Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2IVO4qGObmiZCnbiz4q3CvctIRA.roa
File: 2IVO4qGObmiZCnbiz4q3CvctIRA.roa (raw, json)
Hash identifier: WdYUix5/XRpIjKL6LbEHX+fQc0Cz+a+BqywKSpp1PxM=
Subject key identifier: D8:85:4E:E2:A1:8E:6E:68:99:0A:76:E2:CF:8A:B7:0A:F7:2D:21:10
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 1656A5DB
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2IVO4qGObmiZCnbiz4q3CvctIRA.roa
Signing time: Sat 01 Jan 2022 13:54:33 +0000
ROA not before: Sat 01 Jan 2022 13:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42907
IP address blocks: 77.245.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374777307 (0x1656a5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Jan 1 13:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8854ee2a18e6e68990a76e2cf8ab70af72d2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f8:d4:bd:c4:6b:e6:c0:9a:4a:02:97:4d:f7:
c8:f1:da:f1:60:82:9d:61:bb:c7:30:18:07:54:47:
79:d1:b6:cf:bf:a1:da:62:c2:e1:f8:74:36:cf:1a:
4e:c9:2a:de:2b:48:c8:d4:4a:f3:f4:01:f6:dd:f7:
fc:be:d2:bd:54:d1:81:71:37:dd:7e:c8:db:bf:9a:
17:5a:1a:7e:32:bf:e2:78:ff:8e:07:72:63:b2:a9:
ec:50:91:69:0d:e5:5a:35:6a:ff:07:2e:8d:5a:43:
7f:0c:1e:7b:7f:3f:01:3f:7a:99:8d:3b:b7:48:57:
cf:14:00:ab:b3:e8:8c:3b:97:5d:c4:15:ed:bd:d4:
3d:58:ed:e0:cb:14:c7:3c:66:02:78:8c:fd:22:b2:
95:c7:f8:cc:ba:20:d1:ed:93:24:c8:89:34:b9:11:
ca:47:14:89:eb:91:27:55:e0:d0:fc:ed:4b:16:61:
59:c7:8f:fd:5d:cd:90:e9:39:a3:cc:83:08:86:7c:
f6:b0:c5:1b:a1:f2:92:7e:35:da:a6:4d:16:db:be:
20:11:62:64:49:29:ad:83:39:5c:9c:0c:4c:eb:e3:
6c:62:09:79:a4:a8:2c:3d:b4:e0:db:01:6d:be:18:
f0:bc:84:5d:bf:40:3b:69:05:5b:19:68:4e:3d:d8:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:4E:E2:A1:8E:6E:68:99:0A:76:E2:CF:8A:B7:0A:F7:2D:21:10
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2IVO4qGObmiZCnbiz4q3CvctIRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:56:6e:2e:83:51:3f:ec:93:0d:62:f7:d8:47:79:d3:d7:0b:
ff:3b:81:b2:8c:ba:1b:21:0c:35:50:ee:9d:73:ca:bf:48:5f:
32:5e:fe:ab:fc:01:a1:59:90:bf:c4:35:0a:cf:dc:ea:71:58:
50:4b:03:f7:d2:70:61:39:16:c8:c7:ba:c7:61:73:9f:24:d9:
31:42:ab:9c:55:d5:50:19:17:82:c8:23:4d:8c:44:3d:21:95:
b7:ee:a8:9d:b3:d7:f9:5e:fa:10:4b:47:7e:88:e8:c4:56:93:
7f:18:20:c4:50:5e:ea:ac:f3:a4:ad:a3:aa:ba:8d:d6:d0:0c:
8e:42:29:c8:73:65:6e:88:7b:ce:cc:a0:57:a3:62:9f:bf:47:
e8:d1:e8:f1:38:e4:61:82:2e:6c:ea:e9:1a:91:4d:4d:16:38:
65:98:f3:50:25:2b:52:25:d6:1c:bd:d9:00:b1:a2:f6:48:4a:
4b:3a:6b:5a:69:df:07:b9:22:bf:76:a0:5a:ae:71:bd:95:ff:
cb:09:1d:0e:42:87:c9:a5:46:16:a1:df:93:e4:c7:a7:53:ae:
cb:b2:77:5e:63:01:91:a4:cf:98:9d:77:42:7d:f1:f3:a5:b9:
ca:ec:65:98:bd:ee:ee:a1:67:0f:cd:0b:d9:d0:70:98:20:22:
01:2b:96:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:58 2024 by rpki-client on console-fra.rpki-client.org