Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/j3kT61cgyzBmf2s2ghR2AvqoC8M.roa
File: j3kT61cgyzBmf2s2ghR2AvqoC8M.roa (raw, json)
Hash identifier: s5EsT/Wc/mqWAhpmPy3pIIjc4kZbPfBWPVSUui81W/8=
Subject key identifier: 8F:79:13:EB:57:20:CB:30:66:7F:6B:36:82:14:76:02:FA:A8:0B:C3
Certificate issuer: /CN=150183623fc16dc74cb775462c36d31016a40ac1
Certificate serial: 01300899
Authority key identifier: 15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/j3kT61cgyzBmf2s2ghR2AvqoC8M.roa
Signing time: Wed 09 Mar 2022 08:40:24 +0000
ROA not before: Wed 09 Mar 2022 08:40:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207833
IP address blocks: 158.255.77.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19925145 (0x1300899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=150183623fc16dc74cb775462c36d31016a40ac1
Validity
Not Before: Mar 9 08:40:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7913eb5720cb30667f6b3682147602faa80bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:31:fc:39:d0:4b:33:00:d9:8f:31:93:06:
72:f2:0a:5f:22:5f:84:0a:61:07:cd:f8:b2:9e:8d:
b3:12:11:5f:fa:f3:19:2e:5b:8d:8f:67:66:a0:c3:
ea:b7:1f:4c:2d:c7:5d:02:3a:db:18:02:c1:89:54:
6f:07:93:e6:19:42:6c:c2:35:76:19:8f:5b:59:28:
2f:d3:69:31:2f:10:d9:ca:63:d2:69:cd:f0:2a:f8:
33:b2:4e:86:54:c3:7d:9d:ae:24:da:8f:53:28:03:
52:2d:91:30:72:2a:42:6b:b8:c7:df:e4:c6:be:3a:
bc:8c:3c:90:21:e1:cf:6a:16:a6:4f:b6:04:57:51:
8a:89:28:8a:c2:8b:ca:a6:fc:c9:6d:39:cc:57:e6:
a6:e4:f4:8a:61:70:aa:2d:f9:3b:41:50:63:d0:86:
32:33:b0:c7:b1:83:3e:9f:56:0e:0f:97:9d:d6:e0:
03:89:b2:b3:99:99:4a:5e:1b:3a:82:ac:6d:1f:bc:
90:ee:35:c9:fd:75:ad:61:bf:3b:78:23:ac:30:26:
f9:bf:4b:9c:7d:00:ce:44:33:a0:58:6f:18:85:d4:
4f:bc:02:70:b9:d5:94:95:07:ae:9a:30:2f:a8:9c:
98:9a:b1:30:f1:2b:d9:57:1f:e2:c2:cd:61:64:70:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:79:13:EB:57:20:CB:30:66:7F:6B:36:82:14:76:02:FA:A8:0B:C3
X509v3 Authority Key Identifier:
keyid:15:01:83:62:3F:C1:6D:C7:4C:B7:75:46:2C:36:D3:10:16:A4:0A:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQGDYj_BbcdMt3VGLDbTEBakCsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/j3kT61cgyzBmf2s2ghR2AvqoC8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f3fb24-9a20-449e-af62-28f52052c1dd/1/FQGDYj_BbcdMt3VGLDbTEBakCsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.77.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5d:d6:1d:7f:49:30:c3:1b:73:06:30:08:30:8c:2f:0b:9a:
5f:b9:d6:35:8d:34:10:88:b9:f0:50:a5:a5:a5:1c:1d:bb:29:
38:c7:81:0d:8d:2c:93:b6:dc:1f:54:ec:3d:b4:00:f5:23:43:
8f:dc:99:65:fa:89:95:b2:89:ba:b8:af:fd:36:f8:da:52:0b:
6c:3b:d8:3b:08:7b:ac:81:72:c1:3f:60:33:ff:b5:1a:05:a4:
1e:0c:1c:42:3e:3a:80:bb:76:93:cc:df:5b:77:40:a1:34:60:
bb:a3:dd:a0:f0:d9:70:d2:bf:61:28:92:10:3b:a9:67:51:47:
0e:8e:d0:64:bd:e0:f0:4e:6a:85:e6:c3:0d:4b:a6:d8:b5:d0:
74:75:a2:48:af:ef:38:8e:9f:af:91:a5:db:9c:7d:7f:07:cf:
96:86:a4:27:30:c1:7e:ad:ba:19:a8:75:1f:f3:06:8d:81:0c:
1b:d9:4b:c5:92:1a:b2:a1:a2:d5:29:b5:0a:e6:f8:b0:2b:6b:
d3:6a:5d:e1:42:a5:b2:89:3b:17:d1:50:a8:a0:0b:39:b9:28:
14:a8:30:33:3f:4c:a7:21:e3:2b:ff:0a:66:9d:4e:ad:cf:96:
c7:52:5f:a6:30:e4:3e:f1:08:ba:3a:91:45:fb:0c:5f:11:19:
54:7d:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org