Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/m1om6a84FqMY2uQcpuIYJcgiVj0.roa
File: m1om6a84FqMY2uQcpuIYJcgiVj0.roa (raw, json)
Hash identifier: e457akhpTB+FBaP+dMbuvfgGiKbveBsGiAXLTz6hxys=
Subject key identifier: 9B:5A:26:E9:AF:38:16:A3:18:DA:E4:1C:A6:E2:18:25:C8:22:56:3D
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 05D7C4E9
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/m1om6a84FqMY2uQcpuIYJcgiVj0.roa
Signing time: Tue 05 Apr 2022 13:23:53 +0000
ROA not before: Tue 05 Apr 2022 13:23:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 77.73.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98026729 (0x5d7c4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Apr 5 13:23:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b5a26e9af3816a318dae41ca6e21825c822563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:64:d1:c5:d8:c3:a4:6f:c0:5e:90:51:78:
47:37:1a:51:ba:77:d2:dd:01:67:4f:04:ed:e8:6f:
36:12:e4:44:97:c7:a3:f0:4b:8e:e4:cb:52:df:0e:
14:36:73:c7:7e:9c:ef:d7:3b:42:66:8e:db:04:e1:
09:78:e2:56:00:a3:e2:26:79:8c:13:00:0e:ac:d7:
68:7c:5d:8b:73:06:ea:dc:89:63:b1:6c:d1:7d:b6:
19:5f:5f:22:89:45:3f:b6:91:4d:d7:ac:55:0a:3a:
4d:a1:7e:23:d9:ae:95:32:14:6d:bc:21:e5:52:2d:
b0:2c:82:2c:75:ed:12:96:67:43:95:5f:e3:65:13:
37:38:6d:59:29:fe:bb:0a:e5:24:c0:5d:ca:eb:98:
6d:ce:40:80:64:65:41:bb:da:ec:a9:64:5b:40:c4:
eb:dc:d1:64:f8:27:ed:9f:19:7b:b3:5a:c3:be:5b:
c1:44:e4:d7:da:64:71:e5:e0:0e:18:57:e0:56:6d:
ea:53:cc:ea:50:c2:04:36:a9:b0:a5:27:e5:c9:d8:
ca:4c:18:55:7c:9c:76:ec:62:1a:40:6d:d3:f9:3e:
9b:4c:c5:35:ac:2a:90:42:1f:d4:74:d1:c4:19:b1:
b7:c5:f4:6d:fe:16:7d:3d:84:a8:6d:f5:d7:b9:14:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5A:26:E9:AF:38:16:A3:18:DA:E4:1C:A6:E2:18:25:C8:22:56:3D
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/m1om6a84FqMY2uQcpuIYJcgiVj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a2:9c:ec:67:eb:2b:a7:e7:a1:ef:47:91:3a:10:c6:b9:01:
69:f3:93:16:5f:35:0d:9e:30:8b:0a:b4:62:c9:82:e1:4f:26:
80:10:b7:bc:96:05:d2:64:11:78:1b:63:16:65:c3:33:d2:73:
5c:e5:c6:1f:f0:41:ff:44:e9:0e:98:96:2a:bf:71:a1:6e:04:
a0:6d:06:d2:26:8e:23:36:1b:d9:21:16:18:0f:8c:b3:39:0a:
01:9c:46:4c:0d:d9:e4:6f:f7:47:35:aa:de:3d:32:d0:78:98:
76:0d:12:99:85:5d:8d:4d:2f:87:a0:00:6c:62:7c:f0:b9:74:
c1:c7:92:48:4f:49:aa:6d:98:4d:d2:49:ea:99:44:30:ee:06:
24:33:bd:8a:fb:ac:72:4e:6b:4a:2b:54:81:0c:53:35:a6:3a:
b1:e8:de:36:10:aa:30:cb:72:14:bd:db:3e:8d:13:4a:94:f4:
8a:d8:67:da:cc:70:ca:1b:91:cf:61:e1:bd:03:f7:71:65:1b:
55:70:af:3d:c0:78:7b:05:a0:8b:b4:4c:66:dd:ff:44:ac:cc:
ac:90:e1:b5:e3:aa:b2:97:84:3f:51:5c:ab:04:2d:e2:5a:15:
db:fe:fd:ca:33:7f:65:18:9e:78:ed:c5:20:fe:11:8e:bb:2d:
a2:db:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org