Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zfeYz3yGLFqzcJ40Ir304QYuwQc.roa
File: zfeYz3yGLFqzcJ40Ir304QYuwQc.roa (raw, json)
Hash identifier: R5AD8ctSwZKY9Wdlp5lCOPV57vV/SX8peAii+b7dnrI=
Subject key identifier: CD:F7:98:CF:7C:86:2C:5A:B3:70:9E:34:22:BD:F4:E1:06:2E:C1:07
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 01831405BA779245BB1E3672148532F6207A
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zfeYz3yGLFqzcJ40Ir304QYuwQc.roa
Signing time: Tue 06 Sep 2022 18:17:43 +0000
ROA not before: Tue 06 Sep 2022 18:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30778
IP address blocks: 81.6.138.0/24 maxlen: 24
81.6.140.0/22 maxlen: 22
81.6.128.0/21 maxlen: 21
2a00:cd80:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:05:ba:77:92:45:bb:1e:36:72:14:85:32:f6:20:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Sep 6 18:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf798cf7c862c5ab3709e3422bdf4e1062ec107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:49:3c:11:17:e3:9f:44:c1:b7:df:75:de:
a8:3c:99:54:39:cd:86:1e:d5:2c:b5:dc:9f:6f:83:
e5:9a:d2:d6:79:d9:20:21:79:3b:f5:e2:29:33:aa:
f6:17:50:1b:8f:7a:53:bc:79:05:53:76:08:b3:e8:
13:45:22:d1:12:2a:0a:11:6a:9b:9d:89:62:4d:d7:
35:cd:a8:8b:04:e0:2a:02:09:d6:cf:2b:5c:a9:bd:
54:ae:7b:5f:de:f2:72:21:21:e3:14:ae:42:3b:0c:
1b:cb:25:c3:9f:34:36:6f:ca:08:bc:81:5c:fc:39:
f9:b9:fd:03:f9:d6:08:77:21:b6:51:b9:ad:85:6b:
59:8d:26:e1:a2:d2:41:0f:6b:7c:f8:00:cf:0b:13:
2b:4e:4c:97:99:40:72:78:f9:58:8f:a6:72:14:ca:
69:40:42:01:c8:3d:42:fc:7c:0a:dc:05:48:b8:f4:
32:ad:f4:46:92:51:2d:0b:70:f4:b4:3f:83:66:bd:
04:ff:da:54:14:f3:8a:f2:ef:02:29:ca:ea:43:e2:
48:1a:fb:0a:56:ea:e6:bd:ac:6e:44:87:25:ce:57:
e4:e6:85:7c:12:98:d5:d4:6c:21:f4:4b:04:dd:92:
4f:7b:e1:98:73:80:de:8b:64:98:0f:60:2f:48:05:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:98:CF:7C:86:2C:5A:B3:70:9E:34:22:BD:F4:E1:06:2E:C1:07
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/zfeYz3yGLFqzcJ40Ir304QYuwQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.6.128.0/21
81.6.138.0/24
81.6.140.0/22
IPv6:
2a00:cd80:8000::/33
Signature Algorithm: sha256WithRSAEncryption
cc:c0:d9:73:1a:b4:9b:3f:2e:9f:e2:81:a6:a1:48:5c:1d:cb:
1c:67:cc:67:c3:b9:7e:63:0b:40:c4:0d:c5:0c:c8:21:2b:86:
06:f7:3e:b8:6b:b9:3b:e4:54:16:96:4f:93:10:b9:c3:7d:35:
8f:94:10:47:07:fb:97:a2:e0:3c:10:22:1a:e0:b0:7f:e7:95:
c9:36:77:1c:ce:a0:8e:b6:ee:f1:2e:6e:b6:25:80:6e:7d:91:
da:4a:ec:69:35:99:e6:8c:35:73:4c:2f:41:3f:18:0c:e8:49:
04:97:4e:40:ea:10:a8:b9:ac:79:f4:4c:26:97:b0:43:6d:89:
08:fa:c4:8c:78:ce:e4:f0:69:8f:6d:c4:b3:6a:3a:fe:12:f8:
35:8c:13:65:26:00:91:a3:25:5f:f8:53:b2:50:92:da:54:2c:
01:af:37:8f:4e:b5:0a:37:ff:a8:df:2c:dc:3f:0b:2e:9d:55:
c0:ba:b1:00:5b:73:7a:fa:bf:35:b2:d7:a7:2c:58:ee:87:bd:
a2:7b:ce:27:a7:37:7b:b9:ef:f4:97:75:8b:0d:71:bf:31:29:
5a:3f:3c:d0:fb:1b:f7:07:a5:76:61:85:c9:a6:29:27:1a:ff:
20:22:9c:9f:14:f0:cc:af:97:4a:ca:89:d6:8f:c7:9d:0a:49:
a6:06:2f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:48 2023 by rpki-client on console-fra.rpki-client.org