Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/V6BRGWSfRryNpMkqO1JxQ4JKK5w.roa
File: V6BRGWSfRryNpMkqO1JxQ4JKK5w.roa (raw, json)
Hash identifier: rgAIFet82implbPKPzoxB9O5XNWMgz50/LYhYvDmyYs=
Subject key identifier: 57:A0:51:19:64:9F:46:BC:8D:A4:C9:2A:3B:52:71:43:82:4A:2B:9C
Certificate issuer: /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial: 10B39C
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/V6BRGWSfRryNpMkqO1JxQ4JKK5w.roa
Signing time: Tue 07 Jun 2022 07:17:20 +0000
ROA not before: Tue 07 Jun 2022 07:17:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25454
IP address blocks: 217.12.112.0/20 maxlen: 24
188.131.0.0/17 maxlen: 24
77.89.192.0/18 maxlen: 24
193.239.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094556 (0x10b39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Validity
Not Before: Jun 7 07:17:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57a05119649f46bc8da4c92a3b527143824a2b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:be:bb:69:2a:18:f2:f0:db:3d:d6:db:ce:
e7:c3:75:26:7c:96:8a:92:0e:04:28:48:93:d6:98:
b2:7f:48:ed:21:e5:e8:a7:12:5f:b5:36:38:ef:a8:
0a:dd:e3:95:74:b3:83:66:ce:c1:50:87:21:74:97:
ff:5b:91:d8:1d:64:19:f5:68:89:6c:1a:4d:62:ae:
50:3d:77:ab:14:ef:6b:db:b2:11:9f:9e:92:ef:c5:
83:cb:91:8b:a5:42:79:54:d0:c9:b8:45:47:65:fc:
6f:36:ee:9d:a2:08:e7:26:49:81:b2:1d:89:39:49:
bd:15:d4:f1:27:9c:f2:b9:21:7a:2e:3b:19:b6:36:
45:54:d6:d2:5c:ec:1e:69:a2:ad:ef:7d:72:d5:bc:
58:35:e0:87:f4:ed:65:47:4d:10:74:39:93:8a:14:
50:7f:3e:c9:27:b0:3f:dd:0b:be:91:0a:53:7c:0a:
c9:5c:e8:98:b5:b3:94:d0:8a:ad:fd:56:92:9e:12:
2b:8c:68:64:6c:c4:aa:fc:b5:10:25:be:1d:2d:59:
74:fb:e2:e2:a8:1c:43:a9:20:dd:1a:90:6f:d1:1e:
c3:87:79:f0:b7:a6:c8:dc:4c:1e:10:b2:5a:96:79:
aa:9f:8c:b4:09:e4:3f:6d:77:98:4f:8e:de:6e:4f:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A0:51:19:64:9F:46:BC:8D:A4:C9:2A:3B:52:71:43:82:4A:2B:9C
X509v3 Authority Key Identifier:
keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/V6BRGWSfRryNpMkqO1JxQ4JKK5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.89.192.0/18
188.131.0.0/17
193.239.182.0/23
217.12.112.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:4f:38:2e:2f:af:49:ff:c6:cf:aa:53:0a:c6:3a:6c:7f:d3:
4f:9d:18:c5:42:0e:c8:90:09:fa:6d:2d:b7:18:65:d8:ad:00:
2f:05:17:d8:f7:fa:90:77:e1:73:04:8a:0c:22:4e:2f:46:af:
43:cb:50:f4:e9:f6:f0:92:38:f0:74:0c:0e:8c:fe:84:31:81:
61:b2:cb:18:0b:bb:a4:e7:2d:66:85:b6:73:63:28:fa:97:91:
37:20:7b:9d:5a:bb:a1:45:f3:aa:d4:d7:1a:8b:45:61:cf:0c:
17:7b:a3:c7:e4:f6:f0:24:2f:f0:e1:65:c0:16:7a:29:ff:c4:
a1:12:2a:73:0c:b0:5c:f3:59:e9:15:73:d0:31:d7:ad:6a:f3:
19:9d:6c:bc:5e:da:1c:46:c9:97:74:6a:f6:dd:58:7b:9f:57:
0a:74:ff:c6:00:2f:d3:99:d2:0c:6b:4b:0b:84:c5:66:48:90:
d5:81:66:e8:ac:fe:96:b2:d8:8d:fc:11:fa:d2:24:bb:f9:be:
61:83:a9:42:af:e2:ee:d4:b5:2a:35:e9:ae:a0:40:6e:27:d8:
f7:9b:94:99:eb:93:29:a4:6a:fd:f3:02:eb:db:f6:dc:db:02:
21:9f:53:97:0c:80:5c:00:42:19:c9:90:7e:b5:ef:cb:38:95:
08:33:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:23 2023 by rpki-client on console-fra.rpki-client.org