Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/ogUuQUGkfJQ11DiKmrNaTsbAcuw.roa
File: ogUuQUGkfJQ11DiKmrNaTsbAcuw.roa (raw, json)
Hash identifier: OorK8cEZg0+KlovLdf29zfCgN3AwA3LOB68SRYeSxC4=
Subject key identifier: A2:05:2E:41:41:A4:7C:94:35:D4:38:8A:9A:B3:5A:4E:C6:C0:72:EC
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 380407FD
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/ogUuQUGkfJQ11DiKmrNaTsbAcuw.roa
Signing time: Sat 01 Jan 2022 00:53:03 +0000
ROA not before: Sat 01 Jan 2022 00:53:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12902
IP address blocks: 217.77.128.0/19 maxlen: 19
217.77.144.0/24 maxlen: 24
79.98.168.0/21 maxlen: 21
2001:9c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939788285 (0x380407fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 1 00:53:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2052e4141a47c9435d4388a9ab35a4ec6c072ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:16:f0:5d:5e:1b:3c:05:b2:27:94:c4:07:
30:e4:15:e6:66:b4:7b:12:24:96:94:fd:72:24:24:
40:b4:36:60:e4:f5:bb:a7:19:72:d3:85:04:e8:56:
11:90:96:bc:aa:fe:d0:3f:f3:f4:ed:b6:b9:a4:03:
99:e3:fb:f8:f9:50:1d:91:ae:9e:ae:7e:6b:09:01:
82:c9:d0:07:a1:8e:7a:ee:8f:32:ff:bd:e0:45:af:
3f:84:ff:f2:cd:e4:29:c8:e5:1a:3f:82:a7:63:a6:
23:9b:95:53:a9:36:c6:e5:10:bb:85:6a:8f:77:76:
fb:87:cc:35:51:0b:37:f8:19:39:b6:6c:ca:de:df:
f5:e1:98:75:dc:13:80:ba:44:bb:4c:36:ef:3b:91:
d9:b3:d6:dc:e0:fa:98:b2:c4:de:b7:dd:fe:6a:7b:
ec:e0:20:08:78:00:fa:5c:1d:fa:f9:3b:29:66:b1:
cc:0b:55:c3:9d:b3:b5:18:d7:bc:fd:9c:89:29:ac:
78:82:30:83:0c:64:0c:0f:72:02:9c:45:02:96:fe:
3b:7b:fc:9a:e5:80:3b:90:5d:4d:6f:85:c1:e8:5f:
6f:14:66:d1:c4:21:7f:2f:9d:2c:68:e2:5d:9d:a0:
49:1e:51:88:53:bc:67:03:94:11:92:2b:f9:d8:8a:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:05:2E:41:41:A4:7C:94:35:D4:38:8A:9A:B3:5A:4E:C6:C0:72:EC
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/ogUuQUGkfJQ11DiKmrNaTsbAcuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
217.77.128.0/19
IPv6:
2001:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
23:c1:d1:14:6c:d4:8f:05:8f:34:3f:4e:21:46:f6:72:dd:21:
c8:31:40:47:1d:17:ee:35:2a:4e:0f:2a:11:8c:55:34:ab:3a:
e7:68:e5:48:65:86:40:4c:4e:d1:6e:ec:a2:00:4d:6d:9b:c9:
42:02:1a:aa:22:93:76:b2:14:e6:d2:44:8f:99:9b:00:6d:22:
1d:2e:4e:a7:40:5b:d0:ab:1d:71:e7:ab:52:25:85:cb:85:78:
94:29:32:c7:6b:04:f2:5b:dd:e3:7a:38:27:e4:c1:fc:26:12:
c5:db:9c:86:f1:2e:6c:dd:87:78:bb:fa:7f:4b:6b:2b:9f:9a:
b2:58:a9:af:21:58:63:cd:89:8a:ac:4c:35:94:01:6b:eb:aa:
a3:f1:75:f3:8e:33:d9:bc:d4:e0:02:62:e1:14:8e:fc:f0:ac:
82:22:8a:11:22:23:34:12:9d:fe:2a:33:ac:01:7a:72:37:32:
e3:83:42:aa:ce:1f:3f:3d:c7:30:f0:23:e1:da:07:59:62:bb:
26:cc:41:14:7d:04:97:f0:75:3d:85:5a:e2:e4:b8:61:65:bc:
a2:7d:12:b2:a1:45:ac:5c:94:8a:bb:dc:0d:ab:e0:76:16:87:
1a:53:93:e6:e6:3c:65:72:aa:1f:2e:c1:63:f0:e6:b4:0c:9d:
e7:17:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:49 2024 by rpki-client on console-ams.rpki-client.org