Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0vD-qdzzuGu-q-dogbAjTauaQ4.roa
File: I0vD-qdzzuGu-q-dogbAjTauaQ4.roa (raw, json)
Hash identifier: Lnx5fAA8avCCytmiggf/4Je5yD7nLsG15/W62vW1rYc=
Subject key identifier: 23:4B:C3:FA:A7:73:CE:E1:AE:FA:AF:9D:A2:06:C0:8D:36:AE:69:0E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184A4A91992FD7376B452BD4A2735DE396A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0vD-qdzzuGu-q-dogbAjTauaQ4.roa
Signing time: Wed 23 Nov 2022 13:24:16 +0000
ROA not before: Wed 23 Nov 2022 13:24:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
45.138.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:a9:19:92:fd:73:76:b4:52:bd:4a:27:35:de:39:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 23 13:24:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=234bc3faa773cee1aefaaf9da206c08d36ae690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:57:6d:da:8d:27:7a:ee:a9:6a:6c:7c:bb:
71:9a:99:b2:40:a6:88:5b:04:64:dc:33:69:77:12:
37:7c:3b:4e:f9:c2:2a:b5:96:f6:db:1e:fe:c5:62:
f6:48:fc:e9:ce:9a:24:7f:d5:c3:80:6c:d9:c9:fc:
6a:b2:bd:da:8c:39:d7:17:96:a9:e5:45:aa:34:1a:
aa:e3:c7:cd:a3:47:ea:8a:b0:c2:c0:93:78:ab:3c:
0c:2d:7e:21:19:f6:94:e0:3b:6c:81:ea:55:ae:ad:
68:2a:dc:e9:bd:9c:e7:36:59:df:d4:a2:e7:62:27:
c8:c5:4b:c0:f3:76:7f:53:46:b1:99:84:d2:2e:d9:
85:41:57:f2:58:5a:ce:46:70:43:93:94:4a:ce:d3:
d8:30:8c:36:cd:7e:ce:37:44:80:75:fd:d8:fd:5e:
53:f9:f9:2d:ca:e4:31:96:8c:d6:98:db:7f:6e:18:
ce:42:37:c3:63:32:0f:1b:af:d2:51:02:71:3b:3f:
8f:5d:cd:3a:58:51:a5:5f:8c:a1:38:e4:5f:17:e8:
54:75:66:5e:6e:6d:b4:a5:d6:a6:83:0f:95:d6:da:
ab:6d:a4:4a:f8:97:47:62:c6:94:28:1b:75:a0:cf:
7b:cf:da:ca:59:a0:c8:77:d0:f5:e5:8c:16:29:00:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:C3:FA:A7:73:CE:E1:AE:FA:AF:9D:A2:06:C0:8D:36:AE:69:0E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0vD-qdzzuGu-q-dogbAjTauaQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.182.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c2:b3:70:5d:18:6e:5f:ee:3b:76:74:49:7a:81:82:a8:30:
d7:0a:4f:e3:b6:07:a5:c7:2f:c3:29:6d:b1:90:8d:0d:7a:3c:
2f:80:c6:57:8c:f1:d3:34:e9:39:c3:48:aa:a7:4d:f3:9f:53:
c7:9c:d5:be:44:ed:18:cd:d7:fb:9f:1d:43:96:55:f3:f6:bd:
28:bd:7e:4e:d5:d8:77:46:64:ec:c7:e7:1e:f0:68:8c:45:19:
a6:ce:1b:4c:59:d0:39:fc:db:4f:2c:ec:fc:bc:1d:2b:2e:eb:
32:6f:7c:77:5a:62:78:cf:cf:a3:86:57:77:71:80:fb:c5:98:
16:cc:6a:ab:a1:c2:ad:8d:a7:fe:6e:ae:43:ba:ba:cf:ac:83:
16:ba:6b:22:f7:5d:8d:f7:c0:e0:8a:f1:5f:f9:7e:d7:63:eb:
10:1f:1d:d6:e3:c7:3a:05:d1:ad:59:ec:e1:7e:c9:4b:18:73:
91:5a:67:73:4b:e2:c6:26:c8:b6:0e:fd:ca:e0:6d:a6:1c:7b:
b8:b4:f5:89:e3:d0:60:b5:3c:5d:7c:8b:49:9b:dd:13:22:4d:
4f:78:aa:d0:c8:b6:ef:68:be:07:d4:b7:13:5b:e8:d9:62:45:
9a:0e:47:99:0b:35:2f:f1:5b:d4:d5:55:91:6b:5d:58:29:0c:
47:76:cf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org