Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rDZVjtvv5l0CUnQ33-iSShDj0Wg.roa
File: rDZVjtvv5l0CUnQ33-iSShDj0Wg.roa (raw, json)
Hash identifier: LDYzuBXoxAU9Hd91JkQNFWpq00dmQE1dHxZmPFKZ1SA=
Subject key identifier: AC:36:55:8E:DB:EF:E6:5D:02:52:74:37:DF:E8:92:4A:10:E3:D1:68
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F2AB9D7
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rDZVjtvv5l0CUnQ33-iSShDj0Wg.roa
Signing time: Thu 24 Feb 2022 19:36:56 +0000
ROA not before: Thu 24 Feb 2022 19:36:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34073
IP address blocks: 87.246.172.0/24 maxlen: 24
81.198.73.0/24 maxlen: 24
81.198.192.0/22 maxlen: 22
2a02:2330:b2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254458327 (0xf2ab9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:36:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac36558edbefe65d02527437dfe8924a10e3d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:b9:8e:e5:6d:28:88:38:66:8a:67:2a:33:
27:ef:14:83:b8:aa:49:5b:ea:4f:ea:d7:02:ef:59:
a2:3a:0a:cf:f7:9b:94:5e:06:5a:ce:52:38:50:ac:
02:fd:09:02:18:9a:6f:74:01:12:bc:16:12:4a:ea:
f7:15:84:16:27:17:e7:57:e3:52:37:07:f6:66:65:
1c:0a:38:54:c0:ba:7a:36:5e:d2:cc:81:23:af:aa:
9d:69:1b:23:fb:7b:1a:a6:d7:9c:73:40:e5:f7:c7:
f9:8c:91:6d:01:5a:aa:b9:52:05:0e:30:cf:a8:49:
a7:5f:41:66:3d:46:0c:d5:39:16:4c:e6:0c:24:9b:
8c:17:16:49:79:e7:4d:93:7a:70:fa:e3:86:db:d7:
1a:a4:44:c3:5c:37:bd:fb:ff:46:54:70:8f:bd:31:
5c:c1:b5:1d:ec:5b:be:73:b4:f4:73:03:d0:86:d0:
b6:48:68:3e:60:cc:8f:e1:b3:d1:c5:5c:e3:7e:3a:
7a:1f:0b:e2:ec:79:d5:ef:af:f3:8d:af:ff:85:87:
eb:35:21:d7:43:05:78:e3:20:4a:82:e8:04:1f:c2:
d3:36:2d:ba:ba:15:27:6f:6c:00:d3:dd:1e:80:c6:
4f:56:89:cc:fb:7d:2a:d8:94:06:b1:4a:cd:44:c4:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:55:8E:DB:EF:E6:5D:02:52:74:37:DF:E8:92:4A:10:E3:D1:68
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/rDZVjtvv5l0CUnQ33-iSShDj0Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.198.73.0/24
81.198.192.0/22
87.246.172.0/24
IPv6:
2a02:2330:b2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:a8:39:0d:e0:66:e3:5c:71:cb:ba:6b:e1:b9:2d:80:91:1a:
09:f2:c9:46:55:bf:6e:29:86:2b:ff:f1:fb:a8:23:89:8e:02:
b6:ba:1a:0e:78:1e:af:73:56:b0:80:96:92:1a:14:a7:75:11:
a4:76:bb:31:22:0f:7a:ca:e7:8b:09:ef:4d:af:5d:7f:b2:9a:
64:49:c3:df:59:47:df:30:e1:ae:6c:83:73:a8:a4:f2:5d:7a:
4f:c9:29:11:4e:9b:0d:d8:e0:76:9b:68:f7:40:95:6d:7b:33:
33:e5:04:ea:2d:22:f3:88:f7:cc:d5:f7:72:8f:fa:69:5c:75:
6d:6d:13:e6:9e:26:16:a4:73:f4:71:7e:76:53:3a:7c:20:7d:
a7:77:6e:b7:87:70:23:f1:74:6b:f6:db:e4:1c:9e:95:6d:b2:
ca:af:0e:88:67:45:88:93:7b:a7:1e:47:bf:88:8f:c3:b8:84:
35:66:5e:8d:92:eb:0e:d9:be:4c:0a:70:c6:aa:e9:52:54:d7:
15:48:7a:18:bc:a0:a7:af:a1:6e:c2:be:64:70:db:03:17:73:
cd:df:2d:44:34:d4:8d:fb:f7:31:3d:f4:5d:59:b0:91:95:d8:
88:e6:2d:88:56:9b:24:0b:8f:08:e9:d4:5b:b1:c4:ab:c8:de:
38:bc:41:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org