Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BKPdzWIpmuJ_W6YsggX5VyVixZs.roa
File: BKPdzWIpmuJ_W6YsggX5VyVixZs.roa (raw, json)
Hash identifier: KMXToghAH8OdQuSErk8mzas5VLfZw19i0Davc0Mkxcw=
Subject key identifier: 04:A3:DD:CD:62:29:9A:E2:7F:5B:A6:2C:82:05:F9:57:25:62:C5:9B
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 01836A3346431229076F334D15D26B20C378
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BKPdzWIpmuJ_W6YsggX5VyVixZs.roa
Signing time: Fri 23 Sep 2022 11:54:48 +0000
ROA not before: Fri 23 Sep 2022 11:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 77.83.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:33:46:43:12:29:07:6f:33:4d:15:d2:6b:20:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Sep 23 11:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04a3ddcd62299ae27f5ba62c8205f9572562c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:2b:d8:70:03:75:4c:f6:b0:d6:de:2f:ec:
97:fb:28:44:85:95:ed:64:ff:51:35:5b:d2:51:b4:
76:8b:92:71:8e:6b:2e:19:fa:91:02:13:7b:5d:f3:
a5:1c:84:6b:4c:a9:96:f3:bf:eb:46:f0:b6:73:4d:
13:05:e1:de:13:be:78:c0:cc:27:18:d4:18:be:82:
41:04:c8:23:63:02:7a:0a:fe:ec:c5:94:6d:b8:4c:
a3:09:d3:2f:e4:7f:6e:34:b7:e7:dd:ce:6a:89:95:
f9:0e:50:72:52:4c:44:67:7b:79:d3:43:63:33:e3:
30:0d:97:36:e7:81:48:44:56:54:fc:f0:48:27:b8:
f8:23:7b:18:82:ef:e4:fb:08:16:a1:76:bf:12:dc:
a3:ef:12:79:6b:86:78:67:67:82:b5:25:cc:ad:b2:
bc:9d:6b:a0:a0:94:80:85:0b:b6:a6:88:15:63:2b:
8a:6a:97:af:d4:b3:93:c5:d2:1f:6c:a2:20:49:3b:
7a:c7:29:c9:ec:6d:c2:e2:ae:ec:8a:bc:42:cf:0f:
7f:c4:7d:0d:42:74:ec:5e:06:7c:71:eb:27:af:a2:
9b:03:e6:bc:4e:0a:2b:7d:53:18:67:65:ae:e0:ae:
8e:90:d9:c2:f1:0b:fb:4c:62:34:cd:f7:b1:04:8e:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:DD:CD:62:29:9A:E2:7F:5B:A6:2C:82:05:F9:57:25:62:C5:9B
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/BKPdzWIpmuJ_W6YsggX5VyVixZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.153.0/24
Signature Algorithm: sha256WithRSAEncryption
34:18:a3:f7:b3:8f:9e:09:32:be:c6:6d:7f:67:b0:28:7f:e5:
20:2f:70:50:13:40:86:d7:ba:ad:19:0a:ca:4f:fb:c0:81:25:
a1:81:2f:7b:d2:4d:7a:9c:e6:28:79:81:10:d0:f4:6b:4d:52:
c3:f6:16:da:11:15:55:18:09:44:6c:e1:15:dc:06:f8:60:b6:
59:1d:61:da:33:51:40:fd:4e:2c:99:d3:d6:c9:ee:a8:4a:8f:
06:9c:e6:53:12:17:ab:12:03:87:e1:ed:b0:4f:69:da:cf:81:
74:c0:29:1e:f5:7d:2a:bf:8f:88:fd:ac:95:8b:31:45:fe:61:
97:7b:3d:12:15:99:aa:15:7e:57:c3:6c:47:95:20:79:0a:92:
10:3c:11:c9:57:40:82:d1:ba:d3:3c:be:e9:54:17:1a:56:5e:
ca:c3:4e:00:d6:87:bd:23:c6:82:35:15:b3:50:08:c2:0d:ef:
aa:4c:6e:1f:bb:77:b8:68:b8:b5:1e:93:66:53:97:d9:49:dc:
9c:dc:69:a8:3a:16:d1:7e:ab:f4:80:06:f6:9b:08:21:67:89:
af:e3:a3:d2:40:0b:e3:89:b1:1b:50:de:a3:eb:9b:3d:f1:fd:
2c:14:d6:04:a5:6f:5a:7e:b9:9e:95:74:19:9b:8a:2c:1f:34:
3b:70:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org