Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ZlfNqt5cEo5uvYk-hHHrQU5hiBw.roa
File: ZlfNqt5cEo5uvYk-hHHrQU5hiBw.roa (raw, json)
Hash identifier: 1c4JxnJJdhK3jNnFUlrSKQqGqly71jfe5HX6d8WxEh0=
Subject key identifier: 66:57:CD:AA:DE:5C:12:8E:6E:BD:89:3E:84:71:EB:41:4E:61:88:1C
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018485FCAFC464933305D31C37B80E78841C
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ZlfNqt5cEo5uvYk-hHHrQU5hiBw.roa
Signing time: Thu 17 Nov 2022 14:27:20 +0000
ROA not before: Thu 17 Nov 2022 14:27:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 77.232.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:fc:af:c4:64:93:33:05:d3:1c:37:b8:0e:78:84:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Nov 17 14:27:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6657cdaade5c128e6ebd893e8471eb414e61881c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:85:94:4f:45:92:4b:67:ff:07:e4:c5:bf:
f4:23:ce:17:09:40:23:bc:8a:05:41:d5:48:e9:b4:
3d:f3:38:42:22:fb:c7:4c:f0:a5:c0:4f:6e:55:6d:
bd:d0:b2:04:bd:a5:71:7d:c8:4e:fd:e1:65:fd:81:
83:a4:5f:57:b5:96:ff:62:f8:f1:d7:44:78:cf:cf:
ac:2d:e2:b5:cf:49:13:1d:11:1b:8d:84:80:3c:73:
e5:b7:4f:00:ca:7b:7b:03:8c:59:5f:37:31:39:45:
0d:54:1f:df:36:29:ff:99:fb:d6:af:6f:73:ae:02:
b3:67:c6:ba:86:0f:ae:0c:89:a8:67:3a:ca:87:71:
4e:ee:90:de:01:d1:de:59:f9:7c:50:ef:e2:f5:8b:
d9:4d:c5:0c:a8:01:1a:6b:5b:d3:32:dc:d2:b3:f5:
50:96:d5:06:f6:9c:e2:19:a9:d8:9b:8d:61:9f:3b:
2f:06:37:b5:b6:c2:7f:5a:98:3f:30:05:19:f0:6a:
8d:39:69:83:72:92:69:3e:a6:65:72:14:06:9e:ce:
a0:50:81:34:92:7f:5d:fc:e8:eb:d5:80:3f:71:47:
15:d9:79:0f:7a:d8:a5:2f:df:a2:27:cb:a0:42:7d:
f2:4b:fd:14:4d:3a:c2:12:d7:6a:a8:bd:69:8b:5c:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:CD:AA:DE:5C:12:8E:6E:BD:89:3E:84:71:EB:41:4E:61:88:1C
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ZlfNqt5cEo5uvYk-hHHrQU5hiBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.156.0/22
Signature Algorithm: sha256WithRSAEncryption
73:fc:de:df:53:84:c1:f6:ec:c7:df:9e:3e:74:52:5a:8a:02:
f0:77:f3:bc:84:18:81:da:eb:3b:6b:e9:eb:d6:96:fd:56:ba:
e7:72:8a:cd:66:e9:3d:6b:73:f1:72:dc:e6:c4:28:d4:bd:49:
b3:c9:90:af:50:43:2b:03:a4:95:d7:96:c7:59:d9:bd:75:f9:
57:c7:c2:fa:9e:b2:63:81:89:f6:41:15:a9:6a:27:9a:fc:b9:
28:0c:c3:1c:6e:04:95:35:53:68:e0:32:4d:0f:d8:cb:fa:25:
a1:f9:26:dc:3d:fb:5a:16:62:69:b5:e8:0d:d8:4f:8b:0c:43:
4e:74:8d:79:c0:1d:d8:b9:b9:04:10:78:07:82:67:2c:7b:1d:
c6:15:85:96:79:2b:b3:25:71:6e:a3:63:0f:d1:5b:80:60:0c:
c5:b2:52:4b:0f:ad:c6:1d:97:24:d6:ea:c6:0c:ff:ca:bd:a4:
a0:1f:99:e0:08:26:a0:2b:b0:4c:5f:ee:e0:8a:ac:27:5b:b6:
fa:c0:cf:e1:c0:52:a9:b9:84:2c:23:19:22:b4:50:b2:41:0c:
69:18:7e:c3:5a:30:3f:cd:0c:9e:61:8c:8f:ac:28:fd:dd:27:
8f:a5:26:ab:39:db:c4:a0:2d:48:7b:77:08:a0:99:63:38:ba:
18:b7:de:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:51 2023 by rpki-client on console-ams.rpki-client.org