Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/2p-L3s9aV1JGpb-r_UPT5hQ65lE.roa
File: 2p-L3s9aV1JGpb-r_UPT5hQ65lE.roa (raw, json)
Hash identifier: aQ14FlwuRgJZX6SAEZHVoKmKxflz1yU8XQvTY47SbfI=
Subject key identifier: DA:9F:8B:DE:CF:5A:57:52:46:A5:BF:AB:FD:43:D3:E6:14:3A:E6:51
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 06019FE8
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/2p-L3s9aV1JGpb-r_UPT5hQ65lE.roa
Signing time: Sat 01 Jan 2022 13:55:36 +0000
ROA not before: Sat 01 Jan 2022 13:55:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209791
IP address blocks: 77.224.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100769768 (0x6019fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da9f8bdecf5a575246a5bfabfd43d3e6143ae651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:82:9f:94:2d:bf:a9:8a:1b:9f:46:3a:72:
35:8d:77:31:8e:ed:92:15:27:35:e2:d0:8d:0e:b7:
16:85:9e:70:fa:73:c2:81:e1:a6:2c:ed:cf:89:61:
50:08:4c:bc:79:b6:98:de:a5:ef:83:bb:9a:3d:0d:
7e:c4:27:0c:39:da:8e:29:b4:8d:7b:1b:6b:ab:42:
78:57:ba:f7:5d:3b:73:46:58:8b:53:f4:69:43:5d:
89:64:a5:4d:c7:e4:d4:bb:16:f4:ba:30:b5:c5:ec:
1b:c4:67:bf:21:66:b4:a0:2e:f8:65:46:22:18:a5:
aa:bf:05:83:91:1f:a9:9e:5c:5c:9f:46:b6:1d:3b:
99:df:28:af:69:1c:dd:d7:b9:40:16:34:8f:90:2e:
2c:31:1d:aa:22:67:f9:7a:73:b1:e3:e8:f1:87:57:
32:b5:de:6c:fe:ee:16:d2:0f:c9:71:69:24:67:e4:
7f:1d:4b:be:21:43:00:06:c4:2a:8a:1b:4f:37:18:
ca:b4:f1:0e:e7:54:ea:eb:cb:c4:21:31:67:7f:18:
33:03:89:da:48:01:e3:82:29:47:dd:c2:ce:60:e5:
18:fc:9f:6a:89:3b:4d:08:4a:95:63:e0:34:8e:6d:
7d:59:3d:b7:31:47:0e:b5:56:c2:7d:ff:e8:51:8c:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:8B:DE:CF:5A:57:52:46:A5:BF:AB:FD:43:D3:E6:14:3A:E6:51
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/2p-L3s9aV1JGpb-r_UPT5hQ65lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.224.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f2:28:f6:37:35:18:fe:d9:a6:61:69:29:ab:f7:ad:f9:3a:
93:1f:4f:c9:ab:66:48:19:23:42:d1:63:a8:71:b9:ff:99:6a:
9a:ff:80:95:e6:57:fc:15:b1:8a:4b:e9:3b:3b:76:d9:93:b4:
2f:c4:c8:5f:f0:a5:6e:86:4b:e5:b1:39:f0:3a:75:32:3e:b5:
dd:42:d9:8c:3b:36:77:50:db:96:b3:51:93:9a:9d:4a:67:44:
46:b3:f7:6d:96:0e:c6:03:61:20:37:79:68:22:aa:76:ec:87:
9b:b1:ed:96:b6:47:fb:cc:aa:21:dc:9f:34:11:fc:c2:37:66:
eb:dd:11:40:91:ec:b4:50:13:76:00:28:32:f0:e3:b7:67:04:
8d:59:c8:b4:0b:18:e6:0a:6c:a7:9d:28:4a:56:4f:a2:93:0b:
f0:92:11:0a:9c:7a:e4:6b:f3:4f:42:f8:3e:57:b7:15:ee:a7:
b6:52:4f:83:d2:08:7e:dc:00:a1:9e:b4:11:f4:41:fe:24:f7:
25:94:ff:04:43:aa:8e:49:4f:ea:31:b3:a3:a6:f6:63:aa:ac:
71:ee:d1:ed:0c:d4:03:0e:ce:ee:ca:07:4a:b7:5a:5f:65:a6:
15:4a:c2:a1:41:1c:a1:f0:10:99:42:9d:ed:cf:69:85:bf:13:
ca:fd:07:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org