Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/CsJIup1hpLIzMs-2TtxpRAdRVQE.roa
File: CsJIup1hpLIzMs-2TtxpRAdRVQE.roa (raw, json)
Hash identifier: 9znz+6K92oiy/9bZwl8Mc6BA8FWm/5x7T4i9aP6y2Io=
Subject key identifier: 0A:C2:48:BA:9D:61:A4:B2:33:32:CF:B6:4E:DC:69:44:07:51:55:01
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0184141BB9059F28E56F4F613BABD1625C98
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/CsJIup1hpLIzMs-2TtxpRAdRVQE.roa
Signing time: Wed 26 Oct 2022 11:44:31 +0000
ROA not before: Wed 26 Oct 2022 11:44:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212341
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
185.66.178.0/24 maxlen: 24
2a05:900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:1b:b9:05:9f:28:e5:6f:4f:61:3b:ab:d1:62:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Oct 26 11:44:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ac248ba9d61a4b23332cfb64edc694407515501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:ae:39:63:9a:cc:63:c5:7e:0c:44:0c:b8:
70:b6:45:47:7d:9d:42:ca:16:27:20:5e:d4:9a:29:
47:a4:de:b8:86:a5:a1:a5:b9:ed:25:98:02:a2:ca:
32:59:9c:41:26:91:9d:e4:4f:f0:52:d2:47:88:e1:
db:21:55:7d:15:02:33:3a:f7:e7:a1:43:4e:af:e3:
17:b0:6e:4d:65:6f:1c:26:64:3b:96:95:57:c9:08:
49:f4:18:01:08:5d:d9:2e:75:8e:03:59:ac:5a:d5:
8d:fe:d2:da:25:a7:73:d3:0a:14:63:72:e0:2e:9b:
92:21:d1:16:d9:13:74:29:64:cf:8f:f7:0e:c7:c6:
ea:5d:66:82:19:00:d6:d7:58:99:0e:bf:42:5a:7e:
6f:16:1e:97:82:d0:50:f9:68:c5:c1:5b:da:fa:42:
95:f1:cb:43:a1:e5:02:46:91:89:06:25:fd:09:f8:
be:2d:63:92:70:4c:6a:24:a9:70:e0:0a:da:40:af:
fe:e7:5c:88:63:8f:af:d9:26:ae:03:42:ae:a1:9c:
3e:a6:f5:b5:3c:68:9c:89:16:3c:b6:d4:2e:1f:02:
be:ce:c0:75:e7:e1:e9:d0:60:7d:f3:0b:b1:06:3c:
5e:9a:f4:d4:c5:cd:5a:50:a2:16:ae:65:ca:32:db:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C2:48:BA:9D:61:A4:B2:33:32:CF:B6:4E:DC:69:44:07:51:55:01
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/CsJIup1hpLIzMs-2TtxpRAdRVQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::/29
Signature Algorithm: sha256WithRSAEncryption
af:3b:c8:b4:2f:33:d2:c5:54:79:b1:b6:16:ed:b6:96:1a:bb:
8a:71:6b:59:f8:a9:5f:e1:7c:b9:ed:a8:9d:b9:10:b3:c0:08:
18:79:85:5c:0a:96:06:ed:36:73:f5:ee:9c:71:bd:38:6b:74:
59:6d:d3:b4:5d:d2:8f:0e:f8:79:e7:48:f2:21:9d:0a:1a:90:
f3:19:f4:62:a6:4d:41:98:75:0a:f8:a5:86:c8:e4:3d:db:71:
04:b9:53:f2:1f:6d:4c:c3:e8:02:f5:cc:6a:ae:bb:0e:1b:bf:
5b:44:a5:b1:87:94:c6:2c:a8:1e:1f:b3:6a:f4:1e:8f:64:2c:
b4:3e:c0:00:85:21:07:fe:6c:1d:c9:1a:42:8f:bd:64:a5:b2:
03:63:f6:d8:d3:b5:fb:5f:af:49:51:2a:34:b7:67:96:8b:e6:
8d:50:71:4e:37:70:ed:74:cf:41:72:5c:73:68:ba:79:81:dd:
93:9a:4a:8e:cc:be:d9:65:e0:8c:a1:ec:c6:3c:3a:eb:81:7a:
28:17:0e:ba:be:d3:c7:f2:db:14:6a:10:d8:13:27:f3:d3:41:
c5:ec:91:85:95:00:3e:17:f3:77:f9:97:5c:8d:ff:5c:40:b4:
f4:73:0a:e0:da:33:aa:8a:6e:44:1f:00:e9:8c:b0:5a:16:10:
b9:60:64:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:08 2023 by rpki-client on console-fra.rpki-client.org