Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/jba75X24w9KmHMNQCbvKotlb56M.roa
File: jba75X24w9KmHMNQCbvKotlb56M.roa (raw, json)
Hash identifier: N8MslbRYvIQsSmITWpSKBORjUzsPaY+KJhEF8g4JOO8=
Subject key identifier: 8D:B6:BB:E5:7D:B8:C3:D2:A6:1C:C3:50:09:BB:CA:A2:D9:5B:E7:A3
Certificate issuer: /CN=e9ad14362f52569616f0fd5536c5a1a208def29d
Certificate serial: 01843385FCACB129E7BE52BE45AC9ABD4C2D
Authority key identifier: E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/jba75X24w9KmHMNQCbvKotlb56M.roa
Signing time: Tue 01 Nov 2022 14:08:49 +0000
ROA not before: Tue 01 Nov 2022 14:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 77.83.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:85:fc:ac:b1:29:e7:be:52:be:45:ac:9a:bd:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ad14362f52569616f0fd5536c5a1a208def29d
Validity
Not Before: Nov 1 14:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8db6bbe57db8c3d2a61cc35009bbcaa2d95be7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:25:07:1f:f5:d0:70:64:4e:43:64:29:8c:
62:55:f7:c8:8f:e1:0b:b7:3a:0c:89:e1:78:59:60:
98:d8:68:63:21:30:9b:92:e8:34:2c:61:f4:5e:f6:
4f:98:20:f6:c6:54:e3:3d:0d:e0:c3:39:4b:54:af:
27:35:9f:41:8e:87:e5:ef:eb:7b:df:e4:4e:20:16:
d8:a9:03:0f:06:2b:fc:be:44:b0:fd:8c:2e:9c:6f:
5d:d1:75:8e:30:66:54:8c:c2:85:3c:1a:cb:56:22:
fc:cd:44:0e:eb:18:07:b3:1c:f1:8e:92:28:43:8a:
90:8b:6d:68:42:c3:ac:4a:54:c2:56:89:c3:c0:97:
2b:cd:b3:3f:d1:22:a4:80:b1:64:f7:72:21:55:49:
98:bc:9a:9c:80:fc:b2:04:63:7a:05:06:d6:9a:85:
3b:f8:5f:4a:8b:53:f0:4e:0c:ac:6c:ec:c0:5f:d9:
50:96:c5:b5:89:04:e9:ed:df:f4:ef:27:43:8a:f9:
16:8d:00:0d:24:31:12:73:83:26:ea:1e:81:08:bd:
b3:ba:e4:9c:77:4a:96:33:bd:2b:03:ed:36:05:7e:
ed:d4:8e:73:fe:0e:31:fa:e3:73:eb:3f:74:7d:9d:
7b:96:9a:6a:d9:98:fc:08:0c:27:70:df:b8:0c:8e:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B6:BB:E5:7D:B8:C3:D2:A6:1C:C3:50:09:BB:CA:A2:D9:5B:E7:A3
X509v3 Authority Key Identifier:
keyid:E9:AD:14:36:2F:52:56:96:16:F0:FD:55:36:C5:A1:A2:08:DE:F2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a0UNi9SVpYW8P1VNsWhogje8p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/jba75X24w9KmHMNQCbvKotlb56M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c32a5e-acc1-43fc-a15d-9dcc9f6fe035/1/6a0UNi9SVpYW8P1VNsWhogje8p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c4:05:45:a0:c5:68:e9:1e:0b:d0:1f:22:67:57:16:ea:16:
3c:63:32:7e:53:1e:a9:2c:7c:4f:ec:62:19:9c:6e:18:60:8f:
66:6f:55:3f:0c:f4:db:e6:69:aa:d4:88:e2:9c:49:dc:4d:f8:
09:21:5e:ee:8c:05:0e:00:8e:04:a3:a5:8d:2e:bc:3d:7b:70:
4a:d2:fa:3b:f7:63:35:4f:a4:d2:20:da:8b:7f:58:df:bc:38:
82:88:33:aa:5c:76:dc:a7:3f:13:e3:0a:e5:41:e9:c5:0e:70:
76:4d:39:a7:96:8e:1e:6f:fa:b0:4a:2c:2f:bc:76:88:9e:3b:
a8:b1:39:a4:59:86:9b:7a:f1:aa:92:54:af:8f:1a:28:68:6e:
1d:b7:a7:47:e1:97:74:16:32:f1:7f:c1:6c:3e:ec:23:30:10:
fa:f9:24:13:a7:fe:40:99:d5:66:77:33:0e:1e:25:22:85:48:
25:23:74:69:28:a8:80:f8:71:67:a0:35:3c:00:23:36:7d:d6:
62:2e:f7:d7:1c:83:c0:35:cf:25:d8:fd:43:2d:36:59:23:ae:
25:90:c9:ac:7b:e6:82:d0:e1:59:f6:98:26:30:5d:b4:6e:17:
6d:db:fa:ab:bf:56:26:eb:fa:fa:78:5c:42:6e:ac:99:dc:1c:
47:49:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:24 2023 by rpki-client on console-fra.rpki-client.org