Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/_mlLBbNmu49zEYRlDCaIAFfkT8o.roa
File: _mlLBbNmu49zEYRlDCaIAFfkT8o.roa (raw, json)
Hash identifier: RuLGhrFRXY6B7QXqBb77O+r+ktP006pYqdse8EMk1Y8=
Subject key identifier: FE:69:4B:05:B3:66:BB:8F:73:11:84:65:0C:26:88:00:57:E4:4F:CA
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 1757CE97
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/_mlLBbNmu49zEYRlDCaIAFfkT8o.roa
Signing time: Sat 01 Jan 2022 13:58:22 +0000
ROA not before: Sat 01 Jan 2022 13:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43437
IP address blocks: 79.171.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391630487 (0x1757ce97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Jan 1 13:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe694b05b366bb8f731184650c26880057e44fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:e0:b7:1b:91:1b:98:90:04:dc:c2:60:1e:
12:00:6d:34:5b:ab:72:9f:57:f0:82:58:8a:3f:9b:
76:84:19:26:dc:64:f7:48:dd:1c:48:42:35:b5:3b:
e8:24:c8:4c:ad:94:9b:15:90:de:8c:17:06:f5:26:
8a:07:a6:68:99:06:c8:6a:a6:37:75:aa:a6:c4:4a:
a6:b2:e1:14:08:37:46:0e:1b:66:7e:69:a7:cb:99:
56:fd:d1:f3:f9:35:fd:53:dd:13:db:6d:de:2d:63:
79:c0:5f:a6:4c:70:71:6e:c6:18:5d:59:ba:94:f7:
32:ca:71:3c:95:c6:c1:32:c9:0e:2d:63:91:c3:29:
9b:37:e8:3d:36:35:75:a9:32:a9:c6:01:8e:84:1d:
9d:b4:5e:62:c4:da:a6:7a:50:fe:7f:fa:f0:74:3f:
6e:2e:f5:ef:ae:e4:80:cb:da:14:fe:d6:51:4d:53:
54:96:0b:cd:95:9e:99:b2:ca:c6:cd:0c:69:68:bf:
1b:fd:bc:ed:ab:15:29:39:93:75:19:cb:58:96:a2:
91:f7:6d:c9:93:75:3e:06:f7:bc:30:89:ef:32:ac:
01:02:85:aa:dd:90:ad:85:76:d1:75:9e:f6:52:86:
7f:ee:62:ce:a1:8b:d5:3d:b0:71:d4:dc:01:4b:cc:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:4B:05:B3:66:BB:8F:73:11:84:65:0C:26:88:00:57:E4:4F:CA
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/_mlLBbNmu49zEYRlDCaIAFfkT8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.192.0/21
Signature Algorithm: sha256WithRSAEncryption
58:5d:6e:86:60:33:75:fa:3f:eb:e1:ef:46:b3:5e:ba:c2:28:
a7:3b:e9:11:ad:be:61:c7:cd:6d:c8:b6:8b:64:d2:5c:c1:bb:
50:51:6e:dc:03:d0:1d:b6:14:ed:4a:f3:93:3c:9e:9b:5b:98:
38:52:6a:73:38:1f:7c:5f:c6:17:5e:c9:cf:d0:b5:43:25:f8:
9f:d1:b7:4d:20:fe:5c:7c:38:4e:c9:53:71:af:3c:60:c5:89:
51:db:42:7a:7c:38:d5:cc:53:33:50:69:3a:4a:fc:93:2f:ab:
74:6a:82:91:c4:78:9a:c2:64:69:20:53:78:6e:a0:f4:01:70:
bd:82:8f:fc:bf:42:9c:10:aa:40:52:6c:6e:97:e2:bc:7b:48:
da:d2:30:62:ba:10:e5:cd:b4:a6:1b:4a:2f:6b:4b:45:31:36:
2a:e4:f4:1c:c1:b0:01:ca:2f:16:35:8e:21:e1:6a:87:6a:dd:
4c:ac:43:a3:e1:49:9a:41:c8:b8:86:44:55:5f:51:77:19:f5:
45:d7:7c:9f:c8:22:9f:90:3e:c5:52:ae:2e:16:43:fc:e4:81:
ed:32:02:08:7b:40:f6:3c:da:73:2d:9c:92:9a:1f:91:08:c6:
79:ea:98:77:01:ad:31:bf:0b:00:63:ac:61:01:62:15:f1:61:
40:a3:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:20 2024 by rpki-client on console-fra.rpki-client.org