Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/f4kcRay71XK07y3E9JT_9Uy7wik.roa
File: f4kcRay71XK07y3E9JT_9Uy7wik.roa (raw, json)
Hash identifier: Efp6rTRWxKE1IRSPipSs7Rd66h7aOJ6K+UKpy35ynuA=
Subject key identifier: 7F:89:1C:45:AC:BB:D5:72:B4:EF:2D:C4:F4:94:FF:F5:4C:BB:C2:29
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 05A887D1
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/f4kcRay71XK07y3E9JT_9Uy7wik.roa
Signing time: Fri 18 Mar 2022 07:01:07 +0000
ROA not before: Fri 18 Mar 2022 07:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208754
IP address blocks: 77.73.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94930897 (0x5a887d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Mar 18 07:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f891c45acbbd572b4ef2dc4f494fff54cbbc229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9e:d7:2a:b0:5d:2a:97:a6:c1:92:14:a7:ad:
76:9f:37:2c:75:30:c7:60:50:5e:15:ca:c5:42:be:
87:e3:23:19:c3:b6:5d:ee:cc:88:6a:ad:51:f2:b7:
5f:f4:ad:49:4b:34:65:2c:e0:80:27:c3:b2:86:a8:
90:d5:ee:fd:8a:ba:6f:2f:9d:ca:8b:3c:42:d5:56:
8c:e3:ad:ef:e6:f3:8b:f1:40:d6:e4:70:f0:1b:14:
4c:16:32:28:cf:31:8c:78:d2:94:f7:c9:1e:fb:9e:
fd:f8:96:56:ea:06:8d:96:e0:dd:66:33:80:13:55:
52:75:dd:24:6e:b2:e6:a2:5f:b6:94:2c:db:d8:15:
6a:ab:9d:34:c5:b6:5c:a5:7b:85:ac:2d:d5:cf:c2:
ed:1e:21:97:a1:9b:d7:63:7c:ac:ac:ff:ea:df:24:
aa:49:52:61:f7:89:26:0a:d6:85:65:38:7f:80:c4:
d6:c1:b1:2a:20:b5:f1:93:46:1a:b5:1a:ae:77:5e:
d5:f5:96:3e:b2:32:3d:7e:ed:b9:68:54:ef:02:fd:
9b:47:c4:6d:4f:57:3d:d9:b8:35:6d:5a:79:03:0b:
02:54:19:e2:e1:a6:0a:9d:9f:5b:a2:d8:5d:e6:6d:
6a:26:28:5f:ed:fe:72:f3:e3:a2:e0:fa:c7:dc:00:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:1C:45:AC:BB:D5:72:B4:EF:2D:C4:F4:94:FF:F5:4C:BB:C2:29
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/f4kcRay71XK07y3E9JT_9Uy7wik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8f:a8:4d:b5:09:18:86:af:d1:14:e3:be:40:30:56:6e:1d:
c9:c0:40:57:f6:bf:17:f3:31:3a:00:0e:8f:75:71:e5:a4:fd:
3c:1b:26:cc:f0:3c:b1:68:c9:07:02:7d:a7:29:96:c5:e5:91:
13:32:5a:83:7a:1e:c5:83:53:37:e8:36:aa:50:6f:78:a7:25:
a9:d8:ba:0c:55:5e:4e:ee:d7:fe:6b:b7:4e:b1:cb:96:3e:79:
4c:c0:b1:ab:82:bc:be:15:77:37:c4:49:bf:0a:76:cc:7a:e9:
25:90:f3:e9:26:1e:0a:18:83:c2:66:e6:5a:51:54:ea:cf:82:
d4:5b:79:c4:c3:da:a9:a0:34:3e:93:53:da:bb:ef:53:f1:95:
60:10:8e:77:fe:8c:fb:6b:bf:9a:a8:fc:aa:cc:44:15:e9:e8:
3b:96:29:18:b5:c8:d7:39:05:41:15:aa:b8:84:40:0f:be:02:
c6:d1:2e:82:d3:25:ef:67:43:99:ae:34:01:48:2e:c0:61:47:
b8:3a:f3:b3:ed:c2:12:50:d8:f6:54:39:f1:19:2c:7f:e3:a6:
dc:7f:3a:3c:57:65:0c:80:62:bb:81:bc:08:72:76:4d:7d:0f:
68:ac:cb:24:d8:64:bf:2e:42:da:fa:83:25:a2:0c:e7:32:36:
4d:75:27:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org