Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cf1AfF77B0sAydqjW-ep73rwZi8.roa
File: cf1AfF77B0sAydqjW-ep73rwZi8.roa (raw, json)
Hash identifier: q7lefjq6wBb/6Ql9SnhJrJkNFOAXyW0UEeQrL+b68nE=
Subject key identifier: 71:FD:40:7C:5E:FB:07:4B:00:C9:DA:A3:5B:E7:A9:EF:7A:F0:66:2F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38CF088B
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cf1AfF77B0sAydqjW-ep73rwZi8.roa
Signing time: Sat 01 Jan 2022 07:55:11 +0000
ROA not before: Sat 01 Jan 2022 07:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1163
IP address blocks: 145.102.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953092235 (0x38cf088b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71fd407c5efb074b00c9daa35be7a9ef7af0662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:28:f7:96:8e:67:05:4c:bd:d0:3e:17:50:
e4:6a:db:8e:f3:f8:37:b5:90:8a:3c:dc:d0:f6:77:
42:58:fd:bf:20:51:40:b8:bc:30:cd:3e:d8:34:81:
df:49:5e:3d:20:b4:99:3c:b2:e8:9b:c0:e4:8c:50:
33:b7:a8:54:2e:05:6b:e8:04:ac:b6:28:0d:43:e6:
74:52:8f:18:76:f0:aa:f6:9e:13:d3:8e:ef:5e:a4:
72:dd:dc:bd:8a:f3:be:9c:2c:52:35:72:72:0c:b8:
9d:81:c8:58:9b:b1:86:fb:79:67:5d:dd:93:ee:d9:
41:98:f2:2a:27:7f:b2:55:2f:75:9d:4b:a5:a2:d3:
09:24:8d:c8:ad:ef:c1:c7:8b:6c:f8:e1:ed:74:f1:
8e:00:7d:f3:7c:81:b7:94:97:ac:4f:be:47:67:2a:
8a:d4:e4:0e:ab:6f:33:0d:9b:03:a6:8f:d0:58:11:
a2:1a:92:00:f7:02:57:db:89:cf:51:bd:5e:bd:40:
28:78:20:fa:28:65:fd:e0:18:c2:ce:90:90:8d:bd:
83:56:29:33:00:5a:ef:43:9f:1c:69:29:ea:1a:77:
3f:d3:c9:82:46:eb:3e:f2:1f:b0:e1:7d:9b:aa:f0:
c8:15:0d:5b:7e:5f:96:68:8d:0c:de:e4:4e:8d:b4:
0c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:40:7C:5E:FB:07:4B:00:C9:DA:A3:5B:E7:A9:EF:7A:F0:66:2F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/cf1AfF77B0sAydqjW-ep73rwZi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f0:d4:d5:68:f6:c3:8c:fa:20:65:fa:36:9f:70:bc:68:73:
bd:8e:82:42:ed:09:5a:25:56:f5:75:ec:f3:60:f6:ef:a7:cf:
19:16:5e:a0:ad:39:09:c7:dc:4b:0e:d6:91:32:96:ca:88:dd:
ea:60:e3:6d:ae:b7:e5:a3:6f:c2:61:d1:dc:16:47:f0:8d:a2:
9b:37:61:71:be:a3:e5:48:57:78:4d:54:e0:80:21:f1:23:b9:
59:58:89:42:78:cd:32:c7:e4:a0:e6:0d:32:f0:2c:91:e4:68:
b5:7c:c7:07:70:bc:d9:a0:cf:2e:b6:4f:e8:46:f7:b8:07:67:
e8:d3:84:4b:dc:7b:85:4d:af:d0:ff:c6:8f:aa:c5:f3:a5:5e:
76:ba:65:f2:46:b7:b8:2e:57:2d:2b:0e:86:ff:a2:4b:8e:d0:
ae:ec:66:fd:5a:b3:e7:51:21:ca:f7:cb:4b:f6:93:85:7b:4a:
f3:40:b2:f6:06:37:75:39:46:af:2c:2c:2a:b2:f2:83:06:45:
94:cf:fc:1a:28:d2:84:a5:b2:84:44:1a:c6:ab:f9:52:48:d3:
fb:4d:08:f1:df:81:a5:62:c5:4b:df:19:85:c6:dc:18:20:10:
b2:c9:7a:37:eb:4c:02:b4:e6:54:60:48:8f:32:3e:dc:88:cc:
c2:2c:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org