Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KvIY4Tq4xd8iY-OddzEL5zhob0k.roa
File: KvIY4Tq4xd8iY-OddzEL5zhob0k.roa (raw, json)
Hash identifier: +6jCX9FS2musNXbg/cROQAQ/3yWO6D7RkOUIdlH2AHA=
Subject key identifier: 2A:F2:18:E1:3A:B8:C5:DF:22:63:E3:9D:77:31:0B:E7:38:68:6F:49
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2C5E48DA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KvIY4Tq4xd8iY-OddzEL5zhob0k.roa
Signing time: Mon 16 May 2022 13:31:03 +0000
ROA not before: Mon 16 May 2022 13:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209066
IP address blocks: 77.65.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744376538 (0x2c5e48da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: May 16 13:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2af218e13ab8c5df2263e39d77310be738686f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:61:61:d0:65:8c:94:f7:40:5e:76:cd:ea:
96:42:5a:0b:4e:76:25:80:2e:1f:39:52:a8:0c:4a:
e0:c7:d0:59:c9:7c:95:bb:62:6d:c0:82:9c:70:81:
84:ee:82:d6:39:b4:0b:33:c2:17:55:25:44:99:f1:
41:35:ee:04:68:2b:43:e5:56:b9:24:39:36:ac:37:
fc:eb:b6:b9:60:4c:f7:c3:c3:1b:0f:89:45:b0:a8:
ce:0b:1f:b7:3a:a8:66:c0:7b:da:8b:9f:13:6b:5b:
d9:fe:31:92:b0:27:f5:48:6f:d8:58:a1:3d:11:fe:
7c:89:0c:05:4b:75:23:d4:42:77:10:fd:05:75:32:
a2:5c:63:7b:40:41:ea:77:98:c6:9a:72:a0:60:8b:
35:60:e9:70:e4:fc:44:2a:94:0f:fb:f3:25:d0:1a:
1a:b9:f7:5a:16:33:ab:7e:17:d6:d0:e0:79:43:02:
90:8f:7b:33:43:5c:30:1d:79:6d:33:cb:b3:33:b9:
b8:cc:c6:e1:5b:98:85:d1:ae:47:d0:8d:88:20:a3:
be:40:be:e6:9e:6f:0c:1e:ab:a2:e8:bd:0e:23:4b:
54:b2:0f:d7:95:d1:95:8b:76:36:67:2a:55:bb:83:
c0:84:5e:d9:04:16:a0:d7:69:f5:2d:f6:58:a3:cd:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F2:18:E1:3A:B8:C5:DF:22:63:E3:9D:77:31:0B:E7:38:68:6F:49
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KvIY4Tq4xd8iY-OddzEL5zhob0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.222.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2e:ed:7a:ca:27:95:8e:18:7e:97:90:02:0c:5e:47:7e:57:
d1:19:3f:47:ce:2f:3e:57:71:0a:1a:4c:3d:e3:bf:23:07:35:
0e:ea:72:4d:bf:85:57:09:d2:cb:0e:a4:e9:1c:78:86:6a:18:
04:d7:e4:6a:af:95:77:6c:d5:55:fb:3c:e4:c0:cb:23:dc:a7:
8f:1b:7c:5a:92:01:42:69:70:38:86:55:d0:d8:b3:8c:b0:80:
81:8b:7c:b5:a4:59:a7:e8:66:c9:80:6a:ff:a5:ad:0c:09:f4:
f6:4b:05:70:ac:c0:86:ef:66:22:7c:10:b5:7f:1b:d7:88:16:
ae:cd:79:77:1e:54:54:ab:a3:b3:3c:bd:6c:ad:2d:48:04:26:
3b:fd:3c:01:28:e5:99:f6:b8:26:43:47:5e:35:3c:4b:42:39:
2d:dd:1b:49:90:0c:cb:ac:8e:18:d9:6c:1a:38:1d:53:9d:d3:
ee:30:30:11:43:54:e1:e6:8c:fd:fc:aa:2b:3e:81:b4:13:81:
67:dc:6b:41:07:18:f5:ae:71:67:c6:67:53:70:ad:49:61:f1:
ed:7c:d3:20:04:68:b2:02:d1:0d:42:f1:f0:e6:72:bd:cc:f5:
c1:3f:0d:bf:af:a3:89:7f:68:9d:4e:c9:a8:35:85:84:75:ec:
e2:3f:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org