Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/auIo5kqndcpcmte5mBRaZxmcRDU.roa
File: auIo5kqndcpcmte5mBRaZxmcRDU.roa (raw, json)
Hash identifier: zziNHvumfxYj9yoKLgT4qTGlRRqpVqxa+mt/F5kIFUs=
Subject key identifier: 6A:E2:28:E6:4A:A7:75:CA:5C:9A:D7:B9:98:14:5A:67:19:9C:44:35
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01C8452B
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/auIo5kqndcpcmte5mBRaZxmcRDU.roa
Signing time: Wed 16 Feb 2022 06:16:17 +0000
ROA not before: Wed 16 Feb 2022 06:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29902123 (0x1c8452b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 16 06:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ae228e64aa775ca5c9ad7b998145a67199c4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:30:a6:24:63:6b:6d:69:f3:e3:c6:e6:84:
cb:e6:7c:ad:9f:e7:21:ab:79:4c:35:03:f7:2c:a9:
ac:86:21:43:6d:03:a3:5f:27:08:7f:8e:12:56:23:
c7:5a:73:aa:73:71:d6:4f:79:1b:3f:1d:68:b0:f7:
09:34:23:61:62:6d:d9:3f:e6:5d:a3:10:64:dc:be:
33:37:cf:26:e4:23:e8:e6:38:82:e5:16:7e:25:de:
ad:c4:1f:9d:2f:29:11:ba:6b:d3:29:5b:8a:83:52:
b6:f1:ef:4e:9e:d7:33:f9:53:10:75:d5:a2:54:98:
37:e8:20:52:c5:63:d9:fa:06:15:8f:34:5f:df:8a:
86:18:35:de:f1:4d:28:a0:a2:a2:ec:b2:8b:3d:a4:
3b:0e:ae:98:36:80:a6:aa:ed:df:8d:90:b6:99:ac:
42:f7:98:34:d4:1d:d8:d7:48:43:a9:e2:0d:c6:19:
a7:4b:28:17:f4:06:3b:7b:44:33:2f:09:67:76:97:
f1:c3:41:49:3a:78:70:68:60:2d:2c:7e:3b:b4:90:
9d:d4:24:e4:6a:52:cf:59:41:45:c4:a1:72:d0:ce:
4e:f1:6d:94:a2:6e:a0:8a:85:22:2a:61:ac:2c:35:
29:c9:da:6f:f0:8e:1d:f8:4d:2d:fb:01:a3:9d:46:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:28:E6:4A:A7:75:CA:5C:9A:D7:B9:98:14:5A:67:19:9C:44:35
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/auIo5kqndcpcmte5mBRaZxmcRDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fe:63:ef:9f:12:e4:ae:74:e6:d0:48:13:5d:f2:9c:7e:76:
f6:bf:60:22:49:44:8d:43:4c:2f:0a:fc:31:92:19:04:53:32:
c2:1b:72:2c:41:d3:d0:77:a2:7b:c6:2c:93:f5:2a:65:c8:55:
b6:42:4b:ae:99:0f:b2:d0:74:d7:30:88:95:a5:a7:dc:10:06:
d7:2d:c7:bc:8c:98:f3:97:50:04:b8:9c:c5:5d:7c:5e:91:e9:
6e:9d:0a:8c:7b:d8:e1:f4:13:2a:d9:49:2c:a3:3d:2d:14:b4:
8b:1a:9c:18:b1:65:6e:6d:11:74:bb:c8:fc:58:74:ed:60:5f:
03:d4:1a:61:31:ca:7a:e9:c9:ce:64:b7:06:db:f9:12:c2:ec:
b4:59:7c:b8:d3:09:52:64:c5:77:6d:22:37:8c:db:90:d6:5a:
17:ed:85:9d:89:00:bc:45:45:d0:8c:1a:ed:77:f2:4b:54:2c:
b8:7e:d8:28:ea:3f:94:49:94:d8:d4:72:61:4b:87:a2:92:51:
6a:67:8d:af:aa:85:c6:0f:ff:4d:5e:82:dc:f0:cf:da:c6:40:
42:a0:a2:8b:08:82:63:2d:c2:66:81:63:2b:c9:bf:cd:fa:c4:
72:25:49:1a:b9:73:c1:02:d3:18:24:f9:50:9b:b5:2a:94:54:
ee:39:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org