Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bYCcIXItujdD51TjT9Z70Cry-u8.roa
File: bYCcIXItujdD51TjT9Z70Cry-u8.roa (raw, json)
Hash identifier: MaXvB7a/kcHeXUQp59QBfqXESkS5O/EBOkwhcgv3IEE=
Subject key identifier: 6D:80:9C:21:72:2D:BA:37:43:E7:54:E3:4F:D6:7B:D0:2A:F2:FA:EF
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38CA5699
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bYCcIXItujdD51TjT9Z70Cry-u8.roa
Signing time: Sat 01 Jan 2022 07:55:10 +0000
ROA not before: Sat 01 Jan 2022 07:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1145
IP address blocks: 145.97.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952784537 (0x38ca5699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d809c21722dba3743e754e34fd67bd02af2faef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:43:79:52:00:dc:3d:f7:da:20:19:e7:8a:
13:0f:dd:08:e8:d5:5f:eb:f6:74:8e:83:6b:c5:a1:
b6:36:f1:5f:67:58:a8:0d:a3:1d:89:b7:5b:19:88:
43:9a:cc:7a:9d:7f:1b:d9:c2:7e:3d:30:f7:5b:c0:
ff:81:8c:04:ec:9b:0d:a5:28:b6:dd:ef:99:40:13:
df:2b:db:fe:86:52:16:cd:e1:98:72:23:b7:e1:1a:
de:9c:0a:4f:36:c4:e2:b7:4e:e7:2b:df:09:46:50:
61:a6:16:8c:cb:9d:50:2d:97:7e:bf:89:85:12:7c:
0b:f9:64:9b:9d:3d:c7:2b:87:ad:a0:ee:95:14:ed:
66:21:cf:62:67:4a:64:11:25:dd:00:bb:fc:9b:ea:
1e:62:39:10:8a:f9:d3:b5:1b:02:f4:08:7a:6f:fa:
36:6e:b9:76:39:84:f9:0e:68:e8:7f:fe:ac:c9:00:
b5:bd:e8:99:78:f2:31:ff:d3:af:52:59:55:dc:11:
e4:27:64:8e:f4:73:e9:fa:55:10:f7:d8:6d:b1:72:
ea:a8:6e:27:df:0e:5c:60:09:f3:94:28:2d:64:d7:
e7:f1:2a:47:fa:52:6b:c6:98:71:29:81:d8:cb:94:
61:e3:41:3c:a1:ed:15:48:45:f0:bc:85:bf:6f:fe:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:80:9C:21:72:2D:BA:37:43:E7:54:E3:4F:D6:7B:D0:2A:F2:FA:EF
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/bYCcIXItujdD51TjT9Z70Cry-u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.97.32.0/20
Signature Algorithm: sha256WithRSAEncryption
27:38:63:a4:34:4c:c3:13:76:29:0d:a9:f3:fe:70:54:db:65:
3f:2f:a3:84:01:53:26:ae:05:7e:40:c6:e0:5e:c9:5e:2b:58:
98:7a:c9:85:ba:f7:0b:bd:33:80:da:39:31:46:89:e7:e6:5e:
32:ca:26:95:6c:80:72:8d:87:c9:a1:6e:8a:29:bb:0a:03:67:
52:52:5f:d8:83:c6:36:75:dd:65:04:84:15:09:c6:1e:74:6f:
5f:0f:b9:5f:e6:8a:7a:11:87:53:d9:23:82:76:5b:f7:70:bc:
1a:ee:54:bb:45:64:b4:5b:f3:ca:60:9c:4f:97:18:e3:55:f8:
fc:e0:77:b9:84:69:e5:94:b4:40:c6:a6:13:e0:e2:c7:38:4e:
5b:46:2f:bb:a4:bf:60:08:35:cc:b9:e8:a9:b6:94:c6:f8:a3:
6a:9e:8e:97:76:7a:50:cc:89:ee:2d:80:ff:fa:78:f5:8c:a3:
b8:80:1d:59:53:dd:8e:38:b0:7e:e0:9b:4a:1c:19:96:30:82:
80:49:31:09:c9:d2:8d:cf:5e:4c:59:84:3f:f4:4b:67:0f:99:
a7:a4:90:4f:05:af:f0:9c:a4:08:ac:5e:23:f5:d3:75:e4:63:
f8:7c:b8:dd:0f:83:7e:dc:9f:62:cb:07:f7:0b:bc:00:8d:07:
1c:a6:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org