Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/c4YB2ABnszUtbkNXJgVCpGnDSik.roa
File: c4YB2ABnszUtbkNXJgVCpGnDSik.roa (raw, json)
Hash identifier: dLTSTZH+Vpy5N/awAEEdOcIqAKSpt/BJpliLBH6pB9w=
Subject key identifier: 73:86:01:D8:00:67:B3:35:2D:6E:43:57:26:05:42:A4:69:C3:4A:29
Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial: 027F030B
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/c4YB2ABnszUtbkNXJgVCpGnDSik.roa
Signing time: Sat 01 Jan 2022 11:57:52 +0000
ROA not before: Sat 01 Jan 2022 11:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15955
IP address blocks: 212.77.32.0/19 maxlen: 19
185.101.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41878283 (0x27f030b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Validity
Not Before: Jan 1 11:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738601d80067b3352d6e4357260542a469c34a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:2e:ab:bc:d3:ec:be:2a:6f:65:97:b4:44:
52:a7:bb:6c:68:7a:41:24:79:fd:76:a3:d4:21:80:
ff:63:cf:d2:f7:ea:ca:78:97:4e:93:e3:61:61:06:
6d:a7:05:b8:b9:72:7b:0f:45:45:40:cc:00:9e:53:
07:e9:f5:87:be:86:5f:0b:de:a8:84:e9:e8:af:7f:
56:2d:57:b5:08:75:4b:40:9b:23:2c:56:70:89:d8:
7a:85:7b:5e:85:1c:e8:62:e9:35:ed:35:ac:e0:b6:
56:67:85:b3:6b:73:e1:86:5d:b3:1b:1b:2a:a7:ba:
08:37:fe:82:6f:9e:03:ab:be:5c:17:a9:13:03:bd:
65:aa:00:cc:8f:b1:01:ae:84:e9:4d:04:a4:b5:9a:
7f:5e:bf:d4:ad:93:0f:8f:e2:16:c5:8d:b5:28:c6:
1b:b1:e1:23:40:bf:8d:11:e9:97:ba:34:33:8f:54:
21:47:85:90:73:40:7c:2e:36:93:6a:27:04:0a:93:
ea:ed:ae:a4:f8:4e:92:85:ec:19:49:1c:8d:7f:8b:
fa:4e:12:cc:0a:aa:01:81:cb:76:15:7b:87:46:d8:
c7:81:3a:2d:4a:21:a8:9f:b6:bc:e1:69:1a:5c:cd:
63:10:e8:5b:60:ba:0b:55:af:f1:30:40:a3:46:dd:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:86:01:D8:00:67:B3:35:2D:6E:43:57:26:05:42:A4:69:C3:4A:29
X509v3 Authority Key Identifier:
keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/c4YB2ABnszUtbkNXJgVCpGnDSik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.48.0/22
212.77.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:13:bd:46:ca:a5:a1:71:21:5c:9d:44:ac:c1:fc:ee:c1:e0:
cd:6a:28:4d:cc:01:c6:b6:be:7e:7e:07:97:fc:dd:24:8c:6e:
18:5c:ef:2d:ce:35:93:d7:a0:d0:e9:7f:00:6e:3c:f1:e8:e9:
e1:f7:14:ca:86:e6:c2:62:88:b4:9e:89:77:b4:e1:3e:4a:ae:
26:dc:f5:8d:d8:c3:d5:26:08:59:5e:0d:d8:0f:7b:67:54:49:
ba:f9:bf:56:79:b5:aa:73:18:eb:25:5d:f5:63:11:b7:14:4c:
58:28:21:76:87:51:65:1e:be:2b:86:6d:65:a5:25:7d:8e:0c:
de:ae:b0:ce:9e:e4:b1:9b:c9:28:f0:bc:7e:f0:e0:c9:50:6d:
89:ab:10:e8:de:90:28:cd:01:f2:d2:bc:e2:ec:82:48:c0:db:
69:7a:1d:86:c7:f5:d5:26:85:0e:9b:6c:bb:24:33:20:26:65:
5b:bf:2d:36:02:1a:02:be:16:02:d0:93:97:99:a6:b6:a6:a3:
ea:08:63:da:f5:26:34:e3:4e:33:2c:02:80:e4:6b:1d:73:04:
60:6a:be:7c:5a:3a:20:50:0d:89:3f:ed:15:85:ba:df:62:ca:
59:dd:61:c6:86:75:12:23:6b:ab:3d:e9:31:8e:87:2f:38:f1:
e1:3f:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:50 2024 by rpki-client on console-ams.rpki-client.org