Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WApa1hYqCajxiX_QVJRMWgMNl-E.roa
File: WApa1hYqCajxiX_QVJRMWgMNl-E.roa (raw, json)
Hash identifier: NV5ShcKMiL7+a88LzhA3n0LYXK35dowX062VlEf4fU8=
Subject key identifier: 58:0A:5A:D6:16:2A:09:A8:F1:89:7F:D0:54:94:4C:5A:03:0D:97:E1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0182191691A2FD9E3ABA40E7D8775D9F3B68
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WApa1hYqCajxiX_QVJRMWgMNl-E.roa
Signing time: Wed 20 Jul 2022 00:51:25 +0000
ROA not before: Wed 20 Jul 2022 00:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204063
IP address blocks: 77.65.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:19:16:91:a2:fd:9e:3a:ba:40:e7:d8:77:5d:9f:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jul 20 00:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580a5ad6162a09a8f1897fd054944c5a030d97e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:25:ad:06:22:cf:98:9c:45:ad:35:6a:80:1c:
3e:7c:6f:62:94:21:ba:35:7e:7f:55:a9:7a:69:32:
ff:a7:b1:bd:b1:4e:88:a7:8b:03:68:67:6b:8e:1f:
e0:89:99:d3:a0:3a:ad:b2:09:f9:de:cc:9d:de:48:
80:7d:6c:c2:b6:01:5b:52:c0:75:48:f6:c1:ac:b0:
b6:4b:b7:c9:20:a3:09:ca:95:3c:86:9f:73:ea:ca:
4c:7d:04:2d:01:63:00:11:56:95:26:86:35:b1:61:
09:06:39:ca:74:94:de:a2:51:2d:9b:67:7d:1e:d0:
c3:4b:0f:73:2a:0f:62:2c:1c:13:69:bf:d8:1f:cc:
aa:da:7e:7b:89:e0:1a:65:19:3b:cb:3c:e7:92:4b:
4d:af:61:00:70:50:cf:90:97:27:6f:0a:a4:eb:7a:
e0:d4:d9:fe:26:a8:35:e3:e0:3d:9c:73:cb:80:1e:
ed:02:dc:ea:4d:ea:b7:72:37:03:03:d4:bf:b7:c8:
d5:6e:88:72:76:7f:f3:aa:85:23:4f:52:89:83:df:
b8:33:98:05:a2:2b:b8:f0:20:5b:50:7e:6b:aa:e8:
d9:f9:2b:50:ad:f9:96:71:c5:d0:00:3a:46:8d:44:
48:4a:47:8e:87:ac:eb:16:10:12:47:86:25:d2:b3:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0A:5A:D6:16:2A:09:A8:F1:89:7F:D0:54:94:4C:5A:03:0D:97:E1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WApa1hYqCajxiX_QVJRMWgMNl-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.140.0/24
Signature Algorithm: sha256WithRSAEncryption
60:52:2d:c1:bd:a4:b1:9b:4c:36:ab:83:65:d7:10:23:79:fd:
d0:91:15:4e:5b:68:52:72:01:46:bc:d6:3e:3c:f6:39:12:e8:
38:af:98:74:8c:35:d8:ee:43:d9:8d:78:c7:23:80:5c:bd:1c:
5e:df:3e:e5:33:c4:97:f4:d4:ef:4b:de:90:2e:b5:fa:be:94:
ab:9f:21:f6:61:fb:f5:c1:5d:fd:c0:cc:6b:72:d1:58:da:71:
21:ce:dd:72:47:17:6c:9a:48:bb:d0:20:cb:f3:34:8b:84:52:
f6:d0:f7:74:f0:12:46:80:c7:24:8d:d5:5e:0a:20:3f:d0:b1:
05:b2:65:83:7d:de:fe:fc:17:ca:54:d0:80:99:13:d2:91:66:
27:f6:d6:c6:af:30:40:dd:b5:f5:11:70:71:8b:6c:3e:5a:24:
fa:ef:df:b6:8d:9f:58:1d:eb:80:2e:78:f5:db:75:26:a3:af:
9b:c0:54:54:d4:f1:65:9e:54:44:87:be:b9:5d:05:8e:35:0f:
50:99:19:70:3e:72:86:72:64:7e:08:d0:35:1d:90:62:37:9f:
0f:7e:6c:8a:d2:5f:f2:bd:95:c5:5a:35:5a:17:a3:bb:5e:7a:
db:91:d9:05:bb:e6:df:2d:de:12:02:12:6d:34:73:b9:7f:47:
95:de:6d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org