Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/G21Tp5VClG0uopiI_zWey9xI6Og.roa
File: G21Tp5VClG0uopiI_zWey9xI6Og.roa (raw, json)
Hash identifier: 1kdoizl3jCKal4IgusDIt2GoLYzfGghsOrB+SdqEJQI=
Subject key identifier: 1B:6D:53:A7:95:42:94:6D:2E:A2:98:88:FF:35:9E:CB:DC:48:E8:E8
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 05F8C7B0
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/G21Tp5VClG0uopiI_zWey9xI6Og.roa
Signing time: Sat 01 Jan 2022 13:55:31 +0000
ROA not before: Sat 01 Jan 2022 13:55:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51487
IP address blocks: 77.228.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100190128 (0x5f8c7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6d53a79542946d2ea29888ff359ecbdc48e8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:46:0b:73:73:30:a3:00:fe:3a:4e:6f:b1:
d5:11:a3:f9:34:b0:1c:61:04:4c:97:5f:07:e8:4b:
d4:1a:bf:8c:e6:27:b7:4f:64:c3:f5:fa:41:b5:d1:
9a:19:8b:24:1f:22:7b:04:16:84:aa:a2:00:80:ea:
f1:f7:f4:df:6d:a1:1e:18:73:73:a8:8d:3b:74:ee:
a1:2a:4f:8e:cd:5f:bc:3d:1f:dd:bc:ad:43:3e:43:
36:28:db:20:3a:83:b6:34:c2:4f:bf:cf:b2:ee:ba:
a8:08:01:9b:b5:38:a5:7c:90:3e:48:4f:66:6c:52:
7e:67:d1:b8:a7:3f:9c:58:7a:81:9f:c5:3b:08:48:
19:eb:10:3a:12:d5:c9:94:9e:c8:48:a8:d2:1b:33:
2e:76:3c:ee:0c:7c:00:12:d5:0e:85:e6:cd:39:c1:
69:bc:c6:1f:a5:06:b0:14:65:38:c5:c1:16:6a:51:
ac:a0:bc:ee:55:c9:f2:2b:52:a2:ea:eb:22:8b:4b:
de:03:4d:48:03:09:e3:86:e1:76:63:b6:80:ff:b4:
78:55:0b:cb:f0:b3:17:2a:d3:1e:ea:b5:88:25:1f:
4f:74:69:2b:26:5b:61:a8:4c:57:de:3b:55:9c:83:
4b:f4:2e:dd:58:17:9d:f0:06:54:00:de:18:e4:a2:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:53:A7:95:42:94:6D:2E:A2:98:88:FF:35:9E:CB:DC:48:E8:E8
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/G21Tp5VClG0uopiI_zWey9xI6Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.228.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:e8:01:62:51:bd:88:f0:79:40:bc:91:52:20:b0:02:30:d9:
0a:30:c6:2e:12:95:1f:ff:63:78:82:62:db:13:79:26:de:5d:
b5:bc:bb:1d:5b:c9:d4:cd:1a:98:79:0b:0a:78:99:c3:1a:5a:
b1:d3:29:ef:a1:4c:bd:b2:b7:db:ca:5f:36:a3:04:aa:dc:98:
79:d7:79:f8:4f:8d:a2:c4:17:2b:46:12:67:c9:38:a5:a1:06:
ae:5e:39:0a:bc:db:72:61:5b:ab:77:f7:98:19:c0:8d:8e:da:
7d:28:3e:d4:00:9f:e1:22:07:bb:8e:d2:08:d6:eb:42:7a:eb:
28:da:c4:d2:fa:45:26:48:e4:e8:b7:ab:c9:7b:ab:f7:4f:bf:
1a:36:55:d7:6f:ed:39:32:0d:52:e0:92:ca:d1:f6:ed:23:43:
9c:9b:c9:00:ba:60:b3:5b:17:1b:bc:07:be:77:83:39:27:01:
da:9d:38:92:f3:1f:a4:79:49:be:eb:0d:6e:bd:07:c1:6a:e2:
f3:8f:fe:2b:8a:78:89:4a:b1:b5:04:ae:cf:f4:a2:6e:8f:9a:
91:23:cd:bd:9e:c7:f8:d4:1c:f1:50:a6:c9:25:0a:29:c4:ba:
b5:89:fb:cd:b8:b6:44:b4:eb:5e:ca:fd:ce:27:fc:01:1d:4e:
18:cc:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org