Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/xunmwwylrk7DH6J8tC-rYEFSp6I.roa
File: xunmwwylrk7DH6J8tC-rYEFSp6I.roa (raw, json)
Hash identifier: eGZxTDevzxNRAT16QU1b7jqt/6oeGROSJwhn28LluO8=
Subject key identifier: C6:E9:E6:C3:0C:A5:AE:4E:C3:1F:A2:7C:B4:2F:AB:60:41:52:A7:A2
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 07414B68
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/xunmwwylrk7DH6J8tC-rYEFSp6I.roa
Signing time: Sat 01 Jan 2022 03:57:57 +0000
ROA not before: Sat 01 Jan 2022 03:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 77.83.153.0/24 maxlen: 24
193.200.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121719656 (0x7414b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 03:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6e9e6c30ca5ae4ec31fa27cb42fab604152a7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:18:79:7d:ff:7e:23:b8:90:24:1b:21:a0:
c5:35:cd:02:8e:b8:b3:bd:bf:62:72:16:8c:c7:7d:
e6:26:a1:ec:bf:1c:40:59:e4:81:76:8c:83:de:77:
1a:48:3b:4d:98:da:7f:16:68:b6:d2:09:fe:35:91:
51:41:17:26:b3:f1:d5:b2:bc:5b:ca:50:28:1a:72:
f6:d8:91:c2:9c:88:b2:7f:bf:9f:ba:5f:41:08:47:
e7:a5:3b:c0:00:54:20:de:71:7f:28:1f:d6:fa:6f:
a4:1e:29:5a:77:19:21:e8:0f:76:ab:9f:3e:58:71:
6c:1c:21:0c:dd:7d:3b:4c:3d:45:b0:84:a1:bd:84:
ad:fd:44:8c:9a:0d:3a:7d:e1:d8:84:e4:06:da:7a:
7b:cc:71:5a:05:ec:e1:75:7d:61:08:28:33:37:30:
4a:0f:34:7b:7b:58:c0:f4:ef:aa:34:62:cc:df:ad:
5f:c7:70:08:8b:8e:20:f8:95:ae:b2:81:d1:c8:34:
39:6e:fd:53:a4:1a:b1:db:90:b5:af:1d:07:3f:69:
3c:b5:8f:41:19:5b:a7:12:7e:5b:a6:ff:c0:ac:e4:
b0:91:03:83:0a:fe:02:e1:dd:7e:aa:58:55:4b:e7:
e5:ec:8d:e2:cb:16:f4:2a:75:96:4d:c2:ac:8f:1c:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:E6:C3:0C:A5:AE:4E:C3:1F:A2:7C:B4:2F:AB:60:41:52:A7:A2
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/xunmwwylrk7DH6J8tC-rYEFSp6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.153.0/24
193.200.12.0/23
Signature Algorithm: sha256WithRSAEncryption
68:42:7f:4c:10:cd:c4:bb:a4:7d:e1:7c:3c:76:e4:d3:1b:d7:
60:28:7e:39:54:bd:c2:f5:61:07:ed:41:33:af:49:80:ad:22:
4d:3d:92:24:d1:d5:c6:0c:bf:dd:62:02:b7:d3:69:ee:aa:58:
dc:46:44:0c:d5:2b:6e:eb:6f:3c:aa:e6:c5:89:d9:01:3c:4e:
c0:86:26:fb:6e:02:c9:4b:e0:a2:55:a6:b3:50:04:6f:02:ba:
c4:f5:5f:0f:1a:ea:3c:38:86:78:41:9b:cc:60:7f:10:87:2d:
c4:fe:e3:a6:7f:93:d0:ba:a7:7c:fc:d7:d4:75:58:d6:7c:9f:
8f:4a:b4:01:53:14:97:11:2b:0d:a5:ee:5f:cd:a2:cc:2b:75:
e0:49:c1:d4:be:d8:26:69:64:29:45:fb:e3:fd:9d:53:3f:b4:
09:32:c1:5a:42:4f:15:0d:40:dc:ce:d4:3c:61:9a:f5:d4:f7:
ad:4c:35:a5:ac:65:23:bf:6e:d4:84:21:92:0d:8c:a9:02:c3:
fe:44:1d:14:45:ca:c8:fe:31:88:8c:05:15:ba:a2:70:ce:b5:
62:12:71:9d:af:d1:f1:6e:3c:03:28:58:57:2e:cb:8a:16:e9:
5b:6b:ae:22:d1:18:16:a2:72:99:7b:a8:f8:d3:93:0e:7c:e5:
dc:1f:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org