Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/dgXjeH38rpiz69UuPjXuvmCyXZw.roa
File: dgXjeH38rpiz69UuPjXuvmCyXZw.roa (raw, json)
Hash identifier: /3f612JlSzmjiT2AMuo0IoNl9RLQS8nRn66sqkPxeyc=
Subject key identifier: 76:05:E3:78:7D:FC:AE:98:B3:EB:D5:2E:3E:35:EE:BE:60:B2:5D:9C
Certificate issuer: /CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Certificate serial: 0137A5
Authority key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/dgXjeH38rpiz69UuPjXuvmCyXZw.roa
Signing time: Thu 21 Apr 2022 15:26:21 +0000
ROA not before: Thu 21 Apr 2022 15:26:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50078
IP address blocks: 77.95.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79781 (0x137a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118
Validity
Not Before: Apr 21 15:26:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7605e3787dfcae98b3ebd52e3e35eebe60b25d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:bd:99:69:39:2c:f7:b9:66:60:aa:c7:94:
f8:6c:5f:ff:f8:e3:44:15:54:32:9e:3a:bd:2c:d5:
24:1e:50:d5:18:23:8f:c0:0c:0f:b0:c7:ff:94:a6:
47:da:12:1d:db:2f:91:86:46:37:bb:61:53:70:6e:
b9:fa:13:00:2c:b4:54:38:9d:cf:2b:ce:68:22:f4:
8a:3d:88:d3:61:94:20:a4:27:bc:03:c2:65:39:c3:
e6:6d:42:7d:bb:f9:f7:2a:fe:7e:82:09:fe:47:2c:
81:f9:ed:6f:3e:f1:c7:a9:72:54:00:c5:4e:71:dd:
c1:f9:f3:fa:08:fd:24:67:86:28:bf:97:a1:aa:07:
65:b2:81:27:9a:e2:90:d6:f0:cd:a1:bc:9d:78:28:
a1:4a:b1:db:70:f1:31:a2:71:2d:a5:db:63:fb:48:
1d:4b:9f:30:02:57:29:86:58:23:8b:3d:81:31:f4:
a8:55:b8:eb:68:49:0f:93:06:2d:15:75:dd:9b:0a:
d4:c5:27:a0:42:3f:5b:66:fa:99:33:2d:f3:79:e3:
a1:34:da:ec:b3:5e:26:44:9c:44:73:2d:1b:7f:75:
61:a4:51:c6:00:b7:26:6b:b9:3a:f4:96:8b:7f:cf:
a6:4f:95:f0:83:3d:20:7f:92:ab:6b:3a:84:8e:79:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:05:E3:78:7D:FC:AE:98:B3:EB:D5:2E:3E:35:EE:BE:60:B2:5D:9C
X509v3 Authority Key Identifier:
keyid:46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/dgXjeH38rpiz69UuPjXuvmCyXZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:12:7d:c3:70:4e:62:b3:23:eb:81:29:63:cd:e4:a5:02:fb:
14:00:ff:cd:74:5e:5b:54:d6:cc:3e:23:08:0d:a4:13:c8:af:
d8:80:13:da:96:a9:6a:3e:c2:a7:18:35:c2:0a:c2:ca:34:f1:
c2:78:04:d7:bc:06:8a:3e:64:7a:8c:84:28:28:70:d4:ee:25:
70:6b:99:ec:0f:26:ff:13:3a:5b:78:75:70:a4:ce:9d:66:2c:
f3:de:03:e9:ec:c3:af:ea:0d:23:e5:c3:31:9a:cc:e2:2d:0f:
00:dd:8d:dd:a0:e1:f8:8c:78:01:8a:a0:32:51:3a:08:c1:74:
3b:d7:7a:72:c0:cc:6f:c8:a8:7e:33:81:2e:82:a5:60:39:1c:
10:e8:91:ba:cd:b2:a0:89:03:e2:d1:e6:4b:64:99:c7:09:e4:
07:f4:6e:9d:1a:6c:c5:97:69:1b:69:de:a1:d6:0a:59:6b:02:
4e:2d:7b:7a:10:81:bd:55:52:cb:e2:85:b0:12:e6:e3:a7:3d:
ec:fe:66:d2:62:ff:40:18:cd:65:fe:bd:4a:c5:ff:ee:4b:94:
28:88:78:85:67:6a:f5:4a:28:5b:fc:46:57:8f:b8:88:9d:70:
91:5d:de:bc:81:91:3b:3c:d5:bd:80:27:e4:24:d3:1a:1f:e4:
53:e7:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:44 2024 by rpki-client on console-ams.rpki-client.org