Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQ0HYcGezgIjhTG-2A1eAzqGSHQ.roa
File: uQ0HYcGezgIjhTG-2A1eAzqGSHQ.roa (raw, json)
Hash identifier: nxck7pArOn4ld/Y4og14SwIkcud0wBBkIfZ9ZZ7kWSY=
Subject key identifier: B9:0D:07:61:C1:9E:CE:02:23:85:31:BE:D8:0D:5E:03:3A:86:48:74
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA1C87A
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQ0HYcGezgIjhTG-2A1eAzqGSHQ.roa
Signing time: Sat 01 Jan 2022 05:03:43 +0000
ROA not before: Sat 01 Jan 2022 05:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34744
IP address blocks: 77.232.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463587450 (0x1ba1c87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b90d0761c19ece02238531bed80d5e033a864874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:f6:66:aa:36:17:4b:6d:8b:87:d2:1f:6a:
6c:00:92:ad:2f:c2:05:1b:d4:b1:00:09:75:bb:02:
89:c6:87:ba:95:42:dc:18:ee:94:40:39:7a:a7:cd:
a7:25:de:d4:55:88:49:2e:54:26:30:43:ec:b7:21:
e9:21:7e:6b:f9:9d:1a:4b:17:f9:36:de:32:3c:45:
ec:a4:5a:ff:96:e9:bc:37:0d:87:0f:a1:d7:58:1b:
9e:fb:fd:86:66:d3:50:b6:df:ac:30:52:81:f1:9b:
36:8a:1f:72:13:1b:9a:c3:29:6f:bc:13:b2:25:35:
83:dc:d9:9a:67:34:15:52:c1:7c:fe:9f:d8:a9:7e:
d1:7e:0d:22:e6:9a:f8:14:84:c6:9f:4d:b7:be:6b:
46:25:1d:6f:b8:cd:92:37:d2:a9:4c:42:cc:8d:2b:
44:75:20:7c:c9:35:43:58:c5:b8:62:2c:50:d9:51:
09:a3:2f:44:53:0c:aa:1b:c7:57:fc:e1:14:66:2b:
5a:d8:1f:d3:c0:c3:87:3b:e8:f0:ee:ad:18:53:70:
d6:a6:8b:c2:e5:e5:84:43:1f:92:ee:ac:bb:89:cd:
06:20:f3:0d:d3:1d:f8:31:64:a9:fc:02:78:cb:79:
80:67:6e:1e:4a:64:72:47:8d:e8:45:b0:ee:eb:73:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:07:61:C1:9E:CE:02:23:85:31:BE:D8:0D:5E:03:3A:86:48:74
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/uQ0HYcGezgIjhTG-2A1eAzqGSHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
48:a5:9b:e0:e1:1c:ab:c8:11:8d:f5:2c:ff:73:ba:7e:fd:bf:
a9:a6:e6:32:a6:bc:ab:fc:6e:65:b9:d0:ef:eb:65:a6:cc:ca:
3d:11:3e:aa:1e:80:b9:29:1f:cd:36:0a:88:6e:c5:db:c6:df:
76:07:8a:89:8e:dd:e7:0c:63:a0:2c:a2:7b:3d:a9:24:3d:62:
42:c7:66:f4:9d:4b:2b:58:66:79:bf:47:5a:74:57:b7:0c:3a:
98:f9:ec:a0:21:be:c2:db:cf:39:54:c9:11:08:d3:4b:95:63:
65:bf:d1:d2:51:07:99:2e:7a:fe:0d:7b:ab:de:7e:96:e0:0a:
60:ce:9b:a3:19:1e:ef:a9:d0:62:4c:59:1c:7e:7c:ee:75:0c:
aa:e1:fa:6b:d2:ef:ef:a8:fb:a9:48:01:1a:15:02:af:d1:83:
00:87:dc:7f:36:90:5e:77:ef:f9:87:69:a2:66:b4:9f:4c:c4:
07:78:c4:85:e7:36:6b:8c:e7:68:45:27:11:68:d8:48:86:db:
3e:5f:48:62:b8:48:39:0f:6a:24:2a:57:61:9c:aa:ae:df:8c:
a0:29:0d:b9:ca:65:0b:60:48:a1:49:60:15:a5:1b:e1:46:5b:
7b:27:e5:57:5b:06:57:2a:19:0a:18:a6:10:66:b7:1a:53:a9:
a0:ce:43:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org