Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/uSH5xu_oAqCn_GQcr_4LqCTsmuE.roa
File: uSH5xu_oAqCn_GQcr_4LqCTsmuE.roa (raw, json)
Hash identifier: 8ej5zdpopMBp42p0nCDCbGJ4CU6F+QErZpkF8fTTYsI=
Subject key identifier: B9:21:F9:C6:EF:E8:02:A0:A7:FC:64:1C:AF:FE:0B:A8:24:EC:9A:E1
Certificate issuer: /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial: 01149CE7
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/uSH5xu_oAqCn_GQcr_4LqCTsmuE.roa
Signing time: Sat 01 Jan 2022 10:05:30 +0000
ROA not before: Sat 01 Jan 2022 10:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.75.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18128103 (0x1149ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80340326822530f943859c73e7df3d3655168b70
Validity
Not Before: Jan 1 10:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b921f9c6efe802a0a7fc641caffe0ba824ec9ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:48:63:90:6e:74:d9:7a:82:5f:05:dd:a2:
93:a9:75:5e:4a:3f:ce:56:e0:a3:6e:a4:ec:8c:dc:
63:c7:f3:ee:ec:73:11:96:8b:89:eb:c9:b9:6e:4d:
26:e8:69:7a:5b:1c:ff:7a:77:bf:ca:bb:37:65:0a:
9f:72:d9:36:80:e5:8c:83:42:23:4e:b2:f9:eb:4d:
2e:16:b0:94:e5:06:3b:f3:89:1a:6d:fb:02:d0:a7:
31:a3:63:af:9f:7a:6f:01:9d:b1:d0:80:46:1a:87:
19:a0:9c:fa:d2:e2:60:a7:1b:49:bf:8a:9b:33:8c:
00:ce:9d:ee:86:a4:46:b5:d6:b4:17:f7:65:74:39:
94:e2:02:db:eb:3e:06:25:a2:20:7a:51:06:bb:e9:
9a:ac:0b:8c:b8:19:30:ac:73:e0:4d:6d:1b:8e:fa:
c0:43:cb:7a:4c:c8:3e:30:6f:4d:7b:9e:bd:b6:b8:
47:b5:db:1c:5f:e0:ba:d2:ef:7a:fb:81:54:31:28:
e4:eb:87:da:f1:f2:57:8e:a8:e5:ea:2c:60:d6:b9:
b9:04:1c:01:39:cb:03:c4:c8:15:84:86:b7:33:f7:
c8:6e:ac:72:b9:e9:9d:81:74:d2:30:1a:76:e4:b5:
4d:dc:d8:69:dc:45:08:c2:74:18:c7:8b:97:09:bb:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:F9:C6:EF:E8:02:A0:A7:FC:64:1C:AF:FE:0B:A8:24:EC:9A:E1
X509v3 Authority Key Identifier:
keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/uSH5xu_oAqCn_GQcr_4LqCTsmuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.229.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ea:03:55:04:3e:27:e0:62:df:77:32:bb:8f:24:7c:18:80:
d6:c7:13:7c:c7:f1:d2:41:3c:69:ef:75:3a:de:69:61:7e:4a:
70:0d:d3:1e:10:e8:95:79:87:bb:0f:d3:0e:7f:c8:32:eb:f4:
e8:8d:1f:31:9b:c8:0a:4d:f8:13:04:a8:f1:09:d5:98:95:dd:
15:9c:b6:4d:cb:a9:47:b6:b3:a3:c0:04:6a:e8:f3:f2:a9:e3:
99:26:7f:de:1b:a6:c7:32:73:cf:44:08:92:15:15:e2:33:a4:
f9:dd:2b:41:90:a6:3b:c5:20:0c:04:20:2a:0a:2b:96:3c:3e:
42:4d:24:c6:82:61:2e:b5:c5:30:be:05:86:47:2f:1a:bb:9b:
51:5d:b4:dc:3e:70:8b:ff:d2:67:43:2a:28:9b:cc:2e:78:cf:
d0:72:de:4a:68:a4:79:32:ca:ab:44:83:bf:fa:40:40:01:d7:
56:96:e7:fd:cf:00:13:ac:fc:e1:36:f4:13:a5:f9:0c:28:07:
62:22:a0:7c:e1:38:24:cf:28:af:71:5e:42:77:0c:5f:1d:ca:
14:6e:87:5a:86:da:b0:8f:41:89:b8:61:92:97:0e:bc:7b:fb:
32:5c:ee:d1:d5:0f:29:5d:ec:bb:a3:c7:77:a8:72:1f:d4:ec:
1e:a4:fd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:47 2023 by rpki-client on console-ams.rpki-client.org