Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/d9-ppncERiG-ffs9OEE1e8N6gbE.roa
File: d9-ppncERiG-ffs9OEE1e8N6gbE.roa (raw, json)
Hash identifier: jjJ8PItDwfP5JsQDMrW78oilfQXAjniVRIhLaKb/DfU=
Subject key identifier: 77:DF:A9:A6:77:04:46:21:BE:7D:FB:3D:38:41:35:7B:C3:7A:81:B1
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 08752304
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/d9-ppncERiG-ffs9OEE1e8N6gbE.roa
Signing time: Wed 09 Mar 2022 00:32:57 +0000
ROA not before: Wed 09 Mar 2022 00:32:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 82.115.219.0/24 maxlen: 24
45.140.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141894404 (0x8752304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Mar 9 00:32:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77dfa9a677044621be7dfb3d3841357bc37a81b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:04:47:eb:68:e1:4b:bc:e7:b7:b2:d6:a5:
4b:fa:e4:3f:21:57:e3:a4:7e:43:62:4a:02:5a:9d:
8e:95:3c:2b:15:c5:29:7b:a7:ef:9d:8f:0b:31:1d:
ed:75:9d:40:80:1a:a9:46:2d:26:74:e1:b2:ec:55:
2d:9d:7f:5d:fc:97:ea:8e:e8:66:09:65:a1:3b:56:
55:56:84:f4:4f:2d:1c:26:77:7d:7a:4c:45:8a:ce:
97:3f:9a:0c:4d:d8:40:53:fc:d0:25:9a:86:34:01:
b9:84:a4:c0:73:fe:e1:74:ec:7d:69:3a:8d:c7:23:
4b:9f:1d:f5:61:6a:a4:0b:0c:c1:99:80:4a:79:b3:
92:00:05:ca:49:e1:68:e3:a3:a1:f4:9e:9a:1d:64:
da:94:86:70:3c:37:24:2b:db:71:f7:39:8c:56:53:
31:4d:22:ec:22:01:43:ad:81:cb:c5:9b:a0:8a:c0:
66:bb:7b:5b:e4:f7:34:b2:83:dc:86:ba:df:41:6b:
37:7a:8f:05:0a:6d:af:76:d1:e6:c1:64:f7:b9:d7:
f0:0c:8c:f9:ec:8f:d5:9c:26:86:41:0c:13:b7:7a:
74:d3:bf:c2:28:80:81:88:cb:73:2f:e0:fe:cf:ba:
95:c0:69:70:5f:08:00:8a:67:c9:f9:73:27:78:9a:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DF:A9:A6:77:04:46:21:BE:7D:FB:3D:38:41:35:7B:C3:7A:81:B1
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/d9-ppncERiG-ffs9OEE1e8N6gbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0/24
82.115.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8a:35:2a:77:c1:8d:35:4d:26:82:0a:79:08:a9:3c:e6:8a:
6b:35:5c:72:e5:a9:b5:27:68:77:d5:29:09:c7:79:39:9a:b9:
de:80:ed:7a:a2:a6:ba:91:95:1c:93:6a:65:10:44:c6:74:f7:
03:6f:7b:5c:d8:73:bd:28:e4:5c:c4:30:1d:03:21:97:42:ec:
f0:8e:94:a3:17:8a:dc:83:6e:d7:7e:15:9a:bc:a5:80:e4:a6:
1c:6b:93:fa:ef:00:c3:fa:cc:45:59:82:1b:bc:3f:15:35:3b:
14:91:77:e8:e5:7f:c3:8a:f8:9a:04:01:9a:25:53:e5:5f:a5:
7a:86:66:7c:cd:a2:45:6f:07:34:54:e0:56:b9:18:d4:f1:93:
e3:01:08:33:96:4f:9c:25:9c:8a:11:04:12:d9:2c:9f:10:43:
b7:01:a7:ef:7f:ba:b2:25:2d:99:8c:38:be:bb:cb:96:85:a0:
68:39:86:d7:8b:30:43:06:b7:66:b9:d6:73:cc:68:f4:98:87:
a9:9e:95:5d:d1:36:50:c0:0f:ee:21:f1:2c:52:40:cb:ba:98:
7c:b6:8a:da:62:a0:f4:a3:77:35:92:6b:9e:8b:a5:bd:16:23:
d0:b8:e7:19:eb:c0:06:f5:b6:fe:15:89:38:d0:3c:77:a6:0b:
58:b5:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:57 2024 by rpki-client on console-ams.rpki-client.org