Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/raBokwsl7hZF2q5xs_NUxkSLcBA.roa
File: raBokwsl7hZF2q5xs_NUxkSLcBA.roa (raw, json)
Hash identifier: mrAIuga242WNK4Dmp2C1VggbmQSeLZHeLkEEVb3Fnw8=
Subject key identifier: AD:A0:68:93:0B:25:EE:16:45:DA:AE:71:B3:F3:54:C6:44:8B:70:10
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 10ECD50C
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/raBokwsl7hZF2q5xs_NUxkSLcBA.roa
Signing time: Sat 01 Jan 2022 08:53:00 +0000
ROA not before: Sat 01 Jan 2022 08:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30778
IP address blocks: 81.6.140.0/22 maxlen: 22
2a00:cd80:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283956492 (0x10ecd50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Jan 1 08:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada068930b25ee1645daae71b3f354c6448b7010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:d7:2f:3f:58:d1:56:8e:09:1b:1b:0d:5a:
56:72:a1:7b:e4:68:75:1a:ca:31:e3:33:a2:bf:f3:
ba:17:92:10:a4:9d:f9:2c:39:22:f8:ac:33:67:c7:
f6:9a:d9:20:06:14:d4:30:b9:b6:0a:4e:3f:02:51:
32:a5:fd:b4:c0:95:c3:07:14:71:97:41:c3:a3:57:
64:28:5b:e0:c7:97:d9:55:0d:95:04:72:5a:58:32:
a6:26:f9:f1:d8:d5:af:43:33:f6:55:cb:c6:ec:2b:
e9:18:ea:fa:63:20:82:a8:d2:23:ed:18:b3:2d:73:
dc:ed:9d:7b:e1:e4:e8:e5:88:4a:de:34:40:d0:60:
39:df:70:73:aa:e7:87:b5:2c:a1:8b:96:e2:f3:14:
90:34:76:2f:1f:f9:a8:cc:05:85:71:94:18:e0:2f:
09:2d:56:19:77:c2:ff:ba:9d:70:dc:05:c3:d1:3c:
e2:fb:e6:42:0f:aa:c9:51:dc:c8:14:b0:e5:08:66:
fc:b8:be:fe:8a:bc:bc:62:e4:84:3e:53:f0:e7:68:
a8:f5:d3:a0:07:79:0c:4a:33:d5:98:69:4b:1a:48:
cc:7c:7f:c7:e9:5d:04:8c:29:20:58:3e:19:c1:9b:
39:31:33:1a:ee:28:41:f5:55:f1:20:32:4a:23:30:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A0:68:93:0B:25:EE:16:45:DA:AE:71:B3:F3:54:C6:44:8B:70:10
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/raBokwsl7hZF2q5xs_NUxkSLcBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.140.0/22
IPv6:
2a00:cd80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
a1:10:5a:70:60:a2:2e:79:06:ab:1a:fa:c7:35:cc:6b:6c:0d:
17:69:c1:1e:fd:0b:e0:37:19:f2:fe:0b:93:b3:e8:3a:8e:56:
d7:2e:a7:76:69:b8:b2:4f:f7:df:05:a5:e9:3b:b7:d3:f3:9a:
30:a1:24:7c:54:63:ff:4d:d6:a1:f6:6a:1a:7b:88:fe:f3:df:
68:07:8b:37:ff:3f:55:18:74:de:04:55:7b:32:c7:3d:de:d9:
7a:8c:31:53:14:34:a5:38:e8:af:27:c9:09:61:17:98:88:d9:
a7:54:3a:7c:9d:bf:99:99:55:20:3a:4f:de:23:07:2b:0a:e8:
19:10:8f:7c:da:8c:30:3c:31:23:e2:60:ba:d0:12:b2:4f:39:
87:84:3b:9c:52:78:98:89:dc:67:ff:c2:df:b5:fa:af:61:ce:
0b:d6:b9:46:ff:2f:6e:c7:ba:f3:78:2b:4f:f5:b6:00:6d:73:
18:90:e2:0a:ac:62:a9:52:dc:f6:1a:42:5b:44:b8:d2:d2:e9:
df:13:3c:25:4c:35:b9:d7:d6:75:1c:6d:f5:53:59:7c:c7:54:
45:af:1f:8c:cb:b7:de:c2:a8:f0:e5:b8:a4:f4:4e:a8:02:bb:
23:87:8a:81:6f:7c:88:78:92:88:e5:67:ea:16:b2:f7:08:fe:
37:d7:91:fc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEEOzVDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MzAzNDBkMjdlNGIyNGY5MTI0OTc3MzIyZWRiMzY5NDJlMmQxNjBjMB4XDTIyMDEw
MTA4NTMwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRhMDY4OTMwYjI1
ZWUxNjQ1ZGFhZTcxYjNmMzU0YzY0NDhiNzAxMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqF1y8/WNFWjgkbGw1aVnKhe+RodRrKMeMzor/zuheSEKSd
+Sw5IvisM2fH9prZIAYU1DC5tgpOPwJRMqX9tMCVwwcUcZdBw6NXZChb4MeX2VUN
lQRyWlgypib58djVr0Mz9lXLxuwr6Rjq+mMggqjSI+0Ysy1z3O2de+Hk6OWISt40
QNBgOd9wc6rnh7UsoYuW4vMUkDR2Lx/5qMwFhXGUGOAvCS1WGXfC/7qdcNwFw9E8
4vvmQg+qyVHcyBSw5Qhm/Li+/oq8vGLkhD5T8OdoqPXToAd5DEoz1ZhpSxpIzHx/
x+ldBIwpIFg+GcGbOTEzGu4oQfVV8SAySiMwlesCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBStoGiTCyXuFkXarnGz81TGRItwEDAfBgNVHSMEGDAWgBQjA0DSfksk+RJJ
dzIu2zaULi0WDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0l3TkEwbjVMSlBrU1NYY3lMdHMybEM0dEZndy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvN2JkZjUyLTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTllYi8x
L3JhQm9rd3NsN2haRjJxNXhzX05VeGtTTGNCQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
N2JkZjUyLTZhYzUtNGMyNC1iZmQwLWI1NzA5MDdiNTllYi8xL0l3TkEwbjVMSlBr
U1NYY3lMdHMybEM0dEZndy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAlEGjDAOBAIAAjAIAwYHKgDNgIAw
DQYJKoZIhvcNAQELBQADggEBAKEQWnBgoi55Bqsa+sc1zGtsDRdpwR79C+A3GfL+
C5Oz6DqOVtcup3ZpuLJP998Fpek7t9PzmjChJHxUY/9N1qH2ahp7iP7z32gHizf/
P1UYdN4EVXsyxz3e2XqMMVMUNKU46K8nyQlhF5iI2adUOnydv5mZVSA6T94jBysK
6BkQj3zajDA8MSPiYLrQErJPOYeEO5xSeJiJ3Gf/wt+1+q9hzgvWuUb/L27HuvN4
K0/1tgBtcxiQ4gqsYqlS3PYaQltEuNLS6d8TPCVMNbnX1nUcbfVTWXzHVEWvH4zL
t97CqPDluKT0TqgCuyOHioFvfIh4kojlZ+oWsvcI/jfXkfw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:31 2024 by rpki-client on console-ams.rpki-client.org