Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/XCuEN1yQA907q8isLW_4R-aEP5I.roa
File: XCuEN1yQA907q8isLW_4R-aEP5I.roa (raw, json)
Hash identifier: NRjAlQLH2UzgzHl/qVbcTfeq7Tu26q6offT3OzMVFts=
Subject key identifier: 5C:2B:84:37:5C:90:03:DD:3B:AB:C8:AC:2D:6F:F8:47:E6:84:3F:92
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 01829C01862992431AB184A1C8DCAFB3214B
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/XCuEN1yQA907q8isLW_4R-aEP5I.roa
Signing time: Sun 14 Aug 2022 10:58:41 +0000
ROA not before: Sun 14 Aug 2022 10:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 77.243.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9c:01:86:29:92:43:1a:b1:84:a1:c8:dc:af:b3:21:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Aug 14 10:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c2b84375c9003dd3babc8ac2d6ff847e6843f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:74:f3:da:19:0a:27:ef:55:2f:7f:e1:ce:
98:73:3f:64:e7:ff:3b:5c:ee:b9:77:22:04:61:6e:
c4:a0:1d:00:07:96:63:37:26:e7:49:14:33:5e:de:
c5:ec:10:65:f5:65:6d:1f:5e:d9:ae:a8:b1:55:31:
77:0f:8a:1f:c9:cc:50:42:fc:3d:6b:29:a4:46:a9:
13:b6:8e:f8:17:60:b8:6b:d3:7a:8f:e4:84:4f:81:
e8:14:cd:df:df:b2:fc:b7:57:96:ec:8d:1d:00:a9:
b1:28:84:cf:a0:33:a5:05:c8:61:cd:4b:76:55:9b:
fd:3a:aa:d1:24:c1:e1:84:d3:9d:fe:65:0b:ad:00:
f1:5a:15:35:0a:a5:56:d0:d5:96:cc:ae:2a:04:cc:
38:10:5b:cd:43:04:cf:ef:4a:00:fe:25:6b:fa:bd:
39:be:9e:2b:a2:31:95:31:37:f7:03:9a:9e:e8:14:
1f:25:46:eb:6a:5d:3b:7d:e8:fd:17:46:13:f5:74:
a8:32:0f:38:d1:1e:a0:52:d7:65:7c:2b:07:b2:0d:
49:b8:41:b3:3c:ed:12:e6:28:b9:28:05:a6:1d:70:
81:aa:ac:7d:38:11:af:af:6b:b0:0f:96:12:61:3d:
11:7a:06:23:1a:55:03:81:e7:d2:9a:cc:b0:5c:ed:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2B:84:37:5C:90:03:DD:3B:AB:C8:AC:2D:6F:F8:47:E6:84:3F:92
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/XCuEN1yQA907q8isLW_4R-aEP5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.90.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5a:a1:40:e3:5f:67:46:78:c5:1e:dc:eb:94:32:10:89:c3:
2f:6b:55:fb:39:82:8e:52:a0:92:5a:97:a2:fd:1b:44:4d:1d:
b6:fa:be:69:3d:f4:7d:86:14:f1:6e:ec:4d:da:85:d5:df:4e:
75:9c:1d:b6:43:2d:ab:f8:bf:b6:f1:5b:c5:da:ef:2c:d6:ff:
63:6a:17:17:f9:fb:fc:ee:8d:ef:4e:24:2c:09:d8:65:f7:ce:
24:99:6c:de:8d:6b:21:93:90:ca:75:f4:46:63:b1:d2:9d:81:
10:4c:26:2c:50:6f:c6:f3:d8:fe:01:3a:91:a1:d0:fa:1e:24:
f8:6c:d8:ed:2d:58:8b:c8:ab:c1:e0:5e:01:5f:fc:0b:00:da:
e3:be:cb:23:ca:88:ff:6f:f6:38:3f:eb:7b:4e:c3:91:38:6b:
c1:85:cc:8d:51:ce:3b:94:22:91:65:c5:2e:ce:a3:59:ba:b2:
ed:30:53:26:92:fe:69:42:aa:e8:fd:b0:33:8b:0e:fa:4d:be:
ea:24:52:74:dd:65:e3:e6:15:f0:b2:43:fc:42:36:c2:b0:b4:
60:df:6c:37:9d:e6:6d:bd:f6:a4:30:80:b0:ba:9f:53:86:26:
f3:32:be:ef:78:02:66:78:98:c0:54:9c:ba:78:3e:6f:87:7b:
a5:0d:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-fra.rpki-client.org