Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/LOe61kEya8GFrxjh3yX8LapYQdc.roa
File: LOe61kEya8GFrxjh3yX8LapYQdc.roa (raw, json)
Hash identifier: cmJLWGOTc/ERHMNnDvTUDd5896MCJ7FYuPrtXX/4KYU=
Subject key identifier: 2C:E7:BA:D6:41:32:6B:C1:85:AF:18:E1:DF:25:FC:2D:AA:58:41:D7
Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial: 0884ECF0
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/LOe61kEya8GFrxjh3yX8LapYQdc.roa
Signing time: Sat 01 Jan 2022 14:02:20 +0000
ROA not before: Sat 01 Jan 2022 14:02:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42917
IP address blocks: 77.75.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142929136 (0x884ecf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
Validity
Not Before: Jan 1 14:02:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ce7bad641326bc185af18e1df25fc2daa5841d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:a5:e4:94:02:7a:6e:df:31:5f:0c:24:bf:
a5:61:a0:88:4a:ea:33:e1:4b:05:0b:c8:a0:95:a4:
dc:5e:0d:ce:99:c5:87:b1:b4:42:30:40:47:7a:c4:
78:a3:bd:3c:fa:81:8a:b4:f2:03:9f:64:2f:c5:9a:
5c:06:8f:c3:73:10:9e:20:31:a6:35:b6:ba:af:f2:
01:93:35:58:b4:a6:4c:c0:16:1f:83:7c:02:18:0e:
dd:e6:c9:5b:3c:10:e5:13:c6:64:be:3d:08:a1:6d:
e7:cf:c9:fe:be:4a:1c:24:a8:ae:8f:82:d5:8c:2a:
ef:3c:6d:45:01:8f:a3:32:b7:3c:9c:d2:2b:c7:cc:
e6:f1:77:58:1d:73:56:c7:88:24:40:4a:e0:8a:b2:
2a:45:3c:30:25:3a:4b:04:72:e1:90:b7:4f:9f:65:
c8:30:89:bd:3f:ed:3e:27:60:b1:7b:d3:1f:d1:c6:
c9:a7:50:ec:ba:2a:a9:fe:2a:bc:06:25:41:e0:02:
ac:ea:2d:1b:82:fb:07:62:0e:e6:33:0a:39:81:41:
9b:1e:48:ed:5d:ad:15:d6:0c:52:db:c2:45:28:58:
53:3f:80:cf:b9:a8:2f:5f:27:95:5a:0b:77:fd:eb:
38:8f:6e:82:a2:5b:30:35:cb:7d:e0:85:c3:58:fc:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:BA:D6:41:32:6B:C1:85:AF:18:E1:DF:25:FC:2D:AA:58:41:D7
X509v3 Authority Key Identifier:
keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/LOe61kEya8GFrxjh3yX8LapYQdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
25:39:40:48:ae:8a:4a:5d:d4:d4:9a:24:d2:94:dd:d3:37:27:
9e:01:f7:9b:bb:e3:2f:c2:07:74:e1:e9:31:a4:c9:31:4a:b9:
ff:39:8e:84:93:11:0f:6b:d1:c1:d0:e3:be:d4:1c:3f:af:a4:
b3:cb:2b:c2:01:48:11:2d:f3:98:ba:d5:07:22:51:f5:b6:d8:
46:0e:5e:9c:19:19:0a:a1:69:9a:a6:ce:8b:be:5a:52:6c:a2:
b2:db:23:0f:79:31:5a:c9:dc:c5:df:e6:c2:75:1b:16:a1:bb:
8b:4d:2c:df:df:e9:9c:28:b5:f5:13:df:51:2d:a0:1f:98:7e:
bd:75:bf:ec:a8:bd:f5:23:b6:04:a6:1e:36:c7:1d:43:b1:82:
34:1c:23:82:cb:f6:34:0e:3b:cb:47:fe:66:c0:6b:9e:53:8e:
c1:5f:c7:09:75:17:7f:3d:0e:35:d4:fb:1a:b3:1f:e8:f7:0d:
45:c6:1f:a4:ad:73:c8:8f:3f:7d:43:2c:3e:77:0f:8a:09:d7:
db:fb:aa:fd:1f:65:ca:f8:c3:b7:82:d1:4b:c1:2b:0f:eb:4b:
28:ee:3a:3d:5c:bc:4e:ac:ea:5d:15:73:fb:7c:5f:8a:7b:ef:
26:b0:35:59:12:e2:52:c4:ea:79:8e:1b:1a:55:d8:9f:5b:37:
1e:21:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:13 2024 by rpki-client on console-fra.rpki-client.org