Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4kuv-q6tPiDUkMsNjfXMMorjeYQ.roa
File: 4kuv-q6tPiDUkMsNjfXMMorjeYQ.roa (raw, json)
Hash identifier: jbiTCl0F3oPOBtmLnSueD9whhSOc4qYPR6XPcbb950M=
Subject key identifier: E2:4B:AF:FA:AE:AD:3E:20:D4:90:CB:0D:8D:F5:CC:32:8A:E3:79:84
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B2511B0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4kuv-q6tPiDUkMsNjfXMMorjeYQ.roa
Signing time: Sat 01 Jan 2022 13:58:20 +0000
ROA not before: Sat 01 Jan 2022 13:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213144
IP address blocks: 77.65.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723849648 (0x2b2511b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e24baffaaead3e20d490cb0d8df5cc328ae37984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:53:2d:6c:49:2d:73:0b:bc:ea:43:6e:56:
0b:4d:e1:fc:cc:e9:ae:51:d6:04:1e:f4:bf:6c:5a:
e8:a8:5c:2b:4f:19:af:96:32:19:e7:7d:3c:4a:a3:
52:ef:3c:e6:38:2f:7d:33:d3:88:43:08:68:03:d6:
d1:79:b0:30:c0:76:15:a8:be:02:33:8d:ba:a5:c8:
68:a5:0d:e1:50:bf:ce:aa:77:0a:db:cc:e6:97:35:
4b:87:57:42:72:9b:79:bf:e9:35:19:d8:d6:fd:c4:
38:04:a4:71:3f:84:66:7d:e6:ee:2a:99:ce:6b:70:
e0:c2:2c:5f:c4:e1:6b:c2:3d:50:1c:33:7f:2d:ae:
02:ff:bb:be:db:69:34:d0:4c:59:55:02:c5:08:c6:
4e:3b:d6:ae:4e:4d:35:e9:39:85:88:47:b6:1b:08:
25:b5:21:9f:d0:64:f3:dc:c0:fb:a4:a5:17:3e:58:
26:91:fc:22:f1:11:18:a8:4f:d4:91:f1:c2:ef:f4:
b3:96:44:1d:43:e3:b9:b7:8f:ca:62:be:80:1b:21:
a1:8a:66:b2:e1:ba:ce:cd:15:ed:12:a2:02:ba:e1:
06:e8:8b:08:2d:2d:bc:bf:5d:91:86:9c:ab:ab:03:
5e:9d:69:c0:6a:b7:57:a3:38:17:a6:26:2c:78:68:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:AF:FA:AE:AD:3E:20:D4:90:CB:0D:8D:F5:CC:32:8A:E3:79:84
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4kuv-q6tPiDUkMsNjfXMMorjeYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.154.0/24
Signature Algorithm: sha256WithRSAEncryption
83:06:25:6f:cf:31:ef:dc:7b:98:c0:f1:e1:c9:a6:53:d6:86:
45:e1:c6:c3:65:00:40:3c:e8:73:d8:b6:4c:96:fb:fc:8b:08:
c9:ea:1e:fb:fc:e8:e7:83:b9:ae:97:35:1e:70:d2:9f:f1:07:
0f:18:8f:b3:73:71:a7:86:c9:b4:86:86:67:c1:ec:12:19:78:
08:68:9f:ac:2c:54:aa:e9:9f:4f:8d:f3:2c:79:1f:b6:b1:5b:
d4:00:31:3b:47:ed:f8:d5:f0:f9:9a:da:6b:b6:4e:c9:ce:09:
ea:f5:b5:19:4e:65:ff:e2:0d:d4:13:ed:e8:23:4e:63:24:d4:
96:d6:44:67:4e:31:f6:01:7f:dd:59:e6:d1:7a:8a:ab:ea:27:
14:41:f0:dd:31:82:d1:5d:67:d5:53:87:11:11:cf:27:75:dc:
7a:ff:ee:70:7c:d1:c1:4d:c2:b4:ca:2e:c9:40:36:ad:bd:db:
20:27:97:cd:fa:36:43:15:23:28:ee:6f:c0:f7:19:79:d5:73:
30:36:ff:47:a6:36:8a:28:dc:7d:01:aa:4a:52:69:42:ee:c9:
38:52:12:e8:da:6d:7e:97:f7:68:ee:d3:c1:ff:b1:0d:0f:8c:
72:54:0a:92:43:f7:81:3a:f1:e4:50:59:8d:4e:63:80:6b:ad:
35:d4:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org