Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r3zM4x_nqOvDG0qre1ymuiS-qBs.roa
File: r3zM4x_nqOvDG0qre1ymuiS-qBs.roa (raw, json)
Hash identifier: 0ueUGigJMA4L20fxWflSo84UndUSFXSa8PLpFGaaiQU=
Subject key identifier: AF:7C:CC:E3:1F:E7:A8:EB:C3:1B:4A:AB:7B:5C:A6:BA:24:BE:A8:1B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07973032
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r3zM4x_nqOvDG0qre1ymuiS-qBs.roa
Signing time: Fri 18 Feb 2022 11:55:43 +0000
ROA not before: Fri 18 Feb 2022 11:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127348786 (0x7973032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 18 11:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af7ccce31fe7a8ebc31b4aab7b5ca6ba24bea81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:5c:39:e3:e4:e6:a3:64:9d:e9:d0:f4:a2:
2f:a2:68:ad:9d:a9:38:ca:14:3a:bf:b1:57:34:3d:
c1:8f:9c:42:bb:00:52:cc:e9:aa:ab:5f:bf:70:df:
fa:3e:3a:9d:6c:2e:06:9e:c5:8c:3a:f6:dc:8c:bf:
45:2a:09:9b:4f:c8:07:bd:a7:62:ce:bd:36:ca:2a:
e7:3b:c8:4e:60:28:c2:52:0e:da:7a:3e:dd:5e:a3:
3d:df:35:db:9c:6a:13:45:a7:5e:0e:23:91:9f:73:
48:f0:03:06:10:d7:12:c3:31:aa:96:d1:53:3a:3f:
39:17:42:23:da:3e:ce:3d:a5:fa:5c:0e:bd:35:cf:
08:2e:57:a9:41:f8:53:41:3d:de:81:9f:b3:f2:21:
ba:7e:14:8f:75:9b:80:e8:e0:0a:59:05:2e:e1:a8:
0b:10:4f:81:32:3a:0b:54:7c:c3:2b:f6:b5:90:d4:
c3:96:1f:a0:6f:ac:e0:a4:f0:08:e8:e5:a8:b9:e6:
c5:64:02:0e:e2:d5:1e:d7:d3:61:89:95:09:f2:03:
0f:9b:87:4c:a3:fd:8d:70:8a:58:39:ff:be:78:c0:
37:75:bd:37:45:13:6b:62:04:5a:84:1d:96:e2:4f:
50:ec:02:68:ff:de:10:90:17:b2:1d:8c:56:47:9e:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:CC:E3:1F:E7:A8:EB:C3:1B:4A:AB:7B:5C:A6:BA:24:BE:A8:1B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r3zM4x_nqOvDG0qre1ymuiS-qBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ad:f9:c4:7d:e8:1c:b0:4b:b9:8f:08:1f:43:90:81:da:db:
28:a9:22:07:db:ba:9d:28:9b:77:2c:90:f7:9e:27:7c:0a:de:
b9:d2:1d:c2:ca:38:e6:ce:b6:4d:04:84:ed:28:b9:b8:ac:54:
d3:5c:e5:0a:ac:3c:64:0a:f7:a4:2c:e7:b0:8c:90:7e:f7:e3:
e6:a1:b3:35:fe:13:d0:67:a8:14:52:79:50:c3:ae:93:f4:b2:
1b:25:06:8f:98:5f:a4:9e:5f:fa:26:04:de:2b:49:d6:3e:fe:
47:ab:4b:b1:e7:a8:fd:48:b9:6c:6d:e3:f6:39:51:a1:29:a6:
a3:96:96:42:80:49:49:0b:95:aa:3e:ba:67:41:d9:66:00:70:
ea:32:f4:99:21:a4:9d:f2:c1:33:12:92:17:95:24:b7:d2:9a:
3a:c7:9f:5e:ba:7a:31:47:11:b5:3c:e3:ff:bf:5e:45:7e:86:
d0:8e:b5:22:91:3c:4a:47:58:54:9e:76:1d:9d:30:b1:38:86:
a3:ad:78:e7:61:f9:a5:3c:b0:50:79:29:69:45:1e:74:77:a8:
36:ca:df:38:89:70:c7:ed:b1:98:7a:2f:a2:24:db:27:4d:7c:
e1:70:17:3d:46:17:31:1f:0e:78:dc:58:c4:0d:75:1a:3f:f5:
b9:b6:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org