Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0awYDkhWjNM_8j1HoG4H1pcmaeQ.roa
File: 0awYDkhWjNM_8j1HoG4H1pcmaeQ.roa (raw, json)
Hash identifier: RPMtRU4vm+eLBDRYMev2KhugRd5TKVTY3MIzOxhm4cA=
Subject key identifier: D1:AC:18:0E:48:56:8C:D3:3F:F2:3D:47:A0:6E:07:D6:97:26:69:E4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018414AC4E6B0066FE0AAD28B8124186DD9E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0awYDkhWjNM_8j1HoG4H1pcmaeQ.roa
Signing time: Wed 26 Oct 2022 14:22:27 +0000
ROA not before: Wed 26 Oct 2022 14:22:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51219
IP address blocks: 81.23.10.0/23 maxlen: 24
5.8.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:ac:4e:6b:00:66:fe:0a:ad:28:b8:12:41:86:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 14:22:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1ac180e48568cd33ff23d47a06e07d6972669e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:e7:4e:9b:b7:68:db:22:c3:75:40:d6:68:
53:ac:e4:47:5b:71:e1:37:de:1d:27:2c:1a:6f:cc:
90:8f:68:97:0f:d6:37:d2:c7:5c:6b:3e:ed:08:b0:
15:cb:8c:c7:18:14:78:dd:a6:04:e9:bc:27:ea:0b:
ab:da:f1:99:2e:11:40:22:8b:e9:5a:e8:7f:ef:8a:
75:16:c7:fa:e2:9a:d0:05:ec:55:ad:a9:c6:36:98:
6c:68:40:46:39:f1:f5:a5:40:0e:2d:8d:21:0a:d3:
7b:c5:94:7d:2b:22:30:a2:9e:74:c7:0e:2c:05:7b:
f0:c2:6e:7b:7f:35:ae:83:c7:07:f7:a1:e2:b8:35:
c3:69:7c:0f:22:44:46:d3:92:eb:3c:fd:44:d3:8e:
64:a6:fb:3a:e5:41:51:40:7b:00:5d:58:14:1d:f3:
54:31:74:10:97:ca:49:cd:ee:cf:57:fc:5e:35:0f:
74:58:f0:58:8b:85:33:b2:11:35:04:c6:ea:f1:a1:
39:11:24:14:fa:d6:ea:d2:58:91:a9:00:af:fc:af:
66:dc:7b:a4:90:4d:d7:a2:6b:7b:03:19:3b:58:69:
8f:ae:27:38:33:2b:8c:48:f8:f2:10:64:e0:6c:e7:
cc:cb:5b:de:cd:eb:c1:5f:9c:48:9d:6e:91:cb:e9:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AC:18:0E:48:56:8C:D3:3F:F2:3D:47:A0:6E:07:D6:97:26:69:E4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0awYDkhWjNM_8j1HoG4H1pcmaeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.180.0/23
81.23.10.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:02:94:21:6a:97:57:0a:fc:03:52:0a:d9:9a:d2:e6:5f:13:
98:23:d9:1d:ee:0a:03:65:59:ee:c1:51:aa:4b:64:37:7b:c9:
f3:cc:9f:51:1f:ed:7a:50:6b:2c:b7:cf:d9:78:45:6c:f8:3a:
e9:50:fe:55:d0:e6:b3:1c:12:ec:69:da:51:08:ca:a0:d5:2d:
9b:d4:e1:85:de:69:97:9b:ef:57:fa:0e:79:08:b4:ea:eb:c1:
f1:3a:db:b9:b5:70:99:b1:9e:47:27:e5:39:20:a0:3e:a2:29:
73:77:a9:87:fc:79:63:07:78:75:16:36:3c:e5:74:0f:41:35:
11:94:07:e0:f5:ef:9e:32:1a:28:01:4c:39:3f:e2:9b:5b:84:
ef:a1:15:40:29:a9:7d:81:4f:8e:9d:c1:99:b5:bc:70:1b:e1:
29:19:9e:24:4f:43:69:77:ed:00:fc:00:6c:12:00:28:5f:4a:
ec:36:cb:61:d1:33:e4:e4:4f:96:20:45:d1:c2:ea:cb:6a:79:
91:f2:96:b6:11:21:27:73:12:d7:b9:82:59:4e:e3:3c:8c:7c:
73:e9:40:4a:89:de:35:2a:92:d9:15:b6:96:3b:e2:dd:d7:82:
b1:a1:eb:93:37:42:37:fc:a4:01:78:6a:8f:75:fb:53:99:9d:
0f:57:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org