Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/9sqkTGZUhLoFGLvj-pE0Il69VdE.roa
File: 9sqkTGZUhLoFGLvj-pE0Il69VdE.roa (raw, json)
Hash identifier: HfYG1yfsxp690z6ibSo+h2fGLGNM1TVZnlmDVC4tjog=
Subject key identifier: F6:CA:A4:4C:66:54:84:BA:05:18:BB:E3:FA:91:34:22:5E:BD:55:D1
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 01826D51F55B5834A540BA9416E4DC25EC7D
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/9sqkTGZUhLoFGLvj-pE0Il69VdE.roa
Signing time: Fri 05 Aug 2022 09:24:23 +0000
ROA not before: Fri 05 Aug 2022 09:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211413
IP address blocks: 185.253.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:51:f5:5b:58:34:a5:40:ba:94:16:e4:dc:25:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Aug 5 09:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6caa44c665484ba0518bbe3fa9134225ebd55d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:de:0c:fb:cd:54:c6:43:3b:3a:57:38:37:
77:93:76:30:b2:da:7b:10:e5:9c:9b:9b:af:6d:83:
be:05:86:64:16:02:78:b7:43:e9:f6:11:b9:1c:bc:
aa:fd:91:5d:f6:03:02:c5:39:74:3f:98:be:04:5b:
2e:8b:fb:e7:f3:bd:c7:25:6c:bf:ea:46:2d:e7:aa:
d5:ad:1a:99:12:74:a7:3b:b9:4b:ae:08:f3:1d:ee:
57:38:f9:2e:23:1f:f0:66:80:ba:93:86:e6:0d:a4:
25:e2:8c:ef:bc:eb:35:d1:b0:9b:19:8c:74:2a:a3:
ab:7f:58:f6:61:34:12:c0:8f:8e:ba:45:af:09:0f:
44:52:dc:c8:45:1a:f1:e2:db:f2:5f:5d:b7:1c:2c:
fb:43:30:c3:2e:5e:69:b8:11:c7:76:21:78:99:8e:
24:42:47:94:97:a6:56:0a:e7:ef:bc:04:8b:2a:1e:
d4:db:7c:a5:ed:d1:1a:71:ed:4f:bd:18:d5:71:80:
aa:4a:6d:5b:44:6f:8a:9a:95:a1:f4:5c:18:fd:18:
9d:65:f6:fa:d5:77:7f:0c:67:87:00:07:d2:24:dc:
fe:80:75:53:30:f7:b8:44:0b:8a:24:b2:dd:32:83:
ce:1b:fe:64:a5:dd:c5:c8:fd:40:7b:e8:82:53:c7:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:A4:4C:66:54:84:BA:05:18:BB:E3:FA:91:34:22:5E:BD:55:D1
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/9sqkTGZUhLoFGLvj-pE0Il69VdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.77.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f1:19:32:71:e5:11:77:29:c3:01:d0:4d:2d:85:a7:bb:96:
35:d3:32:dd:1e:34:7d:eb:2c:ec:ae:13:66:6f:56:8f:36:6e:
a1:22:ff:97:19:e2:95:52:fb:62:57:81:c2:94:8b:42:d2:a4:
83:fb:53:e8:d9:6b:71:ff:ce:29:33:ea:13:e4:d8:83:53:7d:
d4:1a:7a:13:c2:52:b6:be:e6:1b:59:a8:dc:91:56:ba:fa:6f:
7a:c7:69:fb:cd:38:e5:3b:f6:d2:9d:53:82:72:ac:59:29:81:
60:88:80:56:4c:e2:54:2f:19:b1:97:e7:29:52:61:e5:54:13:
51:7c:3b:50:a3:e1:8f:25:25:d7:0e:9b:e6:fb:28:51:15:26:
58:17:90:6b:b2:e9:69:d9:e7:72:8d:31:bf:ba:c2:86:ca:86:
37:62:c0:ac:13:da:00:7c:ac:bc:05:9d:e1:21:c9:02:23:05:
c0:9a:0f:93:04:d9:97:f7:85:a3:8a:67:8f:00:bb:df:fa:18:
c1:bb:a0:5b:b3:97:de:a7:ed:df:84:52:d0:0b:d1:a5:14:5d:
eb:42:57:56:64:84:39:e4:b8:68:08:4c:6e:c3:2d:5d:b5:bc:
10:84:b7:11:13:57:fc:60:b3:07:17:11:a8:df:ca:e9:ea:8d:
06:3a:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org