Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/01USdnP7EbaaCxxZYthPA1alLeg.roa
File: 01USdnP7EbaaCxxZYthPA1alLeg.roa (raw, json)
Hash identifier: nfViLNe9xoze5Lq2W4NVJUsxf2Rj/GY3dSyGjDpX2Po=
Subject key identifier: D3:55:12:76:73:FB:11:B6:9A:0B:1C:59:62:D8:4F:03:56:A5:2D:E8
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A685BBE
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/01USdnP7EbaaCxxZYthPA1alLeg.roa
Signing time: Sat 01 Jan 2022 14:56:41 +0000
ROA not before: Sat 01 Jan 2022 14:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209836
IP address blocks: 77.237.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979917758 (0x3a685bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d355127673fb11b69a0b1c5962d84f0356a52de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:3a:84:c9:eb:7d:37:8c:e2:de:ac:bd:fa:
1f:b6:04:12:bf:ae:02:ab:a8:c2:ee:c8:81:df:76:
5a:a8:eb:82:c1:f1:85:19:c8:a1:2e:e4:ed:22:81:
f3:10:85:7a:35:00:35:f6:54:50:14:27:49:a3:56:
71:bc:76:36:e5:e4:be:83:f7:c5:9d:05:aa:df:45:
f0:64:8d:2c:47:87:a2:ca:6f:89:21:d0:e2:bb:fd:
23:bc:22:95:7d:51:6c:2f:7e:7a:e2:93:74:24:b7:
f6:e9:0b:9b:50:e4:04:40:1f:6a:29:7a:c0:6a:e7:
7e:59:8d:82:4f:3f:1d:31:48:1c:40:78:e2:91:8a:
e4:dc:18:a0:12:9c:fd:c3:cc:57:d4:95:ea:82:7e:
c1:59:65:ec:d4:3f:16:37:5d:c0:d5:ca:17:02:25:
c6:dc:15:af:7d:77:04:76:35:cc:16:c8:14:10:70:
cc:43:50:1c:d3:22:1f:46:f9:e0:43:9f:48:47:07:
04:47:bb:13:c4:8a:42:94:43:15:83:ca:c1:ef:fb:
ef:d9:53:ed:5b:39:3f:a1:e1:66:85:3f:ef:d8:f1:
ff:0b:c2:0e:b1:c4:10:77:31:6d:27:6e:f5:56:8a:
2e:63:7d:b8:6a:6c:15:45:fd:90:67:5c:67:a8:09:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:12:76:73:FB:11:B6:9A:0B:1C:59:62:D8:4F:03:56:A5:2D:E8
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/01USdnP7EbaaCxxZYthPA1alLeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a5:97:a4:90:f8:19:a6:29:10:e0:60:58:61:2f:6a:ef:b6:
89:0c:5b:54:a4:58:ac:b7:ce:22:33:3f:20:21:62:34:f6:87:
fa:11:f0:4d:98:f1:ab:0e:5b:84:6a:50:cb:a7:9a:bf:80:56:
ba:c4:1c:dd:41:e6:98:37:95:9d:ab:85:49:e0:14:b1:d0:e3:
10:27:08:49:69:58:b5:50:34:27:45:6e:00:0d:c4:f6:90:33:
4a:df:74:46:96:bd:d7:d8:4f:a8:06:07:be:9d:7a:25:74:3d:
2b:99:09:fd:57:3f:ec:4c:5e:25:bb:e1:88:c2:d5:7a:e4:55:
c6:ef:42:9c:08:db:55:80:ef:b7:26:f0:b2:f5:29:20:fd:40:
22:b3:2d:e5:87:63:af:5f:18:6c:dd:a2:6c:10:5f:4e:32:06:
87:bd:9e:a8:3d:18:e7:9a:37:24:a8:05:b2:70:fd:89:b0:c0:
50:2d:b0:b7:5d:55:f0:a2:d1:72:17:da:34:bb:ca:3c:aa:30:
86:14:b7:7b:4d:6c:81:ea:9f:43:b9:e9:d1:97:c5:3a:fc:34:
fe:7a:fb:9a:6e:b7:35:fd:c7:c5:bc:3d:a3:3b:f9:32:a0:00:
50:90:fb:bf:8c:55:fb:10:ac:0a:79:f5:9b:d0:7e:24:6d:7f:
f4:d0:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-ams.rpki-client.org