Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dxj0kBI5sZwWAYCG442eegcQag4.roa
File: dxj0kBI5sZwWAYCG442eegcQag4.roa (raw, json)
Hash identifier: 8TbpHnFrG1UssDDV+oFspU/9BvR6X/Kn5k5rXkj0gxs=
Subject key identifier: 77:18:F4:90:12:39:B1:9C:16:01:80:86:E3:8D:9E:7A:07:10:6A:0E
Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial: 0A32079D
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dxj0kBI5sZwWAYCG442eegcQag4.roa
Signing time: Sat 01 Jan 2022 15:02:37 +0000
ROA not before: Sat 01 Jan 2022 15:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 185.177.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171050909 (0xa32079d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Validity
Not Before: Jan 1 15:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7718f4901239b19c16018086e38d9e7a07106a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:08:f6:4f:fc:eb:4a:b7:fb:45:5e:d9:3f:
4b:09:94:ee:cf:3a:65:2b:ac:52:e2:90:e7:8d:fc:
72:29:df:07:d7:c4:6b:42:14:50:fc:88:66:9b:9b:
f6:92:3f:45:c2:28:fa:64:6b:5b:9d:a3:d3:c1:af:
50:64:0f:bb:e7:ac:63:33:4b:26:64:4a:cd:31:0e:
09:0a:c0:b2:56:ec:b8:1d:24:5c:7c:5b:eb:37:e9:
55:60:5a:c6:90:33:2a:b5:e9:7d:bf:47:62:e1:89:
7b:81:e6:3e:6f:3a:fc:cd:d7:6a:dc:dd:a4:99:0f:
c0:51:a0:b1:f7:4f:76:38:4a:0e:4f:72:6f:e7:ff:
47:7f:df:cb:0c:6c:d6:1e:79:34:0f:bb:7b:5c:3b:
b0:dc:5b:ce:3d:34:8d:12:f6:c6:02:d2:ae:27:50:
2b:ec:1c:ef:71:92:f7:82:c3:09:8c:29:51:cb:b3:
7d:62:3d:e8:9d:b7:6e:a6:e4:ad:3f:f1:93:85:d7:
66:56:5f:f9:0c:e9:bf:1f:7c:35:1c:44:0b:f1:57:
f9:2c:ba:b0:61:93:15:09:c6:f4:76:ad:28:6b:f8:
7f:79:38:47:e4:d0:c1:64:48:16:08:4f:c8:b4:64:
9a:3c:d3:e0:63:6e:90:c8:19:50:23:ab:65:81:88:
f4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:18:F4:90:12:39:B1:9C:16:01:80:86:E3:8D:9E:7A:07:10:6A:0E
X509v3 Authority Key Identifier:
keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dxj0kBI5sZwWAYCG442eegcQag4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.228.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7b:cc:fa:6e:7d:ef:f0:da:36:fd:08:3e:aa:e1:24:b2:d6:
e7:81:74:44:96:d8:c4:45:65:19:07:03:75:b9:3c:17:8a:3c:
14:af:38:3f:7b:3c:8f:a7:da:0a:41:29:32:34:61:0a:8f:c0:
0a:77:c4:24:2b:3c:da:d4:f3:85:09:24:82:59:40:1e:a0:00:
4c:85:2b:6c:21:ba:09:f3:6f:f3:cd:61:45:49:37:dd:86:9e:
71:3d:3d:1d:d7:36:d9:24:77:79:e5:2f:3c:b4:13:69:ca:79:
73:8c:17:d3:a0:c0:86:80:c6:16:66:99:0a:9d:8b:e9:2c:9d:
90:0e:36:16:3a:bb:12:da:28:1f:a6:e2:6e:d8:9c:9b:4d:8c:
6f:ac:ce:79:f5:1b:b3:93:2d:88:f7:c9:ac:83:37:8a:cb:e1:
a3:83:41:1f:8a:c9:88:80:06:8e:e2:d0:21:70:4b:4f:2d:e9:
0f:27:2c:8e:ce:13:d8:24:c1:0d:79:8d:43:4d:9b:59:59:ab:
98:dd:13:b4:28:0a:9e:16:3a:d0:ed:ce:72:be:01:a6:cf:50:
9e:2b:a3:f4:03:58:f9:9b:bf:73:c2:21:57:6e:59:e8:c8:9f:
2a:9a:1e:2f:5c:de:d5:68:f9:45:d5:35:89:41:0f:ef:8d:5a:
77:88:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:37 2024 by rpki-client on console-fra.rpki-client.org