Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/VBQN4cHpwcZoM2gT4VxKPXDWzmg.roa
File: VBQN4cHpwcZoM2gT4VxKPXDWzmg.roa (raw, json)
Hash identifier: kyshGPCe9yZQCqfudyKi5xui/M5uf0ogJ/esNjalf98=
Subject key identifier: 54:14:0D:E1:C1:E9:C1:C6:68:33:68:13:E1:5C:4A:3D:70:D6:CE:68
Certificate issuer: /CN=e9ad14362f52569616f0fd5536c5a1a208def29d
Certificate serial: 09E06700
Authority key identifier: E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/VBQN4cHpwcZoM2gT4VxKPXDWzmg.roa
Signing time: Tue 12 Apr 2022 09:04:46 +0000
ROA not before: Tue 12 Apr 2022 09:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 77.83.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165701376 (0x9e06700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ad14362f52569616f0fd5536c5a1a208def29d
Validity
Not Before: Apr 12 09:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54140de1c1e9c1c668336813e15c4a3d70d6ce68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:aa:47:e6:26:f7:da:9b:94:1c:55:41:c6:
e3:5a:4b:2c:2e:86:0f:d1:1a:94:f0:b1:fb:47:aa:
d2:aa:ad:eb:9d:8e:65:55:d1:a1:be:49:0f:25:ac:
c5:38:4e:2e:73:dc:e1:c5:d1:cb:39:5e:cb:41:81:
ed:b6:e6:9f:c1:08:01:eb:bb:d4:15:48:d7:33:33:
10:b5:e5:03:b9:f8:83:7d:5f:c6:4f:6e:04:a2:2c:
63:2d:75:22:23:06:9e:6a:70:9d:a5:c0:7f:82:6c:
0d:a3:cd:42:98:a6:f8:41:87:00:56:f5:f4:35:5f:
b5:ba:1e:d1:19:ef:85:82:83:4f:ff:4e:5d:d6:cf:
c3:1a:a4:2c:8b:91:fe:4e:37:32:b9:49:06:29:21:
63:14:56:ce:c1:fd:f2:89:59:33:f3:91:86:6e:84:
18:5f:71:26:e9:ec:0a:fc:2a:75:57:49:1f:fe:d6:
47:5e:e6:ba:3f:0e:05:38:a9:cf:db:b4:24:8c:50:
6a:cd:ba:d2:25:db:af:77:4c:ee:b9:5f:f7:ca:57:
98:45:d7:fd:02:7a:1c:4a:fd:9d:1c:7d:ed:70:92:
0f:ac:63:2d:4c:c2:11:99:44:56:c1:04:44:66:7e:
92:77:6d:24:1a:d5:45:4d:30:ab:c1:1b:16:3f:6d:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:0D:E1:C1:E9:C1:C6:68:33:68:13:E1:5C:4A:3D:70:D6:CE:68
X509v3 Authority Key Identifier:
keyid:E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/VBQN4cHpwcZoM2gT4VxKPXDWzmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/6a0UNi9SVpYW8P1VNsWhogje8p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.132.0/22
Signature Algorithm: sha256WithRSAEncryption
68:71:fb:90:df:48:85:32:71:0d:07:cb:a1:1f:95:00:ba:73:
d9:34:fe:ee:47:a7:fe:ab:e9:93:dd:60:b5:6b:c5:99:1e:62:
92:e4:af:fe:3c:00:fb:7d:cd:16:86:63:49:f9:0e:9a:41:c0:
24:ae:95:d0:79:07:f3:f9:b3:de:73:d3:88:46:97:d2:cd:fa:
bc:79:46:f3:33:98:25:70:7d:be:56:a8:36:22:7c:6e:43:2d:
0e:8d:ba:f9:c7:19:17:d5:ee:de:eb:40:e7:d1:4a:a0:03:aa:
44:d4:93:09:fc:5c:59:27:ac:24:76:ef:12:f6:9d:ca:6a:d5:
98:43:b6:e8:05:5a:9e:74:e1:48:29:98:87:f3:5d:d3:12:a7:
73:fb:08:c6:8b:e9:04:ee:06:1e:6d:ae:26:72:d1:b8:be:76:
ba:8a:e0:2b:8d:54:3c:35:de:ac:2a:29:43:80:bd:69:37:ef:
10:3f:ba:15:96:10:c3:30:74:e2:00:5d:9d:6c:33:d7:28:32:
fc:93:2c:d6:a1:87:ef:6d:04:6f:34:35:f6:a0:2f:b0:85:18:
9e:ba:b5:47:12:af:b8:25:94:a4:a5:62:23:5d:03:4b:fe:6b:
2c:a9:8e:df:53:c4:d8:b4:db:64:f9:24:ac:85:f3:9d:9c:a3:
8b:79:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:01 2023 by rpki-client on console-ams.rpki-client.org