Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D5Yy-I6Yk6rkCmB7fiQyBWwLyng.roa
File: D5Yy-I6Yk6rkCmB7fiQyBWwLyng.roa (raw, json)
Hash identifier: 3k5AFnB5G0qHGW9q/+C+TYUq7j9ufcxx0yBU3D9QRQM=
Subject key identifier: 0F:96:32:F8:8E:98:93:AA:E4:0A:60:7B:7E:24:32:05:6C:0B:CA:78
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B21BD5D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D5Yy-I6Yk6rkCmB7fiQyBWwLyng.roa
Signing time: Sat 01 Jan 2022 13:58:18 +0000
ROA not before: Sat 01 Jan 2022 13:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210407
IP address blocks: 77.65.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723631453 (0x2b21bd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f9632f88e9893aae40a607b7e2432056c0bca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:a4:9d:41:12:f2:a4:11:ae:29:7d:2c:c8:
de:22:e0:e0:11:43:43:a0:0e:c8:98:69:d5:58:75:
56:ad:06:7b:30:fb:f3:f7:24:08:ed:fd:c9:94:4d:
3c:1f:ae:7c:52:3c:b6:ef:14:a0:ca:8f:6b:59:d6:
84:37:62:82:ee:9f:58:d0:1b:2a:11:d2:1d:70:d7:
d0:bc:29:be:78:f8:47:9b:2e:c6:be:7b:e9:da:39:
80:e4:f6:ca:38:11:06:59:cd:a4:2f:fe:7b:a0:36:
3f:3c:2d:a3:87:2b:3e:97:58:f0:3e:4c:36:c5:84:
b8:0f:f5:1c:3f:4d:94:99:ea:38:c9:97:5a:f5:fa:
82:66:ad:2a:88:f9:24:16:37:3d:db:20:cf:1b:d0:
e8:b8:23:4b:05:01:06:98:3b:33:83:ca:fa:55:98:
b9:ab:3e:3b:a8:a9:9e:4e:58:f1:fa:15:fb:d5:ea:
d2:2f:64:a3:c5:3a:dd:32:1f:3c:5d:79:00:7e:fa:
ff:00:ea:5e:b6:22:59:f6:2b:d6:c0:e8:50:e8:ac:
2a:80:2a:d0:59:9f:0d:73:43:00:87:aa:77:e8:49:
1d:b4:cb:00:2c:2e:30:17:f0:58:4d:e3:8e:19:c1:
94:69:c2:a0:ea:95:eb:c1:62:9f:4e:f3:7c:f6:07:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:96:32:F8:8E:98:93:AA:E4:0A:60:7B:7E:24:32:05:6C:0B:CA:78
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/D5Yy-I6Yk6rkCmB7fiQyBWwLyng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.205.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b2:f9:7f:d4:ea:30:dc:eb:86:86:8d:39:b8:cd:e9:98:a9:
6f:2f:33:02:ca:39:44:9b:70:9e:e4:99:c8:77:d1:64:bd:30:
bc:58:de:7a:b6:72:46:e8:56:26:1e:4f:14:d8:e6:e7:a1:84:
d5:2b:a3:ad:48:3c:88:fd:56:ee:b5:0c:3a:38:81:cd:ed:0b:
04:59:4e:eb:c5:1d:16:c9:18:56:7b:82:db:f6:66:b0:e9:e6:
0a:8a:f7:c7:11:24:88:b7:59:e1:d8:18:3b:fc:06:77:27:a0:
94:86:63:46:c9:d3:5e:17:50:be:eb:5e:f3:80:f4:c9:79:45:
6d:97:df:58:cb:20:94:34:c2:ee:a6:9e:46:53:ad:72:84:ae:
45:b3:0a:3c:21:f1:a6:9e:a6:b1:d6:e6:8e:41:a4:7d:53:06:
4f:29:63:86:27:e2:ac:b4:40:6a:9f:a0:6e:a0:8d:38:93:50:
0f:83:0d:b4:65:fa:ae:8d:ce:d4:51:de:c4:51:22:7d:19:f4:
c7:4c:b9:c2:e2:f9:83:fb:3c:49:cd:82:4e:ba:c2:40:e7:fd:
16:69:34:64:b6:9a:95:19:cf:05:dc:3a:a6:30:63:98:5d:56:
91:f9:43:03:69:ae:d4:9f:29:56:aa:3e:01:54:ae:06:d5:97:
eb:6b:9c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org