Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/AExXbGw3w2Xnlazrluik9i5_IHs.roa
File: AExXbGw3w2Xnlazrluik9i5_IHs.roa (raw, json)
Hash identifier: sqwvAnmC80j29aginb7sE9jFG3KvqjG705OHbF1oT5I=
Subject key identifier: 00:4C:57:6C:6C:37:C3:65:E7:95:AC:EB:96:E8:A4:F6:2E:7F:20:7B
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 05FAA823
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/AExXbGw3w2Xnlazrluik9i5_IHs.roa
Signing time: Sat 01 Jan 2022 13:55:32 +0000
ROA not before: Sat 01 Jan 2022 13:55:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205191
IP address blocks: 77.224.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100313123 (0x5faa823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=004c576c6c37c365e795aceb96e8a4f62e7f207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:b1:0b:a1:d1:c6:68:d5:b8:6b:2c:f7:39:
14:bb:21:18:11:07:cf:60:ab:dc:4a:fa:34:4d:66:
d6:f4:80:26:f6:94:71:99:ed:88:ca:91:d5:cf:d0:
e2:b4:d0:fe:d7:4c:66:1a:58:29:85:37:f8:7b:00:
35:5e:f4:b6:43:73:cb:05:a1:b9:89:16:61:83:98:
4e:30:be:80:ff:7d:fb:34:ef:61:29:ed:ab:77:1a:
99:02:2a:fa:b1:b9:be:9d:35:07:f7:39:0c:31:d4:
9c:95:ed:c8:96:96:bd:4e:58:0e:26:0d:f7:63:6d:
ad:7b:9b:e0:09:e1:ae:4d:75:ca:7b:5e:fd:55:82:
03:ab:e5:55:e3:ff:27:c0:be:c2:2b:9c:f6:36:5b:
3a:48:a4:62:bb:c8:99:bb:9c:8f:76:47:34:d1:dc:
c4:45:af:55:b7:80:2f:f5:25:50:13:3b:58:20:36:
45:47:8b:6a:57:04:2f:88:39:33:45:d1:b7:af:5e:
c4:95:bb:50:49:de:fd:a0:8f:3c:f9:2b:c9:89:8b:
26:8c:01:f1:14:50:06:46:91:c7:31:9d:25:9c:1d:
f9:8f:4f:e7:48:82:57:f1:d4:b9:a2:cd:5e:b1:60:
73:2c:15:a9:e4:e0:b5:a2:41:7a:f9:64:02:f8:a0:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:57:6C:6C:37:C3:65:E7:95:AC:EB:96:E8:A4:F6:2E:7F:20:7B
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/AExXbGw3w2Xnlazrluik9i5_IHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.224.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2c:24:36:36:a3:b7:1d:32:82:0c:1c:55:8f:71:a7:d5:6a:
48:f5:31:52:f7:60:3c:b7:63:09:8f:70:73:df:54:70:bb:2d:
70:ed:0b:04:fb:59:18:11:b6:69:84:47:9f:74:4f:10:39:4a:
a5:9c:0b:72:e0:56:25:7e:e5:97:fa:30:8f:61:f8:fe:9c:33:
1b:f0:ce:e5:61:89:50:2b:f0:68:68:e1:ce:5f:e7:00:75:4f:
dd:d7:1b:48:a8:e6:33:a6:46:7f:dd:70:db:b9:f1:d3:a9:b1:
06:90:0d:5e:00:b7:a1:c2:26:75:be:ad:f3:e8:2a:2b:88:7d:
fe:dc:e0:8c:b0:ca:34:4c:e8:54:7b:96:ef:4d:cf:81:91:34:
47:65:74:db:ce:cd:c9:51:a3:3c:76:42:ab:e2:dd:06:16:68:
89:95:f2:e6:81:0c:7a:99:88:20:4b:76:fc:89:f2:80:d3:fe:
46:4d:2a:93:06:b2:13:e7:b8:1d:71:7b:51:80:e0:f9:85:26:
95:ea:9c:c5:16:e7:42:b2:e7:05:49:78:12:a1:f6:39:27:4a:
a6:35:54:cd:c5:b5:e1:11:5c:d1:dd:9a:82:e7:54:61:fb:93:
78:13:e0:8e:1b:f3:34:92:e3:f6:dd:0e:2f:29:6d:7a:9a:54:
d0:bc:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org