Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RS9__dQejYNdMwwhTvysfrWMl6Y.roa
File: RS9__dQejYNdMwwhTvysfrWMl6Y.roa (raw, json)
Hash identifier: jgKvrgt9vOOTiZOgzu1jcJUYtq224P3Bw47ldunsQWA=
Subject key identifier: 45:2F:7F:FD:D4:1E:8D:83:5D:33:0C:21:4E:FC:AC:7E:B5:8C:97:A6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01848AA84D43392351BBEF52DC67142F92CC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RS9__dQejYNdMwwhTvysfrWMl6Y.roa
Signing time: Fri 18 Nov 2022 12:13:16 +0000
ROA not before: Fri 18 Nov 2022 12:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212298
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:a8:4d:43:39:23:51:bb:ef:52:dc:67:14:2f:92:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 18 12:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=452f7ffdd41e8d835d330c214efcac7eb58c97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:31:db:58:6a:57:aa:36:4c:d7:b2:4b:14:
a6:6e:6b:6d:d6:2f:00:ad:03:68:ac:43:cd:9c:b0:
fe:9c:32:eb:d3:f4:97:0e:0f:47:f5:e3:b9:00:2a:
a0:29:7c:2a:95:dd:da:99:14:22:6e:c5:13:26:ab:
9d:e7:36:b9:23:67:79:84:e0:5c:2f:ab:bd:df:7e:
2d:08:de:8c:49:ef:05:2f:4a:7e:2d:fd:4e:a1:23:
42:1e:f2:b9:14:c5:77:5b:04:87:4b:50:25:dd:f0:
a6:fa:64:94:c2:de:03:62:fa:ea:3d:f0:f1:9d:fa:
1a:4e:1c:dc:ea:05:72:6c:9c:22:8d:a1:c9:83:7d:
96:ac:8f:57:5f:4a:f6:d8:db:53:89:a4:28:26:8b:
2b:b1:63:ed:21:d8:29:42:75:87:ea:fa:91:50:7d:
7e:75:f0:fb:2a:9a:a9:ff:9d:3c:10:82:d6:7b:ae:
d9:7d:44:1d:fe:4e:07:4d:08:1c:1f:0b:72:b3:bb:
26:91:38:25:35:55:15:63:6d:f0:7a:de:3d:0e:90:
1a:46:36:09:46:5b:14:78:a6:44:94:af:71:de:6c:
97:c2:86:c4:aa:85:af:bd:b1:26:72:ec:ed:15:16:
52:a0:31:38:4a:ee:3f:cd:77:70:f1:f4:15:af:ca:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2F:7F:FD:D4:1E:8D:83:5D:33:0C:21:4E:FC:AC:7E:B5:8C:97:A6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RS9__dQejYNdMwwhTvysfrWMl6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a2:5e:2b:0c:e1:06:c0:65:db:14:c8:3a:8f:9f:58:82:d4:
54:10:15:f6:fc:21:dd:46:07:c3:af:aa:55:e8:f7:52:bc:da:
33:f7:1e:30:9f:d6:0d:2f:80:c3:6e:6d:b9:26:f6:5a:c1:f8:
93:3e:ed:2b:e8:6b:bf:c5:35:bf:76:77:f7:4f:96:88:bb:ce:
24:3e:61:22:35:07:94:1d:c7:d4:18:03:c6:51:32:14:97:5f:
d7:0e:b3:df:b4:49:3c:06:7f:11:86:a5:f3:e1:e3:da:1e:53:
99:86:e9:da:d9:22:9e:cc:f9:c6:5a:38:d9:ed:2c:3f:5b:17:
ea:6a:ba:18:c5:07:86:61:10:0d:f2:c9:f0:e2:77:43:de:a2:
a7:ce:55:c9:3f:1c:60:2e:30:3f:3f:ef:db:cc:dd:ac:f9:9f:
66:07:52:3d:2c:56:cb:47:7d:92:39:82:43:0a:6f:ae:5a:6a:
cd:5f:c1:5f:1e:67:35:37:07:ea:ed:a3:a6:37:1f:52:51:d1:
f7:9a:9d:98:ac:24:a1:21:7f:bb:75:f2:9f:8d:13:ac:70:1b:
be:f4:c5:8e:c0:b6:dc:c1:f5:60:04:39:76:e6:8e:ae:1c:b2:
82:fb:c4:30:31:94:67:88:af:b5:5e:f8:c0:5d:01:64:62:39:
91:10:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org