Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/fzQITjJupkiZnu4Hq_b93Zdm4dU.roa
File: fzQITjJupkiZnu4Hq_b93Zdm4dU.roa (raw, json)
Hash identifier: JiviS/Qm/PmN8M7fZcC77FTkWnTLDnXE8AJqkQO9TZs=
Subject key identifier: 7F:34:08:4E:32:6E:A6:48:99:9E:EE:07:AB:F6:FD:DD:97:66:E1:D5
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0D6762FE
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/fzQITjJupkiZnu4Hq_b93Zdm4dU.roa
Signing time: Sat 01 Jan 2022 13:04:20 +0000
ROA not before: Sat 01 Jan 2022 13:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60484
IP address blocks: 79.173.66.0/23 maxlen: 24
79.173.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224879358 (0xd6762fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jan 1 13:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f34084e326ea648999eee07abf6fddd9766e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:25:16:1a:1a:12:fa:cc:a3:6a:68:b5:83:
c6:09:2c:96:ff:80:f0:0d:f2:c9:4a:54:d1:03:cf:
dc:ee:cc:7b:d3:d4:0f:f7:ee:58:34:98:25:55:08:
3d:ad:b3:5e:89:68:b4:07:4b:72:44:c8:7c:d0:c6:
c6:6e:cc:f0:8c:49:e0:12:25:bc:55:d9:44:8f:8a:
64:7e:3a:e4:d1:03:15:74:da:de:5b:6a:33:a2:a3:
ab:22:d8:5e:5f:0e:2d:ca:ff:71:e0:f4:32:3d:aa:
97:3f:d3:dd:8d:8d:47:2a:3c:a6:ec:fc:f1:2f:fd:
a8:52:fe:94:18:90:8a:01:54:7a:fe:e9:5d:e2:bb:
04:a5:dd:38:72:4f:bf:78:91:22:af:c7:d7:82:43:
56:5e:84:d1:38:e7:8f:6a:ef:72:5e:bb:be:02:ac:
4f:d7:f1:fa:12:6f:71:89:6e:75:f9:8f:30:51:59:
a6:e2:7c:e7:d5:5a:ca:68:ab:68:0f:4b:49:b1:98:
95:d7:34:89:8c:dc:09:83:d4:e5:56:32:8e:80:33:
34:2a:04:5e:8f:ac:04:fb:b1:b3:cd:3f:0a:d9:cf:
ef:03:58:97:e9:4d:ae:5a:40:06:a6:6e:03:91:ab:
96:cf:35:35:c2:6f:22:74:05:6a:ed:0a:cf:c9:9f:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:08:4E:32:6E:A6:48:99:9E:EE:07:AB:F6:FD:DD:97:66:E1:D5
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/fzQITjJupkiZnu4Hq_b93Zdm4dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.66.0/23
79.173.77.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:78:85:02:ba:b0:02:c7:66:41:b6:c5:f6:b9:67:d7:be:
9f:60:07:0a:d5:9b:25:97:7d:ab:f1:57:42:20:3a:5f:ac:a5:
a1:0f:93:25:fa:36:3c:c3:14:e7:5d:ca:cb:35:dd:d6:f4:ed:
df:5a:3f:57:73:e5:ef:dc:8f:8b:9d:50:6e:44:23:27:6e:23:
e3:46:b7:50:c1:a9:3b:6b:b2:c3:7c:f5:4f:a5:3b:28:3e:06:
0b:22:2c:34:9b:4a:9e:4e:34:31:65:07:4f:2d:42:97:a3:a6:
e9:d1:22:31:e0:7b:78:ed:f3:0d:2e:7c:bc:51:8d:b0:c8:69:
d6:ea:05:2c:a8:2c:80:5c:08:15:09:78:8f:39:56:1a:15:b6:
ad:3f:9c:fe:95:1d:cf:5b:e2:b2:1d:42:23:4d:70:79:ee:04:
ed:6a:69:0e:b3:0b:36:11:6c:7b:57:d2:96:4f:29:51:a9:14:
a8:23:65:8b:81:09:ba:86:f1:ac:2a:06:11:28:02:ce:69:8b:
6e:cc:15:6d:97:f0:10:0e:a4:3b:a1:93:4a:1f:3c:5b:c6:cb:
b3:a5:3a:d3:bb:18:8c:d8:62:9d:67:2e:0b:6c:94:a8:e6:69:
1c:9c:79:91:39:bd:50:cf:56:7d:9d:e6:48:e1:4e:df:64:01:
a6:59:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:34 2023 by rpki-client on console-ams.rpki-client.org