Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CSP-7-84nRjxttR49CzI2cYotLg.roa
File: CSP-7-84nRjxttR49CzI2cYotLg.roa (raw, json)
Hash identifier: RssekGja5Cgl8T0IVmvyY5Gfr6Jm3/D4/GiQeqM/XQo=
Subject key identifier: 09:23:FE:EF:EF:38:9D:18:F1:B6:D4:78:F4:2C:C8:D9:C6:28:B4:B8
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0182491B51C41FA17FF2002FC01CA3B0689E
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CSP-7-84nRjxttR49CzI2cYotLg.roa
Signing time: Fri 29 Jul 2022 08:38:23 +0000
ROA not before: Fri 29 Jul 2022 08:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:1b:51:c4:1f:a1:7f:f2:00:2f:c0:1c:a3:b0:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 29 08:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0923feefef389d18f1b6d478f42cc8d9c628b4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a9:ba:92:c9:c7:df:62:8b:fc:f5:c8:b5:c5:
7d:22:4a:50:7f:af:9b:55:6f:78:d8:c2:82:df:16:
66:c3:ac:4b:cf:9c:0f:9d:b8:2f:85:8b:9d:e4:e4:
20:2b:08:1e:ff:f0:c8:de:10:45:c8:c6:43:bc:31:
75:e7:1f:b9:4f:0b:7e:b6:91:24:a7:40:ec:89:69:
b7:e8:c5:38:5c:25:84:6f:1e:84:97:ef:fa:ca:4f:
6d:5e:ca:f3:ae:b0:35:87:46:d7:d9:c0:e7:c5:8f:
28:00:ef:c2:6f:e1:12:0d:bc:44:38:da:d2:45:4c:
7e:70:66:13:91:02:5e:66:32:79:ef:95:cd:60:ba:
6d:57:7a:9d:b5:b6:9a:a4:d0:c4:0e:36:1b:c7:b6:
15:e2:1e:2e:2f:4b:ed:27:07:17:9d:df:b5:77:72:
40:a1:ba:83:64:41:77:d1:4d:dc:ae:aa:64:1a:16:
b2:74:eb:f1:75:87:c8:e7:d6:02:36:ee:6e:d4:bb:
6a:11:66:27:f2:42:c8:9a:ba:db:bc:b4:ca:4d:72:
77:4b:65:03:9c:a3:f7:dc:35:6f:47:18:29:96:b8:
b8:c4:e4:34:2b:16:e7:06:19:2f:c0:44:df:f3:32:
34:0f:b6:5a:d7:2f:cb:90:88:64:6c:30:b9:ce:6c:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:FE:EF:EF:38:9D:18:F1:B6:D4:78:F4:2C:C8:D9:C6:28:B4:B8
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CSP-7-84nRjxttR49CzI2cYotLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:99:20:e7:01:c0:03:58:26:6c:5f:d7:ea:32:20:6a:47:15:
f0:01:96:e3:23:b3:55:8f:a7:b0:6e:51:12:c5:5c:99:3d:43:
db:71:bb:78:0c:0c:e1:ce:72:65:93:c9:2c:d8:b0:b4:d1:cc:
06:29:9b:af:08:00:c8:e2:53:96:9b:68:9a:22:46:c9:4e:7e:
64:12:78:ce:3a:f7:e0:55:31:d4:98:61:fa:27:48:50:77:a6:
86:8e:23:81:a3:97:8c:33:1c:36:a8:4c:71:17:de:cf:c7:9e:
d1:b5:2f:7c:d6:e2:03:25:28:81:f4:22:35:6c:61:89:9f:67:
87:c2:38:9e:8b:76:cb:88:af:60:64:c6:e0:3b:a2:ec:30:1c:
a7:86:e7:89:a0:04:25:73:ef:ee:b8:82:76:b2:bd:e5:c9:62:
a9:0b:51:82:75:14:74:8c:93:a0:19:02:8b:3c:99:49:ad:59:
bf:c9:06:77:ad:d9:77:8e:18:11:6b:f7:41:00:7e:f9:6a:64:
de:99:e7:a9:8a:51:35:70:5d:b9:51:b3:83:c8:31:b3:7f:eb:
ef:6f:28:94:52:8d:8f:79:ed:5d:c0:ab:f9:56:db:39:41:5c:
98:39:d1:02:4b:d4:e2:d6:a4:bb:44:ce:3a:b7:21:74:82:11:
d5:3a:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org