Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kR7oEtV9dC5zITJ8RZovJayanrA.roa
File: kR7oEtV9dC5zITJ8RZovJayanrA.roa (raw, json)
Hash identifier: Je0RlcB4rp6/axVINZdCz2ICF740H44G386RYOAOWsA=
Subject key identifier: 91:1E:E8:12:D5:7D:74:2E:73:21:32:7C:45:9A:2F:25:AC:9A:9E:B0
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AEC99E2
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kR7oEtV9dC5zITJ8RZovJayanrA.roa
Signing time: Sat 01 Jan 2022 13:57:49 +0000
ROA not before: Sat 01 Jan 2022 13:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28732
IP address blocks: 77.65.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720148962 (0x2aec99e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=911ee812d57d742e7321327c459a2f25ac9a9eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:c6:65:f6:65:96:ac:37:fe:4f:af:2a:e8:
91:0b:ea:e5:a3:48:72:83:56:30:3a:dd:f1:1f:70:
34:88:3f:2c:68:5e:10:c8:88:4f:3d:ca:a0:59:76:
4d:32:12:11:5b:0c:be:b4:7d:5c:9d:4e:4e:9e:fe:
3b:25:72:dc:5f:48:7c:97:6e:4c:c8:4e:ca:95:70:
82:3b:c4:1c:5f:0c:96:0b:3b:b8:1d:e3:21:1c:ef:
58:4e:a7:20:13:57:26:5a:80:52:24:3f:20:08:17:
5d:86:5c:79:44:05:ec:f7:e3:d8:ef:f1:61:f4:01:
c5:31:03:6a:32:7a:52:c2:4e:1d:b5:19:27:56:0e:
9e:5e:90:7c:d0:39:af:48:96:c5:64:ab:0e:1a:62:
2d:ac:c0:e5:bb:8d:62:2c:a9:8a:0a:1f:19:3a:15:
03:f5:d7:e0:c0:19:c5:46:a4:ad:2e:0d:bc:85:b0:
45:30:68:b3:2b:91:d8:4f:e1:a0:87:37:67:6b:5a:
e9:2b:b1:2e:f1:23:96:df:24:4e:92:97:43:7d:8e:
6d:d8:e8:93:09:04:96:00:ef:35:f1:33:ab:f2:22:
0b:d7:97:b4:3a:88:ef:69:02:14:79:0d:eb:f7:f3:
53:74:e2:c1:e4:1a:24:2a:06:59:96:da:67:a3:3e:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1E:E8:12:D5:7D:74:2E:73:21:32:7C:45:9A:2F:25:AC:9A:9E:B0
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/kR7oEtV9dC5zITJ8RZovJayanrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.153.0/24
Signature Algorithm: sha256WithRSAEncryption
96:11:31:37:b6:61:09:9b:94:14:4b:04:a2:27:20:16:fc:48:
2a:96:62:01:7c:2a:7a:08:ac:09:0c:6f:b3:7b:6f:ed:63:72:
a5:ea:94:8e:92:8a:47:36:1e:c3:af:0d:85:ed:19:27:60:48:
f1:c9:9c:5f:d3:ea:27:e8:df:32:25:bb:af:2f:c8:68:87:bf:
93:5e:cb:37:91:65:f9:90:41:1c:e4:33:12:7e:a9:7a:46:47:
8d:86:27:d1:5d:c3:63:19:f2:e2:8a:7a:48:6d:7a:72:da:41:
4a:65:28:f8:46:11:9a:fd:c2:e1:cb:3c:a4:d7:13:69:8a:85:
58:0e:0d:fe:7f:12:df:70:7a:a9:45:36:75:47:95:dd:19:cc:
76:24:c5:5d:32:03:29:85:47:bd:db:30:4a:8f:12:71:dd:f1:
bb:bb:eb:ad:33:11:af:74:6d:21:71:0c:fb:b6:90:1c:15:87:
16:b1:3b:46:4b:a3:bf:82:ca:6d:a3:5f:5a:2a:0d:de:a2:5b:
e2:c9:52:aa:f5:65:a9:e3:cb:c5:9a:59:38:10:dc:1d:3f:11:
f8:aa:6c:c7:c8:05:ac:9d:74:c0:d4:65:97:1a:55:c0:7a:a5:
5d:9a:c1:d9:db:f2:89:0a:dc:cb:56:31:28:53:a3:fd:c9:90:
cb:3d:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org