Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xyoNLdqW20HyTnTc8QysD5fyUp0.roa
File: xyoNLdqW20HyTnTc8QysD5fyUp0.roa (raw, json)
Hash identifier: JQyeuovvviwMsVC8i3Wz1I66avZ64pYCIo2TV8RqgzI=
Subject key identifier: C7:2A:0D:2D:DA:96:DB:41:F2:4E:74:DC:F1:0C:AC:0F:97:F2:52:9D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A9411E4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xyoNLdqW20HyTnTc8QysD5fyUp0.roa
Signing time: Sat 01 Jan 2022 04:52:16 +0000
ROA not before: Sat 01 Jan 2022 04:52:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206526
IP address blocks: 82.177.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982782436 (0x3a9411e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:52:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c72a0d2dda96db41f24e74dcf10cac0f97f2529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:69:47:7c:74:1f:9b:57:04:1d:42:05:4e:e9:
ef:ea:fc:65:aa:9a:eb:09:99:f5:a7:5f:86:4d:15:
65:02:c0:51:1f:ec:25:bf:91:3b:1c:5b:9e:04:4e:
2d:a3:e9:80:93:df:b8:2e:48:eb:70:42:be:48:28:
b8:cc:6d:5e:b8:78:04:14:b2:8a:72:87:fb:ed:78:
ad:4d:09:44:3c:26:8a:d1:7b:c2:89:96:28:37:6e:
d7:a3:33:7e:a7:5d:b3:ce:01:43:3f:66:ea:2b:88:
59:52:9a:a1:00:04:90:b8:1c:07:3c:0a:41:3a:4f:
6b:ca:37:b5:cb:29:eb:27:c7:4c:fc:54:a5:03:09:
29:6f:b3:2f:88:10:ca:9b:ef:f6:c9:ac:f2:5d:d2:
5b:5e:16:28:d8:9b:ca:a4:22:d7:23:71:c9:c1:35:
94:d6:58:91:28:aa:d0:d7:66:34:cc:2f:c1:ee:25:
fe:6c:90:f1:53:e5:5e:16:4b:b5:77:2e:37:06:21:
5b:1a:b2:67:5c:04:02:2b:a5:4d:2c:ac:3e:dd:21:
09:9a:51:b9:7f:bf:c3:59:1a:8b:e9:b2:ba:8a:95:
80:35:43:60:5f:df:bf:46:9c:7a:8e:88:88:ae:87:
8a:6f:8f:31:c9:f5:f8:f9:a5:87:86:bf:ce:ad:90:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:0D:2D:DA:96:DB:41:F2:4E:74:DC:F1:0C:AC:0F:97:F2:52:9D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xyoNLdqW20HyTnTc8QysD5fyUp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8f:ad:c6:51:81:ef:ef:74:a5:83:ea:a1:98:7a:f8:4b:a6:
63:b4:d0:96:44:b6:81:73:c5:7d:a9:05:c3:d9:13:a7:13:2d:
a6:ff:0b:fd:66:f3:39:74:3d:fe:d3:cc:7d:24:59:d8:a5:ac:
95:64:9e:7d:72:9c:70:4d:50:33:25:43:1a:0d:2c:7b:af:96:
f6:94:0f:ff:78:d4:8f:3a:52:a2:9a:9c:79:96:24:a7:5f:51:
19:f1:7d:29:14:83:c4:28:1e:cd:11:72:40:4b:be:7c:94:c1:
ab:38:e8:2f:7e:b9:61:00:be:89:8d:30:65:d1:e7:f2:e0:26:
67:31:c5:88:4e:01:a5:c6:e6:07:e7:c5:22:64:83:ff:4f:4e:
d5:5f:ad:30:6b:f0:d7:53:1a:d5:84:21:65:c8:88:70:97:9e:
8a:cc:6e:cf:1b:36:50:37:56:fd:1c:ed:9e:ad:29:79:9d:be:
7d:25:2b:cb:c9:39:e6:f9:a2:c4:0b:e9:a7:0e:d0:45:eb:e8:
96:5b:2e:91:01:bc:59:c1:e3:44:82:38:2f:88:f8:48:82:6d:
8c:96:ce:14:62:e0:60:99:6e:00:61:c9:e7:c7:95:2e:e0:08:
12:c6:16:4e:86:e6:6a:fa:d0:d0:18:59:a0:ce:f2:41:52:83:
be:34:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org