Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Q-4wAXIRzlZrh85VJ96CNNNuR6s.roa
File: Q-4wAXIRzlZrh85VJ96CNNNuR6s.roa (raw, json)
Hash identifier: uP+k5QQohnwVInKpK4itOcpzG6mm8+NQCJ2cRQKHiu4=
Subject key identifier: 43:EE:30:01:72:11:CE:56:6B:87:CE:55:27:DE:82:34:D3:6E:47:AB
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 1891B3BC
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Q-4wAXIRzlZrh85VJ96CNNNuR6s.roa
Signing time: Mon 07 Feb 2022 11:52:25 +0000
ROA not before: Mon 07 Feb 2022 11:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 77.69.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412201916 (0x1891b3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Feb 7 11:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43ee30017211ce566b87ce5527de8234d36e47ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:d2:57:1f:27:f8:56:25:da:1a:31:e3:e0:
b8:8b:58:af:d9:66:b2:19:5d:cd:c9:12:b9:f5:85:
d8:77:5d:40:bc:e3:a4:6d:7b:88:66:35:93:82:0c:
b1:91:18:db:bd:80:b3:4d:e0:b8:1a:37:9f:59:a9:
a6:a7:50:d4:4b:02:6e:ba:f5:a3:fb:1e:ed:24:98:
5b:05:28:13:f7:00:df:3b:b7:73:be:62:72:73:8e:
c7:80:4e:4b:f7:f4:58:c4:18:27:cb:9e:3a:5d:ad:
b4:ee:44:70:c6:00:0d:3c:c8:ec:5d:cd:f1:0d:e3:
75:eb:31:c1:51:09:ce:8d:f9:ca:4b:18:56:c1:ee:
ed:31:5a:5c:88:8a:d0:41:7f:1b:7a:25:d2:5c:ca:
02:24:a7:4e:f9:0c:da:ce:4d:6d:2d:fb:f4:2d:56:
2b:f6:80:00:f7:e1:7a:6b:9b:82:f6:55:56:53:df:
bf:1c:9a:4e:fc:26:93:6a:07:5f:6c:17:c5:29:82:
d3:56:d9:93:67:94:85:15:30:22:94:68:82:42:a4:
0b:ba:56:08:aa:e2:6f:1d:e3:83:18:af:f6:88:98:
22:7f:99:27:a5:f3:79:7d:cb:65:82:ba:70:a3:1a:
fa:c0:d8:b0:78:75:c2:94:01:cb:ed:b2:09:2b:40:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:30:01:72:11:CE:56:6B:87:CE:55:27:DE:82:34:D3:6E:47:AB
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/Q-4wAXIRzlZrh85VJ96CNNNuR6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.148.0/24
Signature Algorithm: sha256WithRSAEncryption
20:15:a5:50:52:fe:6e:08:4c:0b:01:d6:47:2a:14:7e:42:45:
b0:8d:4c:27:ce:f6:36:66:6b:71:06:ba:bf:93:4f:89:e2:69:
5f:ff:28:86:15:b0:2f:fe:d2:75:bb:eb:ab:0e:6c:27:41:1f:
90:d8:a4:8e:47:ec:46:03:3e:4e:14:f1:80:66:d0:58:9e:22:
8d:d6:10:e1:c7:0c:ed:c2:a4:6e:44:53:c7:68:4b:f8:48:bc:
14:63:ed:ea:15:c9:1b:42:24:37:72:ae:1c:af:b1:66:84:b7:
21:45:36:ae:4f:80:fd:ed:79:ed:68:06:6c:ce:9d:05:fe:46:
ad:c5:91:aa:47:34:25:32:a3:43:54:14:a9:df:bb:01:8d:fd:
76:f7:81:e5:e8:97:38:6d:57:f9:0c:9c:2a:6f:0e:af:e9:a7:
a0:cc:ed:89:52:a6:bc:95:52:b7:be:04:9e:52:93:8a:37:76:
af:74:ff:8b:dd:24:dc:87:43:6c:15:86:a4:87:28:f4:9f:a7:
94:72:01:f8:cd:0d:80:2c:9a:f8:09:87:6a:14:c5:56:68:33:
26:e6:44:bc:e3:65:09:77:09:a2:d6:6b:95:18:b2:e9:d3:d9:
11:3e:cd:1f:38:4c:66:29:82:5d:d8:e6:eb:be:2d:0f:3a:ea:
02:31:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:47 2023 by rpki-client on console-ams.rpki-client.org