Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Z1h0Qu_cfx-BEF6hsR77nuerAmc.roa
File: Z1h0Qu_cfx-BEF6hsR77nuerAmc.roa (raw, json)
Hash identifier: vhQYJTViJHuot3oQTn96nS4uz8Rkpp2PMG4IAUh55eg=
Subject key identifier: 67:58:74:42:EF:DC:7F:1F:81:10:5E:A1:B1:1E:FB:9E:E7:AB:02:67
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 10F69A48
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Z1h0Qu_cfx-BEF6hsR77nuerAmc.roa
Signing time: Sat 01 Jan 2022 10:54:47 +0000
ROA not before: Sat 01 Jan 2022 10:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34002
IP address blocks: 81.88.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284596808 (0x10f69a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jan 1 10:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67587442efdc7f1f81105ea1b11efb9ee7ab0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:43:12:56:f3:2f:76:a5:17:9f:21:fa:00:5a:
83:4b:71:fa:87:d5:96:5e:6c:b7:62:cd:2c:cf:3d:
96:58:fa:e5:b3:ce:27:31:61:a0:40:40:31:37:8c:
1a:a2:a7:b2:86:4a:f5:fe:d6:d6:12:d1:65:be:30:
fa:f4:90:29:62:1b:18:45:1f:ba:94:b5:79:8c:5c:
26:aa:2e:1b:c2:72:1d:ed:f5:10:73:9e:1f:ed:d3:
db:23:46:3f:f7:77:17:38:bb:55:fa:fd:ff:1f:fd:
d0:9a:a1:8a:e3:15:01:e1:7e:f6:cf:4b:5e:d1:80:
b3:d6:cb:0f:e2:0d:88:ef:d4:a9:d8:94:e5:01:d4:
b1:ee:e5:b7:20:90:1f:79:f4:0a:b6:69:ed:2a:88:
70:e7:b6:a9:76:32:dc:0c:af:34:00:5a:6d:3d:fa:
d1:59:80:de:e0:50:9a:67:5d:e1:25:b1:96:61:d1:
09:b9:73:1e:d0:00:85:fc:7f:ac:9f:0d:b4:7f:60:
4c:03:09:da:36:43:e6:21:4b:55:ed:25:ec:57:98:
b4:42:20:3a:94:0a:3c:b5:dc:8f:d7:9f:5c:76:28:
2b:fa:a4:54:8c:47:60:88:b2:80:e5:0e:e9:eb:47:
56:15:ea:c7:2a:54:b9:9b:58:bf:77:51:52:a4:be:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:74:42:EF:DC:7F:1F:81:10:5E:A1:B1:1E:FB:9E:E7:AB:02:67
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/Z1h0Qu_cfx-BEF6hsR77nuerAmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.104.0/22
Signature Algorithm: sha256WithRSAEncryption
51:73:ce:2e:10:86:b6:b2:ae:8c:6d:8a:34:f1:51:70:4f:78:
26:19:36:ca:35:20:b9:98:6c:67:a6:02:e9:c0:e2:6a:fa:0b:
60:df:fa:90:b3:20:b5:eb:10:ef:a8:2c:5f:c6:bf:ee:b7:8d:
26:da:83:43:c5:7c:d5:5a:db:82:f9:12:bf:62:de:9d:52:72:
56:b1:b6:5c:f2:ae:db:40:e4:d7:d3:9b:4a:0c:66:89:7e:59:
af:70:67:ce:a0:a4:b1:98:1f:07:54:b9:7d:63:f7:ac:aa:93:
dc:d6:ee:59:ee:ae:ea:b2:d3:e3:cc:8a:e3:be:da:13:0c:16:
2d:eb:35:ce:97:9a:40:94:a3:cc:dd:7c:32:f6:f3:5b:25:2d:
5f:56:95:a3:ca:f5:05:ec:82:43:9e:02:f1:39:fa:a4:df:b3:
b4:b0:a8:e5:97:b6:0e:a5:c1:08:03:13:9c:66:17:01:08:2c:
ae:9d:ac:67:10:16:5b:a6:1f:cc:14:28:e9:06:23:cb:c9:ba:
c1:8f:9f:52:ff:d0:08:04:7a:fc:7d:1a:fc:7a:b1:ae:7e:11:
56:ff:e8:74:83:27:f1:08:af:f2:98:83:b1:bf:bd:e3:7c:d0:
50:7a:16:f6:1e:15:fb:0c:d3:51:58:e8:2c:57:81:32:1d:85:
78:ec:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net