Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U-bmfdwEAOe8uX2liZv2yxnCRDY.roa
File: U-bmfdwEAOe8uX2liZv2yxnCRDY.roa (raw, json)
Hash identifier: o8iYpwbhifdPkLeF6UvZUlOEzILhjkYHaHj34HVqbT4=
Subject key identifier: 53:E6:E6:7D:DC:04:00:E7:BC:B9:7D:A5:89:9B:F6:CB:19:C2:44:36
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018467C60A8E7875C120572F36528BBBBAF9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U-bmfdwEAOe8uX2liZv2yxnCRDY.roa
Signing time: Fri 11 Nov 2022 17:39:02 +0000
ROA not before: Fri 11 Nov 2022 17:39:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:c6:0a:8e:78:75:c1:20:57:2f:36:52:8b:bb:ba:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 11 17:39:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53e6e67ddc0400e7bcb97da5899bf6cb19c24436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:ae:36:73:af:b0:df:0f:53:ba:3d:95:72:
66:41:b8:17:6f:f6:9b:49:29:4d:50:7e:5b:11:93:
69:45:be:09:52:ac:15:b4:4a:73:c4:22:b7:67:08:
ff:4b:65:b5:f3:37:b5:28:34:05:77:74:63:77:20:
bf:c2:53:40:d2:04:00:4e:74:8a:99:8d:93:b2:ae:
ec:92:f4:66:88:3b:2a:1f:87:ac:b4:e7:b2:45:04:
0e:c9:0a:c5:b6:90:45:83:bb:ac:a7:2b:2f:d2:51:
12:a0:29:8e:78:9a:be:e0:78:66:6a:18:8b:1f:1f:
05:31:1d:04:34:68:14:53:ff:8e:39:6c:db:e9:34:
fe:6b:83:e7:81:f8:67:79:7e:20:53:9a:11:c2:20:
4f:0b:49:1a:9b:3c:5d:e8:2c:9d:a7:1a:9e:e8:6f:
99:83:93:5d:76:b7:e9:47:12:93:7c:75:dd:53:99:
cf:7f:8f:5f:80:13:56:67:8b:56:93:63:a4:18:8c:
d9:e2:c3:70:ee:d5:71:cb:84:2e:15:a0:f0:ed:d9:
bc:46:17:78:d1:bd:95:ba:1a:a2:38:f8:5e:33:e3:
6a:59:77:a2:e3:a3:46:75:95:87:07:de:4e:59:d4:
9e:55:6d:59:94:32:19:03:75:06:95:4d:e3:46:8d:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:E6:7D:DC:04:00:E7:BC:B9:7D:A5:89:9B:F6:CB:19:C2:44:36
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U-bmfdwEAOe8uX2liZv2yxnCRDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
79:21:5d:4b:d2:0f:73:d8:0e:d2:71:22:de:b5:d7:09:b4:69:
85:44:7d:40:a0:c3:f5:54:fd:da:5c:d5:c4:46:51:e6:f1:46:
eb:15:27:aa:b1:3f:dc:76:05:d8:f5:4d:40:f3:a9:64:47:7c:
41:49:ab:13:bd:8e:a3:c5:2e:a3:1b:fd:6c:48:52:b3:8a:d4:
72:eb:c5:6e:f4:c8:8f:0e:9c:7a:18:9c:30:7b:54:ef:68:be:
e9:13:2d:3e:93:96:6f:6c:50:56:d9:dc:66:27:6e:3b:7b:05:
cc:16:5f:a1:26:df:08:fd:21:01:23:1e:c5:8d:98:13:72:ba:
fe:4a:5a:5b:e8:9a:48:0b:33:3e:61:f6:fe:ea:ff:4b:00:fa:
79:e0:72:2e:67:f8:99:0d:2b:ab:0f:4b:2f:98:34:ef:24:50:
0b:4b:cd:06:46:5a:0c:70:c6:db:d5:5b:2d:02:6d:bf:7a:7d:
01:66:3b:f3:1c:da:8b:ad:08:95:28:d0:aa:e8:77:ea:a4:45:
cf:12:d8:95:ce:46:04:e0:2b:9f:27:10:6e:ed:f0:74:62:15:
d5:3d:c1:5b:a4:ce:cf:d2:99:6a:5c:49:a3:c5:73:73:b9:25:
92:d6:7b:e0:a7:b7:52:4e:f9:0a:26:75:8a:bb:d3:62:17:06:
6e:87:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org