Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SiUqeWsZbVM5wxnWMSCeCTo5MqM.roa
File: SiUqeWsZbVM5wxnWMSCeCTo5MqM.roa (raw, json)
Hash identifier: TlWpPXa4mriNuzjnmbNPy2eDOYZXBx5DoHYkMGhMXfg=
Subject key identifier: 4A:25:2A:79:6B:19:6D:53:39:C3:19:D6:31:20:9E:09:3A:39:32:A3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01847623BBC3BF4E34A962DE8D2981EB3438
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SiUqeWsZbVM5wxnWMSCeCTo5MqM.roa
Signing time: Mon 14 Nov 2022 12:36:04 +0000
ROA not before: Mon 14 Nov 2022 12:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
195.177.95.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:23:bb:c3:bf:4e:34:a9:62:de:8d:29:81:eb:34:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 14 12:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a252a796b196d5339c319d631209e093a3932a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:83:e1:29:5e:ee:92:d4:e1:63:70:f9:ab:
0f:c8:1f:d5:f8:65:6c:34:e5:37:c5:5c:6d:ac:82:
8f:38:b0:ec:09:2d:be:b9:ec:77:25:d4:a9:88:32:
68:e3:c6:f0:be:be:46:00:ec:f5:92:b8:c0:f1:d1:
44:80:92:1d:47:5e:80:4d:77:15:42:08:05:c9:a8:
2a:1a:f9:80:6b:f4:af:85:75:0a:55:0a:01:8d:ce:
38:e3:c4:51:ea:e0:a3:89:c0:6d:54:b6:1c:c1:8a:
7e:f8:b2:36:59:d8:14:82:e8:ab:cb:34:5b:97:42:
e6:98:e1:27:57:14:b6:21:c4:49:4e:8c:83:8d:d1:
32:34:ce:a3:c6:89:8c:59:fe:fb:be:34:ea:a6:26:
38:6b:68:73:8c:47:6d:5e:69:e4:da:59:a7:9b:9b:
ec:6b:9a:f5:88:91:81:a8:ca:23:5f:f8:26:ef:47:
09:23:9c:61:9e:e1:34:af:dd:ae:d5:85:07:b7:a3:
8b:c2:79:b7:11:bc:c5:87:eb:02:74:7e:c9:88:ad:
b6:c1:1b:74:c9:4a:e2:47:1e:df:af:6b:8e:0f:85:
b7:cf:8c:ef:75:63:a5:e6:52:9b:ad:6a:ac:b1:15:
08:83:ed:3d:8d:ec:d4:91:79:aa:b8:e6:a6:48:ec:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:25:2A:79:6B:19:6D:53:39:C3:19:D6:31:20:9E:09:3A:39:32:A3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/SiUqeWsZbVM5wxnWMSCeCTo5MqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
af:4d:16:be:50:29:f3:75:7e:3c:95:9e:74:64:c2:29:2d:4b:
d0:bf:2b:73:a8:4f:07:d9:30:96:9c:3b:0d:1d:a2:89:55:7d:
5b:00:07:f5:1e:5c:3c:58:a9:91:29:c2:96:e9:22:bb:66:4a:
3b:9f:ea:4c:28:15:65:4c:3b:f2:13:b3:3c:42:bb:39:c9:ac:
88:da:f7:ab:8c:ff:db:5a:70:0e:89:ac:96:85:97:a1:85:9f:
de:1c:fa:a7:22:4b:d9:a9:c0:61:e5:aa:64:97:86:b7:20:7f:
cc:f4:42:1a:b4:bb:6e:44:b1:8c:0c:c4:2e:e3:77:3f:8a:7b:
65:d0:98:e2:3e:39:31:0a:98:48:78:30:3a:a5:4c:99:b6:d2:
26:3b:e2:bb:46:52:13:13:fa:c1:98:e8:8d:1a:a5:4b:2e:a6:
b7:7c:b3:65:37:0b:ca:fa:8d:53:65:49:b5:6d:b9:b1:6b:a6:
c4:fe:0b:9f:6b:e8:6c:c6:e8:0f:13:65:3a:98:fb:99:cf:bb:
09:94:ce:fb:16:28:da:d5:08:d6:2f:3a:d6:fa:a4:01:7e:bd:
8a:eb:32:61:f4:c5:b6:22:1d:6e:4c:e1:69:a9:b7:d8:6a:d7:
ae:7f:01:1c:68:66:52:7e:f4:14:35:69:0e:2e:26:03:24:61:
67:dc:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org