Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/3VI2AibRsCJBeBfyag8RCFqC4Fw.roa
File: 3VI2AibRsCJBeBfyag8RCFqC4Fw.roa (raw, json)
Hash identifier: mxPTQDI6122+giZClwaI5YLymI2BLGKbErbxRBl8de8=
Subject key identifier: DD:52:36:02:26:D1:B0:22:41:78:17:F2:6A:0F:11:08:5A:82:E0:5C
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 0182CE6DD089E0F47F4D70485369073269E3
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/3VI2AibRsCJBeBfyag8RCFqC4Fw.roa
Signing time: Wed 24 Aug 2022 05:57:59 +0000
ROA not before: Wed 24 Aug 2022 05:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49544
IP address blocks: 185.77.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ce:6d:d0:89:e0:f4:7f:4d:70:48:53:69:07:32:69:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Aug 24 05:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd52360226d1b022417817f26a0f11085a82e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:bb:3d:ad:28:c9:79:f5:a3:fc:83:20:8b:
8e:a7:3e:7a:70:b3:d8:64:b4:84:67:a5:2d:e6:c2:
bd:02:a1:a0:5a:c6:db:33:95:2b:e8:99:3b:45:c0:
c8:be:0e:a7:c8:00:d3:a5:90:e9:de:ca:ff:e1:6c:
14:10:a0:2e:03:2f:fc:81:38:5c:c2:b6:20:f2:73:
8c:aa:1a:6a:00:59:d9:65:f5:30:74:c0:eb:a2:a0:
8e:04:e3:9e:36:a6:1b:28:d4:20:6a:98:fe:98:70:
c4:c6:af:ba:78:90:1d:80:f0:64:83:bb:db:b3:98:
c8:c9:c6:df:1f:3f:54:e1:0d:5e:96:03:5f:82:8d:
f6:5c:c4:33:60:40:37:9e:0f:be:0b:4c:96:b5:f6:
f7:50:a4:ab:f9:df:6f:d9:4b:e0:2b:12:52:08:13:
e3:19:b3:f2:ee:a8:27:a0:82:a5:d7:06:d2:c5:02:
24:a7:9e:b7:b5:69:ab:af:15:ac:61:f5:d7:d9:7d:
2b:b3:5e:30:85:e7:f1:94:ba:37:3d:44:e5:0a:d0:
47:b6:0b:43:65:a4:70:27:a8:83:06:03:63:d5:b9:
ac:09:b9:c0:c6:69:05:30:cf:7a:c2:23:f6:9b:71:
d8:8a:c8:2c:e1:01:ac:4e:2f:0b:96:4e:0f:f8:3b:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:36:02:26:D1:B0:22:41:78:17:F2:6A:0F:11:08:5A:82:E0:5C
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/3VI2AibRsCJBeBfyag8RCFqC4Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:16:4d:6f:83:a6:3d:b4:f6:9c:53:5a:c0:65:34:9f:3e:5f:
dd:24:a3:ec:bd:c4:05:5e:a8:b2:1d:83:72:46:b3:ad:5a:4b:
53:bd:04:04:20:ca:a1:d7:01:7c:80:60:f8:de:df:23:f6:45:
73:11:e1:6d:0b:f6:34:f7:0f:1e:28:6a:18:7a:b0:55:fb:9b:
94:b9:f3:6f:b4:af:6c:5b:a6:d6:6b:55:4b:2f:62:1d:30:88:
d6:09:c3:12:f0:36:f8:ba:35:db:26:76:73:5b:b5:85:22:58:
bb:80:fd:81:0f:e7:6f:88:65:29:41:31:38:27:01:81:7b:69:
96:41:9c:cf:c6:96:c6:b6:d9:39:29:ab:88:a7:53:32:2b:98:
03:e0:54:94:56:bf:2f:48:35:cf:35:35:b1:4a:50:7e:cf:e5:
f9:0a:a4:2d:9a:32:d5:33:ca:31:6f:21:55:2c:c5:5e:74:5a:
07:fe:ec:20:42:7a:19:72:b9:97:e3:65:85:1e:33:5a:4a:eb:
bb:41:0b:84:16:d8:a2:2c:02:fd:a4:03:35:d0:92:e4:74:45:
3f:aa:90:40:d8:bc:7e:a5:e1:de:30:23:8e:7f:91:1a:ea:c3:
e2:21:76:b2:9f:46:0a:7e:a6:7e:e0:31:22:be:18:37:ed:d8:
91:64:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:03 2024 by rpki-client on console-fra.rpki-client.org