Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z5wX2gKAKCWTxqwxc4zsHXrIsZs.roa
File: z5wX2gKAKCWTxqwxc4zsHXrIsZs.roa (raw, json)
Hash identifier: Cs8wTf23Oz0QSEOJCxKfVoPOYSRGzULq1dsxPzStOKw=
Subject key identifier: CF:9C:17:DA:02:80:28:25:93:C6:AC:31:73:8C:EC:1D:7A:C8:B1:9B
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AFACEEE
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z5wX2gKAKCWTxqwxc4zsHXrIsZs.roa
Signing time: Sat 01 Jan 2022 13:57:58 +0000
ROA not before: Sat 01 Jan 2022 13:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198408
IP address blocks: 77.65.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721080046 (0x2afaceee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf9c17da0280282593c6ac31738cec1d7ac8b19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:b7:5f:53:37:57:c4:4f:09:c6:80:d1:59:
ce:e6:8e:b1:de:ce:17:51:57:05:15:58:6b:81:f6:
31:7c:c1:50:49:64:6a:41:aa:a5:da:31:de:99:81:
d3:0a:10:00:97:98:2d:85:a6:8d:a8:c4:a6:16:53:
5f:53:30:ca:91:95:c9:b6:d0:8c:18:c2:ec:54:58:
49:bb:86:73:fe:bd:b9:05:09:50:e3:6a:d7:d6:39:
62:e8:31:41:78:03:ec:9f:1f:5a:db:d7:3b:37:ab:
5e:26:76:d5:55:eb:5e:21:59:15:21:20:81:d5:d7:
f3:22:35:09:96:17:d7:5f:31:4d:9a:54:ef:8d:2b:
d8:f2:b7:bd:4d:dc:49:5c:6e:12:89:2a:54:8f:a5:
a3:b7:68:ae:65:ad:17:32:0e:0b:e4:4b:db:3d:bf:
55:46:05:16:10:c4:2f:8f:59:69:9a:da:1c:6c:1f:
3f:2a:70:3b:83:26:8c:28:a0:8d:d3:bf:43:0a:f2:
de:0b:3f:cd:c9:94:52:a9:55:8a:26:1e:bc:3a:4f:
9c:7e:97:02:65:79:a5:23:7a:e2:35:f2:73:a4:3a:
ee:77:8f:79:21:40:cb:53:45:b1:f6:8f:33:58:72:
d2:e6:aa:f5:9b:63:44:46:db:bd:eb:78:e6:8d:fb:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:17:DA:02:80:28:25:93:C6:AC:31:73:8C:EC:1D:7A:C8:B1:9B
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z5wX2gKAKCWTxqwxc4zsHXrIsZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.189.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5b:d9:cc:74:1f:71:b6:df:9c:d7:4b:d9:ae:84:5c:2d:1c:
7a:90:46:b9:c3:bb:76:cc:68:2e:9a:a8:e9:b4:b9:a0:c6:2a:
5e:21:a2:4b:c0:eb:0d:43:b2:cb:f1:3b:ed:45:62:3b:de:b5:
ae:c0:6a:f6:6f:ba:30:b3:b0:93:62:ac:ab:71:d1:8a:8e:c5:
da:7c:11:76:01:54:ea:82:19:19:b6:f7:fa:da:a9:30:98:60:
6a:ed:1d:00:6b:5f:87:ce:5c:38:82:95:26:1b:4c:4f:75:f2:
b9:6a:4b:24:6f:9d:9f:da:0a:51:2e:31:6b:3f:65:9a:b3:d9:
e9:b6:fe:ab:4d:d5:3e:20:64:b7:72:f3:ae:db:44:0a:68:25:
75:ac:25:e4:b2:bc:5f:fb:40:ba:60:23:19:d9:97:b8:e8:d0:
5f:11:9c:22:93:4d:5d:66:86:d5:1a:d6:5e:d9:f1:cf:0c:f5:
90:2a:2e:37:fe:79:93:16:f9:5a:40:c0:2f:e9:6f:0c:84:74:
40:39:13:53:75:9b:71:b4:b4:c1:1c:90:18:5b:93:9d:1a:3b:
0e:cf:73:a1:d3:fc:33:79:13:8f:ab:15:0d:c0:40:c9:1b:cd:
07:68:55:cd:1b:1e:2b:6d:9c:61:8d:af:32:63:9a:32:21:f3:
97:44:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org