Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CUvtPuGUig-gNrWed0HqW8bjCow.roa
File: CUvtPuGUig-gNrWed0HqW8bjCow.roa (raw, json)
Hash identifier: kZB2pBTA2Tm6Qg8koxwoe8EjEKOBT0Gx4rpih+baOEY=
Subject key identifier: 09:4B:ED:3E:E1:94:8A:0F:A0:36:B5:9E:77:41:EA:5B:C6:E3:0A:8C
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0972FFCA
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CUvtPuGUig-gNrWed0HqW8bjCow.roa
Signing time: Fri 21 Jan 2022 13:40:25 +0000
ROA not before: Fri 21 Jan 2022 13:40:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7759
IP address blocks: 77.83.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158531530 (0x972ffca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 21 13:40:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=094bed3ee1948a0fa036b59e7741ea5bc6e30a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:cb:ff:96:d9:a6:fd:8b:44:b2:21:7c:93:
39:98:fa:a7:e3:d5:c9:48:ff:94:97:85:3a:a2:19:
8f:05:a4:64:ad:95:38:e1:18:27:2e:2d:b0:9b:19:
46:5e:ba:32:a1:1e:11:88:64:9d:59:12:26:69:d0:
42:f9:15:36:40:29:5b:2c:d9:d0:d2:a7:70:4c:d5:
c9:6d:49:71:d6:82:e3:3d:84:a2:13:f6:2f:64:a8:
10:27:fa:bb:42:b1:0e:7b:fa:2d:fd:ab:bc:12:60:
1c:25:64:93:b5:4f:95:55:d4:36:18:d0:52:aa:6c:
ef:b6:ec:ac:a5:4a:b0:01:91:45:f9:89:b4:0b:b1:
f1:4c:b9:a1:79:7c:85:50:e3:bc:3a:bd:4e:98:50:
3a:78:8f:64:f6:60:c6:26:fc:ae:8f:7d:fe:1c:ae:
c3:24:c4:40:3a:65:ad:8a:32:70:8e:07:e8:76:8c:
65:7f:59:fd:00:da:b5:db:b8:87:4e:0d:a3:b3:6d:
12:d2:48:3f:24:b8:3f:08:1a:d8:07:bb:e1:f7:00:
8c:3d:dc:b5:96:af:39:60:0e:3b:99:79:e1:7d:35:
fc:89:15:c9:84:d2:61:c5:c5:42:ee:9a:b0:9a:9b:
0e:9b:93:f6:4e:98:d6:af:6f:de:95:7c:47:06:e9:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:ED:3E:E1:94:8A:0F:A0:36:B5:9E:77:41:EA:5B:C6:E3:0A:8C
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/CUvtPuGUig-gNrWed0HqW8bjCow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a4:e5:53:f4:e4:cb:ca:d4:6d:a2:18:01:84:02:b6:9c:58:
8e:59:55:78:a1:62:ff:0e:fc:0b:03:5c:32:b9:a6:b8:bb:f3:
35:f6:5f:bb:4b:64:6e:61:04:aa:79:e8:49:96:4d:77:4c:e6:
fd:03:fb:ff:09:72:4d:11:c5:fa:f9:5f:15:ea:7c:36:c9:80:
ff:6e:db:c6:cf:87:ad:cb:c1:38:5d:e0:a1:45:08:ee:c0:e9:
db:e7:d5:25:69:a3:25:b0:71:4d:7b:64:ec:88:89:8c:10:3d:
f7:db:8e:c8:57:8c:f8:2b:78:9e:46:98:5b:4d:c6:e9:eb:0a:
0b:19:b4:eb:5c:29:c0:57:77:ac:55:4d:92:2d:ae:31:e0:2d:
47:e2:2f:48:66:bb:2d:2a:62:5d:42:04:fd:bb:4c:a7:5b:87:
ec:70:7e:21:5f:2b:9e:ab:51:be:89:e4:a5:2a:2d:c7:8a:53:
01:50:23:91:a3:0e:97:4f:34:2b:ee:34:2c:06:a8:88:a5:df:
75:14:1c:bf:26:94:4c:07:d4:53:64:26:08:4a:de:51:3c:e8:
7a:3a:b1:cb:ab:11:69:48:e4:71:0e:c8:c6:c2:27:db:2d:e1:
35:5c:2a:58:14:c8:38:82:bb:67:09:4b:58:25:cd:84:6b:32:
58:e1:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:48 2024 by rpki-client on console-fra.rpki-client.org