Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/syInt9M2jr0tIKrXjg6A7ZrDs5g.roa
File: syInt9M2jr0tIKrXjg6A7ZrDs5g.roa (raw, json)
Hash identifier: zb0HFejLF+fL6fiqNxD5xiM61k7a35y4sTQ8CwG337U=
Subject key identifier: B3:22:27:B7:D3:36:8E:BD:2D:20:AA:D7:8E:0E:80:ED:9A:C3:B3:98
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 018320F44588F215C80DD152DB2FE56BC138
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/syInt9M2jr0tIKrXjg6A7ZrDs5g.roa
Signing time: Fri 09 Sep 2022 06:33:42 +0000
ROA not before: Fri 09 Sep 2022 06:33:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43386
IP address blocks: 81.6.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:20:f4:45:88:f2:15:c8:0d:d1:52:db:2f:e5:6b:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Sep 9 06:33:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b32227b7d3368ebd2d20aad78e0e80ed9ac3b398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:24:d0:ff:02:fb:df:8c:da:86:d2:64:96:
89:b9:b0:bd:95:cb:0a:3e:dd:c6:5a:5a:af:ed:63:
02:b2:fd:a1:78:c7:d1:25:db:0d:0e:fe:db:ee:2d:
14:1f:c8:86:43:f0:3b:55:35:e6:10:74:53:9e:39:
b6:cf:7f:e4:28:d4:a7:2d:20:78:86:d4:7b:67:3e:
12:bf:86:00:02:08:12:05:d0:1a:ea:bd:4e:3f:a2:
dd:a6:b5:05:b7:91:72:94:58:bd:be:0d:9e:8a:72:
fb:7a:e0:ca:a1:34:03:80:52:bf:ac:fe:10:66:d2:
46:c7:36:7c:44:49:2f:99:9e:2b:08:d2:94:03:0d:
ee:df:0c:28:96:88:16:ef:29:7d:c5:73:bf:5f:14:
26:30:d0:d2:ec:89:7f:3d:6e:17:c4:df:e5:7a:34:
e6:9d:e2:75:9a:48:a7:39:d9:ff:43:2d:ae:36:a3:
de:40:1b:3a:e5:8c:51:86:4c:9b:1f:3c:e3:90:c3:
03:09:e7:d4:1c:04:d3:eb:dd:cb:8e:01:43:2f:d7:
f8:e7:a7:30:9d:db:65:b3:f9:ad:22:62:e0:2a:5f:
bc:76:e9:fe:67:a6:c1:55:2d:f2:fc:a9:9c:67:6f:
81:92:54:5d:83:5f:64:e7:62:f3:7a:fc:f7:85:6f:
48:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:27:B7:D3:36:8E:BD:2D:20:AA:D7:8E:0E:80:ED:9A:C3:B3:98
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/syInt9M2jr0tIKrXjg6A7ZrDs5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.139.0/24
Signature Algorithm: sha256WithRSAEncryption
76:67:57:32:57:87:78:7c:61:ed:2f:19:d7:7e:4e:a3:f6:f8:
09:8e:df:f4:90:6f:99:52:5d:24:c4:fa:02:2a:6c:ef:81:bf:
22:1b:54:e5:9c:65:65:f5:3f:20:99:1d:d4:c4:aa:4a:d1:ee:
ef:4d:3d:d2:5e:69:de:46:91:54:b1:51:a4:f6:d0:e3:b0:0c:
13:40:d8:b0:60:03:23:b3:3d:c0:dc:36:e9:71:2c:78:ef:d0:
95:13:d0:bb:59:e7:82:65:b9:75:78:dc:65:dd:8f:40:c6:d4:
e1:1f:55:79:b7:a7:81:38:fd:04:6b:9c:a8:53:5a:d7:f3:17:
b9:ca:22:4d:71:0d:d4:3b:79:cb:e7:1a:bc:18:8b:e0:fc:99:
a4:14:82:74:e4:ad:2f:c5:cc:7d:b7:86:38:a0:24:83:04:70:
13:7d:b6:92:9c:8a:59:8f:70:e3:49:79:72:2c:50:95:a6:da:
5b:bc:80:28:18:1e:54:3e:06:42:10:d4:e2:dc:cb:b5:42:d9:
f6:fa:ba:6d:a4:6c:2f:e7:e1:01:ad:56:01:60:ed:c0:73:09:
d2:61:54:b9:45:1d:0f:e2:44:1f:72:6f:f6:f4:22:de:da:6d:
4e:dd:82:1b:a0:f2:cb:a6:e9:39:59:71:f7:f3:48:63:bf:f7:
29:6f:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:31 2024 by rpki-client on console-ams.rpki-client.org