Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/7iOrum3l_oiQYxnx5Cnjx_lnwKE.roa
File: 7iOrum3l_oiQYxnx5Cnjx_lnwKE.roa (raw, json)
Hash identifier: /FXPPcsKeiLgqDqt3MATN33hrnEE6moaDwMZOuBKll4=
Subject key identifier: EE:23:AB:BA:6D:E5:FE:88:90:63:19:F1:E4:29:E3:C7:F9:67:C0:A1
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 36618AC8
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/7iOrum3l_oiQYxnx5Cnjx_lnwKE.roa
Signing time: Tue 08 Feb 2022 10:10:34 +0000
ROA not before: Tue 08 Feb 2022 10:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47887
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912362184 (0x36618ac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Feb 8 10:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee23abba6de5fe88906319f1e429e3c7f967c0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:79:ba:59:6f:f5:6b:a5:31:34:c3:a3:01:
89:07:4f:36:ae:7a:4d:14:6a:7a:d3:5f:60:1b:4f:
80:e5:c3:34:86:ed:4f:4b:b8:26:7f:ad:fc:53:4b:
f7:e4:a8:65:00:14:a4:b0:59:6f:72:3e:c6:4b:58:
a8:12:ea:2a:58:e4:45:5c:0f:79:9f:8b:93:4c:c8:
17:b5:ca:95:58:ed:77:23:46:b8:7c:90:2d:49:89:
59:95:d6:3c:33:1e:6d:2f:62:19:2f:79:68:c4:71:
9d:8b:96:3b:b1:8a:d9:92:15:37:ca:2b:95:4e:2b:
0d:14:1d:8f:9c:e5:88:04:34:d1:74:3e:78:cd:e6:
6b:31:00:2f:85:7a:f0:30:b1:0f:10:bc:53:98:17:
e5:d4:e6:c6:1c:6f:1e:2f:41:12:6e:09:0f:bb:e0:
50:29:2c:08:c0:f7:f1:8c:ef:1b:72:d8:e4:78:46:
99:a0:cf:ba:ee:0c:24:c4:77:8d:54:31:3f:e0:0a:
36:19:6a:12:73:1c:1e:1c:db:cb:cb:d9:21:f8:bb:
11:e2:b8:9e:4a:22:a6:cf:1c:b4:fd:42:b8:25:16:
2d:06:df:b0:c2:a1:3d:72:94:55:b7:b8:23:1e:b8:
42:ba:2c:99:8a:ad:c4:8b:be:7c:53:02:3e:a5:3c:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:AB:BA:6D:E5:FE:88:90:63:19:F1:E4:29:E3:C7:F9:67:C0:A1
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/7iOrum3l_oiQYxnx5Cnjx_lnwKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
41:76:28:16:80:f7:64:c0:c6:d7:09:7d:56:da:a0:78:6b:5b:
2e:89:5b:e2:4a:53:56:b0:44:80:28:5c:20:71:24:f7:01:a4:
e5:75:45:73:3e:69:dd:fc:98:0f:f0:5c:d4:da:c1:e3:80:19:
c2:5c:6e:9d:25:99:20:55:d0:a5:ee:f4:4e:5a:a2:d0:29:06:
51:24:20:48:27:1a:14:29:ae:ca:c8:9c:22:0f:12:8a:ae:58:
a7:b2:63:38:62:1d:0a:b7:3c:4b:b3:b6:e5:c1:cb:08:6e:84:
0c:a8:ea:06:24:27:82:76:0d:df:d0:7a:18:f8:19:dc:f0:2b:
62:6c:d3:c1:60:91:5b:c2:4d:67:d0:a9:83:ed:81:4d:04:67:
a2:13:9a:2b:83:d5:3a:da:dd:6a:49:35:eb:5f:a0:41:7e:25:
74:d3:44:53:35:96:a8:87:18:50:9c:85:7c:97:71:29:a0:e4:
c3:9b:79:b7:e3:0a:17:06:83:10:30:e1:19:07:0d:7d:e3:5a:
b4:36:f0:96:0f:cb:97:73:62:ca:bd:79:a0:c3:42:82:26:e9:
e2:7e:f2:11:1a:cd:db:08:88:9b:26:de:ec:69:2a:d6:84:e6:
af:ea:a8:c4:7c:b7:dc:2d:1a:3f:f0:b3:71:d6:af:d4:15:9a:
70:f5:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:31 2023 by rpki-client on console-ams.rpki-client.org