Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/aihLLbjcZXEZlThFbQ13YwDhYJg.roa
File: aihLLbjcZXEZlThFbQ13YwDhYJg.roa (raw, json)
Hash identifier: eIVu07cvhOxdQCHUBxsSuf9EnAZkgXqlkBhoxLNjfGc=
Subject key identifier: 6A:28:4B:2D:B8:DC:65:71:19:95:38:45:6D:0D:77:63:00:E1:60:98
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F24201F
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/aihLLbjcZXEZlThFbQ13YwDhYJg.roa
Signing time: Thu 24 Feb 2022 19:35:00 +0000
ROA not before: Thu 24 Feb 2022 19:35:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24921
IP address blocks: 81.198.189.0/24 maxlen: 24
194.8.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254025759 (0xf24201f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:35:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a284b2db8dc6571199538456d0d776300e16098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:d2:03:85:ea:1c:dd:65:b6:65:09:15:b9:
55:8e:cd:4f:a1:10:aa:0e:c1:a5:a9:33:b9:ec:d7:
c5:ba:55:a2:72:77:68:44:ca:bf:67:0b:73:60:d7:
a1:4a:5b:5e:dc:6c:58:eb:7d:3c:82:c2:02:d6:b7:
cb:08:06:46:88:b5:9f:63:c3:09:6c:58:f0:19:33:
57:85:65:bc:f2:27:aa:88:95:7d:d4:f9:53:9b:ec:
bd:9f:d8:3a:4f:7e:1b:68:72:63:88:69:7e:8c:ec:
93:c5:06:b7:63:2b:99:91:a2:c2:3e:2d:f5:a8:d8:
10:70:38:33:1f:32:ad:74:ab:c7:b5:c1:98:bc:ae:
b3:94:d2:8c:22:1b:b8:7a:b4:96:3a:33:1e:bc:1e:
f8:02:7c:2c:27:41:d5:02:8b:03:d1:fd:62:8c:9f:
2f:a5:94:8f:a4:4d:22:58:fe:f3:d8:b6:22:dd:e7:
e4:37:99:53:e1:94:58:73:bb:1e:a3:c2:e2:46:7e:
db:ff:41:c9:2f:b9:24:f5:5f:bb:2e:1f:6a:1b:32:
aa:97:21:1b:ec:a5:d6:54:9c:82:c5:6d:2d:e8:c5:
02:7c:ef:0c:97:94:d8:4d:39:dd:92:23:05:c2:6e:
a6:3b:af:72:8d:d7:28:17:01:b1:f6:53:1e:a3:2b:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:28:4B:2D:B8:DC:65:71:19:95:38:45:6D:0D:77:63:00:E1:60:98
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/aihLLbjcZXEZlThFbQ13YwDhYJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.189.0/24
194.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4c:ab:43:84:03:bd:a9:09:b7:c0:0c:76:ac:12:fb:96:99:
9a:5f:00:8d:94:1c:ad:be:33:a5:7e:2b:d8:d8:a9:97:e9:a1:
89:72:cc:19:0c:3e:b8:87:06:06:19:99:9d:50:eb:51:b0:8e:
7f:7a:da:8a:ee:c7:6e:a0:7b:1d:f9:22:12:4a:eb:57:4e:aa:
76:cc:3e:21:a5:d1:2f:f2:5e:c0:00:3f:8e:72:69:29:a1:4f:
d4:06:e6:17:2c:c2:3d:28:44:25:1e:dd:f7:a3:ab:80:01:8b:
98:78:92:6e:1a:de:a4:0e:bf:bc:5e:d2:f3:82:e7:73:3f:d6:
7a:f5:d9:b5:97:d4:e4:b5:db:3a:20:12:3c:fa:26:d9:19:83:
4d:14:7b:b8:99:06:df:9c:10:44:57:af:c9:ee:88:f8:cb:41:
9d:03:eb:53:72:4f:67:fe:f4:3a:c0:1d:21:b2:ed:b0:8d:9f:
8d:01:6b:4c:60:62:88:78:de:e9:bd:0c:b5:9d:22:22:dc:2e:
a2:e4:b3:a2:61:ab:3e:63:4d:99:45:9c:ae:45:7d:c7:95:e2:
0a:f4:f1:3f:89:56:21:dd:93:b0:69:05:03:27:45:b7:ca:79:
aa:96:b2:8a:5b:a1:4d:28:ed:32:d0:e2:0b:d9:fa:b9:40:99:
34:61:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org