Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/RFQNkuapkm4yTjOX0kd9EVSfP_c.roa
File: RFQNkuapkm4yTjOX0kd9EVSfP_c.roa (raw, json)
Hash identifier: EqQ0ZOyxd7BS6apTNBOo7mbNJTsgdZIoy1/sLtx0BH0=
Subject key identifier: 44:54:0D:92:E6:A9:92:6E:32:4E:33:97:D2:47:7D:11:54:9F:3F:F7
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 0699D9A9
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/RFQNkuapkm4yTjOX0kd9EVSfP_c.roa
Signing time: Sat 01 Jan 2022 16:10:31 +0000
ROA not before: Sat 01 Jan 2022 16:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8578
IP address blocks: 83.136.76.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110746025 (0x699d9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jan 1 16:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44540d92e6a9926e324e3397d2477d11549f3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:73:4f:3e:22:3f:c2:37:49:be:d6:10:d8:
68:22:63:ef:96:16:9a:92:75:2c:42:1b:dd:ef:22:
1a:e3:ba:7d:25:7a:f7:42:e8:24:05:aa:4a:2d:e0:
97:52:52:91:ae:25:a2:d6:2b:3e:90:33:ce:33:0d:
16:ed:3c:91:fa:71:bf:a8:f7:30:fc:38:a4:f4:68:
76:8a:41:57:7c:ea:55:c2:dc:96:0c:1a:23:e5:76:
35:cb:ba:ac:27:a7:00:cb:cc:48:dd:17:e0:b1:e0:
b0:1c:ef:b4:48:ba:27:28:b0:16:54:c4:0c:15:ec:
fe:c3:14:5a:76:94:20:87:f3:5d:5b:34:b6:cd:07:
16:3a:46:55:19:7c:b4:51:cf:74:d8:46:26:7a:14:
f3:51:1d:63:6c:80:d6:5a:0c:c7:95:9a:c1:2a:56:
f6:48:ef:eb:e9:c3:da:7b:50:27:46:71:ca:e1:5d:
4c:8c:2a:da:10:a9:be:e3:d0:22:cc:27:46:89:4d:
4d:cf:af:90:63:f5:54:02:9f:bb:c0:62:b3:93:5a:
84:43:ec:b7:9e:37:37:e4:bf:6d:bd:2c:76:67:5e:
56:86:b8:61:0e:e0:48:a2:b5:c8:62:f1:f4:2e:0e:
96:48:cd:f1:9d:6c:c0:0d:7b:74:77:b2:8d:86:a2:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:0D:92:E6:A9:92:6E:32:4E:33:97:D2:47:7D:11:54:9F:3F:F7
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/RFQNkuapkm4yTjOX0kd9EVSfP_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.76.0/23
Signature Algorithm: sha256WithRSAEncryption
78:de:9d:4d:62:ef:05:b3:cb:38:a0:04:74:89:25:5b:b1:af:
77:a9:d8:98:4f:90:0b:50:7a:3b:73:28:cd:e0:9d:bd:c6:bd:
48:72:2e:88:9d:cd:2d:e5:50:b6:8d:4f:2e:d1:8c:c1:04:60:
ab:62:07:7b:91:ba:6d:3a:4e:4d:42:3b:54:d5:ff:0b:90:84:
8b:9c:e1:ee:57:ce:ab:c7:83:08:73:73:13:bd:88:fb:e8:fd:
4c:e3:ee:9a:87:29:d7:64:53:6b:09:f5:e0:c0:6c:12:97:c0:
3b:73:e7:f3:bb:95:c2:ec:85:89:53:98:66:43:ea:52:74:e7:
4c:73:64:1b:d1:99:7f:6b:1e:8b:31:69:ee:e8:08:65:40:d5:
5a:e7:da:10:f3:43:79:35:93:ef:14:32:cc:dd:80:4e:b4:fb:
6b:72:22:3e:6d:d8:7f:ec:bd:49:bf:38:85:ca:ff:77:16:c1:
5f:4c:97:55:52:04:21:4c:5f:86:da:74:bd:be:f1:ef:5b:3a:
ab:5a:82:95:86:90:c6:5f:c5:d0:13:8c:43:5f:f0:ec:46:95:
0d:ed:44:53:4b:07:1d:59:28:d0:d7:fb:02:47:bf:d1:3d:65:
b8:1d:eb:c1:9f:f3:96:6c:12:03:39:f3:18:31:3c:8d:16:6d:
63:05:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:01 2024 by rpki-client on console-ams.rpki-client.org