Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/R0CRb1tgZCa1215xt8iCgEEyO8Q.roa
File: R0CRb1tgZCa1215xt8iCgEEyO8Q.roa (raw, json)
Hash identifier: QxC7XUNnbMqNGld5x5ZYeA1I33964H0WZJgiJuHhZU4=
Subject key identifier: 47:40:91:6F:5B:60:64:26:B5:DB:5E:71:B7:C8:82:80:41:32:3B:C4
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 3723C70D
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/R0CRb1tgZCa1215xt8iCgEEyO8Q.roa
Signing time: Sat 01 Jan 2022 16:02:44 +0000
ROA not before: Sat 01 Jan 2022 16:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43185
IP address blocks: 77.95.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925091597 (0x3723c70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Jan 1 16:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4740916f5b606426b5db5e71b7c8828041323bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:f2:0b:e0:8a:a6:28:2a:28:3d:20:d3:47:
43:34:bd:bf:79:52:5f:75:29:f0:97:ad:cd:e9:8e:
02:f1:3d:d6:15:ee:77:55:d9:f8:77:44:cd:96:7b:
a7:a4:f6:44:74:f1:6b:2b:91:2d:a4:82:74:2e:f9:
72:f4:48:d2:c1:a3:5b:0f:cb:bc:51:79:fd:85:30:
52:6c:a6:e4:c5:5f:68:7f:70:93:ff:9c:b8:e5:ad:
de:da:cb:eb:a3:f9:86:a6:7a:03:bb:d4:06:4d:db:
95:97:f1:e0:18:3a:5a:2f:6a:b5:39:74:35:2a:e2:
00:50:d7:56:67:e3:d4:ff:ea:e7:9f:2c:db:3b:d9:
a6:02:ce:42:9f:21:3f:76:22:29:c0:66:76:aa:45:
aa:7d:74:7f:c3:4b:e7:bc:b0:a7:de:60:56:96:bb:
39:1c:33:dc:9a:75:cb:c0:b7:a7:c4:58:87:7e:c7:
55:75:75:50:c4:9e:cb:35:3a:4c:4d:7d:e9:13:8b:
61:d0:c6:8d:65:78:5f:23:68:d6:aa:d5:43:1c:3b:
da:a3:3b:f5:61:af:01:80:76:7a:2d:27:a8:30:dd:
66:7d:4c:34:2a:f9:f6:88:e0:df:10:84:94:d8:6a:
43:e6:43:ec:5f:5b:a7:ce:46:a9:33:c9:da:18:51:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:91:6F:5B:60:64:26:B5:DB:5E:71:B7:C8:82:80:41:32:3B:C4
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/R0CRb1tgZCa1215xt8iCgEEyO8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.208.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:3b:4c:7b:42:c7:cc:a3:db:eb:72:3d:2e:d4:41:33:b7:5c:
a6:7b:0a:0e:33:d7:cd:64:2b:8a:85:a3:d9:dd:2a:75:8b:94:
86:5d:69:0f:4c:ea:e1:26:9f:90:b8:bf:0e:c6:b6:b5:51:2d:
0b:8f:33:9b:bf:90:58:d8:c0:1c:00:c3:ed:6e:3f:03:c5:e2:
d9:1d:e9:84:0c:38:55:d8:e1:a2:d1:ec:30:2a:f5:65:5a:72:
06:8c:8f:dd:bd:98:26:6e:db:00:28:28:68:3c:b7:b7:a1:4e:
e5:93:a4:3a:b6:d3:9d:d4:ba:f3:b9:26:fe:a1:5a:b4:1d:9c:
09:f2:c4:63:ff:b4:01:ef:92:6f:90:89:e7:22:16:66:18:a8:
27:3e:aa:93:ab:2b:6b:71:61:f0:4d:90:3e:11:a8:22:03:3f:
91:ce:02:b6:fd:0e:6f:81:90:9a:ba:80:6c:09:d6:0d:ba:c5:
7a:e4:19:12:25:1f:5f:e2:dd:5a:00:69:27:1a:2e:d4:4b:24:
ac:1b:61:79:9f:89:7e:db:1a:7f:ab:12:28:f0:92:23:19:9e:
57:b0:b4:c0:94:dc:22:7e:8d:3f:58:08:4c:62:5b:de:e3:61:
c2:c4:f4:45:0e:e7:3d:33:4b:ec:8b:3f:26:fd:e1:b7:a0:ac:
48:d8:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:07 2025 by rpki-client