3e:e2:a8:2d:75:7d:db:5b:be:8a:f6:b7:88:c5:27:cd:a2:
7a:99:f5:01:4b:87:90:65:65:4c:bc:a1:7d:c7:ce:e5:17:9c:
7a:29:58:33:0a:2b:83:6b:b9:53:27:aa:42:96:64:f0:ca:3a:
f2:ff:29:b5:8e:2c:79:26:e5:ae:cc:f9:9b:14:08:ce:9a:e9:
27:d8:66:2d:22:0b:20:84:d4:a5:e9:66:2f:7f:7c:01:0e:6d:
03:90:48:6f:72:f6:aa:30:75:c1:49:b2:35:df:bf:12:5d:a8:
ec:3e:c0:b6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYMhp7lDprY7wtRuvDDJ/BQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDM0MGQyN2U0YjI0ZjkxMjQ5NzczMjJlZGIzNjk0MmUy
ZDE2MGMwHhcNMjIwOTA5MDk0OTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmNmMDU0MDZjMmIzNGM4NTZkZGM2ODM5MzQzMzhlYmZmNjk4NDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ4tsA6dAgtTzDnXnYvl2k28SIPr
POinsWGp/yGoQmDH6bVFb/I7Z+U2McDNfb8esowxTtTsQRMrwncy9v9OgFUdXfh2
B0YYk7MrWnhIimgvRStAGQCrcYeHL01d1AHiCDhqj8S2rNGF3mQQ+Hg4v/pDXgVh
Cs6tcq3khglE1re1J4JsfUXxsjA8EyulNSTJu5z7IK3lMe9VJbd0nToE3mewjM79
1yFRCVTdIPISQaaCiLhchG0nzRj85lzarWW+dvHlypSxr9naR9rHZz6MNd2WJnwJ
pC/r2izysxHNvweEUg8PXLaHdpXwn/L+JPpgDYL3d4CFQviC2rfVa3Y5AQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFH/PBUBsKzTIVt3Gg5NDOOv/aYSDMB8GA1UdIwQY
MBaAFCMDQNJ+SyT5Ekl3Mi7bNpQuLRYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAt
YjU3MDkwN2I1OWViLzEvZjg4RlFHd3JOTWhXM2NhRGswTTQ2XzlwaElNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS83YmRmNTItNmFjNS00YzI0LWJmZDAtYjU3MDkwN2I1OWVi
LzEvSXdOQTBuNUxKUGtTU1hjeUx0czJsQzR0Rmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUMAwDBAdRBoAD
BABRBooDBAJRBowwDgQCAAIwCAMGByoAzYCAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
ZdaDeo5VcQ8VKIHVvd5xiQoL7ZcjqocFL/6w7dfmzUTsI/nj6aI2zl+OJth1B1Vq
ntmUz4FlgJUmfLYqy1FmptEJBC/XOwXSF9BXby1JfUw71vovohVhlWhYqR3oYotf
RNEWfld2x6A7NuqnxMM3Y1H0XPJtBg2IfgJgn3QUy2MhJ++RDTMYKZl070DUGLc4
PuKoLXV921u+iva3iMUnzaJ6mfUBS4eQZWVMvKF9x87lF5x6KVgzCiuDa7lTJ6pC
lmTwyjry/ym1jix5JuWuzPmbFAjOmukn2GYtIgsghNSl6WYvf3wBDm0DkEhvcvaq
MHXBSbI1378SXajsPsC2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:31 2024 by rpki-client on console-ams.rpki-client.org