Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7O9CyYY_MjRmNnxi0SjMjFvZrSg.roa
File: 7O9CyYY_MjRmNnxi0SjMjFvZrSg.roa (raw, json)
Hash identifier: ve23aOjjjHs1r1gQFtBBLrmeTpWbPcaGL1D/ChAL81w=
Subject key identifier: EC:EF:42:C9:86:3F:32:34:66:36:7C:62:D1:28:CC:8C:5B:D9:AD:28
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01853C86080113053B222A29708C8C117F4A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7O9CyYY_MjRmNnxi0SjMjFvZrSg.roa
Signing time: Fri 23 Dec 2022 01:08:14 +0000
ROA not before: Fri 23 Dec 2022 01:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3c:86:08:01:13:05:3b:22:2a:29:70:8c:8c:11:7f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 23 01:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecef42c9863f323466367c62d128cc8c5bd9ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:6b:71:1e:0c:0d:12:01:11:a5:cb:00:ce:
04:e9:a1:f6:47:65:2c:22:a3:eb:f8:7d:fb:1f:95:
c6:ca:5e:59:20:4d:58:6f:df:bd:bc:3f:2b:ff:f7:
d7:b2:83:a4:74:3b:76:3a:f5:41:91:44:b5:3a:1a:
86:ce:c8:6c:c4:dd:19:b4:41:dd:d5:c2:d2:f9:4e:
24:a6:55:a3:ee:ae:23:e4:ef:6b:4e:23:4c:42:d4:
b7:75:8c:2e:c2:23:b1:db:6c:fe:dd:06:15:4a:5c:
a1:cd:4c:90:7e:e3:cf:6b:7d:c5:26:de:9a:f2:2f:
24:4d:a0:a2:88:4a:d3:78:df:26:da:c4:39:63:74:
6e:e4:0c:44:93:5c:0c:95:03:37:71:03:9f:e2:4a:
99:16:ea:89:a8:5c:9f:ec:14:1b:c7:62:eb:a2:6f:
d0:5b:eb:78:54:6c:20:27:9c:12:57:bf:5b:cf:14:
90:37:44:45:13:5c:08:23:4a:27:e9:f0:c0:cd:31:
c8:5b:05:91:56:ea:e4:a1:b5:ec:57:c3:94:49:57:
78:cd:8e:53:7b:65:69:bd:c4:47:db:d4:88:e2:e0:
f9:80:f1:cd:1e:8a:0d:fe:23:cd:71:9b:48:ae:ad:
9b:c7:56:6e:ae:bd:42:43:b4:c1:5d:28:99:37:3b:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EF:42:C9:86:3F:32:34:66:36:7C:62:D1:28:CC:8C:5B:D9:AD:28
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7O9CyYY_MjRmNnxi0SjMjFvZrSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:50:cd:01:ff:d2:67:1a:81:da:d5:d4:20:67:0b:2e:98:91:
47:de:f4:f8:df:c0:7c:71:32:8b:22:76:49:d9:79:0b:85:a5:
54:0b:07:4e:20:9f:5c:e7:ef:2e:87:83:b5:c3:c3:05:7d:93:
17:9b:d5:cf:2f:04:c5:0b:48:7b:98:ef:79:9a:18:f8:bd:ae:
c3:ac:d3:28:ac:82:05:18:16:49:03:26:d6:b3:d5:39:a7:54:
f0:99:10:fd:ef:59:b5:91:ed:45:10:42:6e:f9:cb:cb:d4:92:
e5:cc:b6:05:56:6b:24:e4:09:9c:57:8d:9c:c9:eb:5a:6b:13:
b8:fd:94:ec:fa:89:82:57:21:61:2d:dd:ed:c9:83:2b:ae:b2:
84:ac:e7:a7:0c:14:d3:d6:ac:07:8a:ff:69:5e:30:69:d2:2d:
63:2d:53:9d:87:33:9c:72:59:f9:d9:3a:2e:3f:88:2c:dc:3d:
1c:19:62:a4:8b:71:41:8c:7a:06:ec:de:a3:bb:98:33:a0:3a:
ce:29:ae:d7:a4:c9:db:5f:5c:e1:2f:bf:3f:77:37:83:70:62:
27:0b:4d:a5:57:d4:a5:b6:89:2e:bd:11:b4:69:e4:4a:e1:d4:
5d:ef:d7:c5:63:87:95:04:f7:b7:93:5b:51:cc:41:40:5d:c2:
db:b5:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org