Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/OH36_EKIfHEkH4GNQyG1GIh_c4M.roa
File: OH36_EKIfHEkH4GNQyG1GIh_c4M.roa (raw, json)
Hash identifier: s2abc3ZCoCkoIts9Rm+1c4yI5yGNzhrKoLg3X9y4fCc=
Subject key identifier: 38:7D:FA:FC:42:88:7C:71:24:1F:81:8D:43:21:B5:18:88:7F:73:83
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 01828708E01A92DB205EC72A21F767ED85CD
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/OH36_EKIfHEkH4GNQyG1GIh_c4M.roa
Signing time: Wed 10 Aug 2022 09:14:41 +0000
ROA not before: Wed 10 Aug 2022 09:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202243
IP address blocks: 77.74.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:08:e0:1a:92:db:20:5e:c7:2a:21:f7:67:ed:85:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Aug 10 09:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=387dfafc42887c71241f818d4321b518887f7383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:59:4b:f2:ca:ab:5c:de:a5:be:d0:bc:8f:
5e:4c:bb:39:27:5c:74:f1:a5:a5:02:50:7c:28:1f:
90:90:91:ba:24:5b:b9:12:0b:fc:4a:8e:4b:9e:f5:
c0:73:7c:c0:84:32:5d:c4:19:87:f5:dc:d4:4a:ac:
93:72:bd:ab:58:1c:d9:5a:dc:17:83:ca:96:70:7c:
dd:ba:d0:16:29:55:fb:d5:c7:fa:31:cf:ec:f6:2d:
31:42:97:bc:e3:55:21:d8:4c:20:40:d5:7f:bc:6f:
00:76:11:81:09:e6:1a:01:60:9c:ad:4b:47:54:97:
25:45:54:63:82:ef:e1:24:ca:43:be:b9:ba:73:50:
1a:1d:e5:41:4b:ce:43:c0:9b:3d:82:55:a7:59:0f:
1e:8d:10:cb:2e:77:57:de:6c:a5:b8:26:c4:49:ed:
78:75:5b:32:b6:02:21:71:24:54:ab:11:f7:fa:75:
89:fa:cf:eb:d1:cd:ed:62:d3:66:b0:a4:6b:60:3b:
14:a7:f3:11:20:31:c6:1a:e1:8e:75:29:e0:28:c3:
9b:af:61:45:a2:a7:5d:74:53:4b:00:9d:37:fe:93:
f2:5f:e9:ee:e0:cd:4a:1d:fd:81:c3:c8:f7:3b:be:
1d:8c:78:2f:4c:5b:e2:04:8a:cc:2e:3b:6c:55:46:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:FA:FC:42:88:7C:71:24:1F:81:8D:43:21:B5:18:88:7F:73:83
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/OH36_EKIfHEkH4GNQyG1GIh_c4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:f6:21:6d:93:8c:da:78:e9:96:e5:68:01:be:03:9e:a0:b9:
35:fc:aa:7a:8c:f9:95:16:93:47:bb:b9:42:5b:35:9f:9e:e9:
78:93:fb:60:8a:c3:8b:c4:ee:3c:cc:7c:ec:b3:cc:ac:39:5a:
b2:ac:34:d5:a0:37:10:62:7d:72:bc:1e:97:72:17:80:b2:34:
71:10:1c:75:c7:c5:fc:2f:0d:3c:75:3a:e4:f5:43:5a:4b:f8:
66:81:58:59:7f:b7:47:5f:9d:4d:b4:dc:ef:e7:a9:82:63:cc:
24:b7:8a:d8:ba:ab:e9:d2:79:15:c2:b0:d9:f4:94:ae:57:72:
5b:08:ea:ba:d2:63:ea:15:5c:5d:a1:69:88:a3:92:31:dd:4a:
bc:df:76:87:ce:12:bc:15:62:0e:b9:67:88:f4:c3:b9:3a:9b:
6a:fe:7c:b8:db:62:1a:46:11:ed:e3:41:e8:19:cd:e1:39:ec:
cc:a4:91:96:43:f5:20:bf:f7:7c:e2:ec:e7:58:3a:3f:19:75:
5a:37:67:6c:d2:96:ce:73:32:e9:93:01:d7:7d:cf:81:33:eb:
1e:b4:e9:a3:ad:fd:d2:4f:8f:b6:bd:96:ce:52:54:d3:08:6f:
32:2f:93:43:45:9a:90:9b:17:f2:b1:a0:8f:8f:07:97:69:d5:
21:a6:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:38 2024 by rpki-client on console-ams.rpki-client.org