Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMIyZgFz9LBHTy_wzgLHyHO_4Lc.roa
File: vMIyZgFz9LBHTy_wzgLHyHO_4Lc.roa (raw, json)
Hash identifier: QDSVQPfLC3ctx957tyuk5BJgSsVKWNatOJyWCGJivPc=
Subject key identifier: BC:C2:32:66:01:73:F4:B0:47:4F:2F:F0:CE:02:C7:C8:73:BF:E0:B7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07B5ACB1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMIyZgFz9LBHTy_wzgLHyHO_4Lc.roa
Signing time: Tue 01 Mar 2022 06:45:52 +0000
ROA not before: Tue 01 Mar 2022 06:45:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 194.15.52.0/23 maxlen: 24
45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129346737 (0x7b5acb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 1 06:45:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcc232660173f4b0474f2ff0ce02c7c873bfe0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:45:9d:c9:2f:55:2c:e1:44:8c:ef:91:5c:
a8:73:61:bc:6e:62:84:34:75:10:cc:5a:23:84:bc:
f8:ea:6c:c8:33:f7:75:b5:ca:59:ad:86:1a:33:0a:
e8:9a:79:64:15:63:9a:5f:65:e7:9b:12:82:52:99:
ce:f0:b5:38:28:86:e9:24:c0:a9:10:ed:e6:8f:fd:
98:6e:7e:d3:4d:90:71:d2:42:94:5f:8e:10:05:35:
0d:75:3d:64:eb:50:75:ef:fc:e9:31:b2:37:d4:0c:
5c:03:a8:43:40:d0:36:3e:46:bd:c9:22:87:06:17:
9a:1f:4e:01:9b:13:ec:9e:90:f4:d3:1e:57:7b:50:
3d:5c:67:71:ea:0c:f4:b1:2c:85:57:37:eb:d0:8e:
c5:5d:4f:40:e9:0b:d2:fb:af:c7:44:59:00:f5:cd:
3c:89:26:a3:83:6e:ab:0e:df:e6:70:b7:5f:40:f3:
6b:94:d9:bd:ca:d5:8c:69:71:c4:e5:ac:a0:11:2f:
e6:fa:07:38:68:2a:ba:de:19:29:96:69:67:e1:95:
96:72:e7:e1:2f:e9:48:7e:e5:4b:6e:7a:b3:a5:00:
8a:cd:a1:5b:67:0f:36:67:16:13:03:32:30:e5:d6:
0f:c8:ec:6e:ed:4a:07:81:d1:cd:23:24:53:7a:fb:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:32:66:01:73:F4:B0:47:4F:2F:F0:CE:02:C7:C8:73:BF:E0:B7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMIyZgFz9LBHTy_wzgLHyHO_4Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
194.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:f9:cb:7a:3c:42:c7:13:7f:be:77:a1:38:5c:f3:f9:50:af:
86:0a:61:d9:41:cb:9d:3e:e9:f0:f7:51:b7:1c:5a:28:7e:4e:
d3:41:b1:49:28:8c:dd:73:90:a1:74:5e:95:9b:e8:d2:85:85:
7a:b9:d6:34:8c:13:d6:d0:36:ee:21:3c:bd:15:0a:dc:3e:ca:
e5:77:64:fd:08:99:b2:74:28:49:05:15:1a:b0:9c:cf:cb:fc:
76:6d:a5:39:13:1a:8b:77:1e:0b:6f:9f:88:f1:58:88:8e:f9:
2d:98:96:60:37:ce:1f:62:36:8d:17:56:aa:72:72:3c:20:e2:
d7:aa:7f:89:7f:43:a6:b0:f8:8c:39:a2:a0:17:60:88:99:ab:
c9:3d:f1:e0:52:d6:e7:ed:2d:49:0a:1e:97:d8:43:91:6d:63:
ed:3d:67:40:aa:74:fe:4c:50:2c:1a:f5:9f:0c:42:3f:ba:1a:
f9:71:3f:97:12:db:a0:40:09:0c:b3:17:44:6f:fe:ee:fe:15:
cc:fc:dc:a2:02:a1:7b:51:62:17:b6:b1:1e:95:4b:b9:e3:d0:
77:5f:2a:1a:a9:7b:75:3e:18:0a:b7:b1:cb:17:a5:40:84:93:
ad:61:8a:9b:2e:e7:46:b6:e9:d1:05:16:26:8d:db:6b:30:fb:
a5:b6:a9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org