Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/RHzkczdrsKrtqcVpz2Lx9u5asY0.roa
File: RHzkczdrsKrtqcVpz2Lx9u5asY0.roa (raw, json)
Hash identifier: E7jMk+31D6jLaJEp1jEwT90j2VqhGhjwD+Ki5HG4vgQ=
Subject key identifier: 44:7C:E4:73:37:6B:B0:AA:ED:A9:C5:69:CF:62:F1:F6:EE:5A:B1:8D
Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Certificate serial: 031E1521
Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/RHzkczdrsKrtqcVpz2Lx9u5asY0.roa
Signing time: Sat 01 Jan 2022 15:57:58 +0000
ROA not before: Sat 01 Jan 2022 15:57:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44945
IP address blocks: 78.108.16.0/20 maxlen: 20
185.43.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52303137 (0x31e1521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf
Validity
Not Before: Jan 1 15:57:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=447ce473376bb0aaeda9c569cf62f1f6ee5ab18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:f2:9e:05:a2:1c:c3:22:36:91:f5:d5:22:
57:e6:53:82:cc:85:c1:48:63:1d:19:f3:6b:aa:85:
0e:5e:1f:a4:fa:f8:92:1c:be:53:42:f2:47:5e:7f:
78:b9:59:9a:74:1f:cd:36:2b:13:ef:9b:ee:5d:bd:
d2:6e:57:58:b8:83:02:ca:30:f6:dc:cb:7f:25:ae:
d9:b0:44:3b:e1:87:a6:b0:ed:99:79:87:e7:54:87:
a5:3f:48:25:d5:a0:48:4a:4b:83:7f:60:12:59:20:
0c:52:a9:a0:93:0b:15:6d:36:60:34:8e:de:ff:1a:
77:55:85:33:71:76:fd:49:3d:c2:68:ed:37:18:3a:
e3:4b:82:9c:ef:fa:4d:64:a1:82:5e:d1:e4:43:c0:
52:bd:66:ac:db:99:34:46:9f:cf:e2:03:4d:f2:16:
8f:08:47:49:76:4b:3a:d7:2a:2d:af:4a:ae:f5:a1:
3a:40:30:de:32:50:9c:05:a1:6e:11:1a:a0:de:21:
b7:39:be:04:9b:03:2e:ac:72:91:5c:12:e1:7d:e4:
d6:85:05:9a:94:23:ab:d5:bd:29:2b:82:4f:6d:ca:
f9:03:31:f4:e5:3f:0b:30:6e:2b:16:7c:c9:53:2b:
8e:a2:f8:5c:03:6e:53:4f:4d:fc:fa:d1:f6:7c:e4:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:E4:73:37:6B:B0:AA:ED:A9:C5:69:CF:62:F1:F6:EE:5A:B1:8D
X509v3 Authority Key Identifier:
keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/RHzkczdrsKrtqcVpz2Lx9u5asY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.16.0/20
185.43.172.0/22
Signature Algorithm: sha256WithRSAEncryption
81:af:37:65:c1:e4:bb:d5:09:c5:27:e7:64:4a:db:74:f1:81:
de:fc:bb:9c:48:e5:4e:62:87:3f:0f:cf:86:44:25:e1:0b:31:
3d:5f:ed:c9:7e:fc:ff:7a:a2:86:95:59:88:aa:70:09:bf:64:
dc:49:ad:9c:13:b4:55:71:8b:3e:af:67:7d:c7:09:3f:9f:23:
50:e8:09:e7:6e:4d:9f:f8:98:1a:68:5e:9f:de:58:84:0d:2c:
36:d1:11:ea:e5:dd:b6:9a:32:38:34:2b:a2:57:d3:65:8f:cf:
5b:91:06:5a:50:d2:b7:73:48:e5:25:22:8f:15:68:b3:ea:e5:
d5:f3:8a:30:72:13:60:f9:9d:77:0c:08:a2:9e:e7:93:0a:4b:
cb:3c:fa:0d:0c:45:e5:33:e3:7e:60:ba:ba:3f:49:f8:0a:42:
b3:3d:c4:6e:d4:0d:dc:54:9a:40:24:43:e6:23:e1:1c:c9:31:
30:f3:53:c3:e8:e8:df:a7:1d:65:18:b9:1b:84:f4:00:c3:32:
1c:5e:26:a1:61:d1:9e:82:ce:3e:b9:d7:82:4d:8d:b9:c3:a6:
2c:29:ea:0f:de:8d:22:d4:0f:22:68:88:b9:f2:a8:00:99:92:
e8:31:24:bb:46:ea:8b:6b:11:d9:28:1e:5f:fb:00:5d:42:43:
41:ae:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-ams.rpki-client.org