Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/2sD_8VKkS0LDJgjLRMVv63YAOf4.roa
File: 2sD_8VKkS0LDJgjLRMVv63YAOf4.roa (raw, json)
Hash identifier: wmW0zHUCznMBYzW+xC89AYTyB5C8MvCi289783UKMKQ=
Subject key identifier: DA:C0:FF:F1:52:A4:4B:42:C3:26:08:CB:44:C5:6F:EB:76:00:39:FE
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0448153C
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/2sD_8VKkS0LDJgjLRMVv63YAOf4.roa
Signing time: Sat 01 Jan 2022 09:01:25 +0000
ROA not before: Sat 01 Jan 2022 09:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35720
IP address blocks: 194.79.24.0/22 maxlen: 22
194.79.24.0/23 maxlen: 23
194.79.26.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71832892 (0x448153c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jan 1 09:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dac0fff152a44b42c32608cb44c56feb760039fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4e:f3:84:13:2d:43:d9:c5:b9:b0:9a:68:47:
69:fe:6f:76:d2:3f:58:71:79:29:87:fa:55:d4:a5:
d8:ac:47:33:8a:b0:c3:67:0a:a1:2c:6e:e0:49:ef:
56:d2:50:cc:a7:07:18:8e:50:8f:d1:a6:04:c7:dc:
67:e8:bf:ef:3c:43:6c:a1:48:74:a5:9b:e6:e4:0e:
b4:7f:5c:36:81:39:6f:f6:08:ae:af:45:bd:94:59:
ea:a8:0e:c2:a4:74:b0:c5:79:fa:83:29:f0:87:5a:
dc:a4:d4:83:f8:3a:e0:15:30:ad:97:d7:17:59:7d:
85:9b:cd:d5:c3:57:ba:b7:fd:70:9f:44:1a:00:56:
67:27:7d:1d:62:59:02:64:47:f1:86:e6:b0:67:d1:
ad:43:ae:f6:ad:ed:d8:e9:4d:e7:4c:a2:49:d1:9b:
3a:45:e2:dd:5b:b8:44:46:7f:00:4b:87:1d:c0:bc:
d9:95:ed:eb:c3:9c:35:04:82:78:6b:b5:b4:2e:14:
74:6d:70:2c:cf:67:59:2e:16:6c:eb:02:b5:43:ca:
27:9e:99:89:49:29:6a:58:fc:51:f3:a5:1f:43:a2:
0d:1e:bb:39:07:19:a5:d4:0b:0a:44:d7:2f:2d:0f:
65:89:c3:6a:e5:b3:6b:86:b5:0d:c5:7b:89:e2:e8:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:FF:F1:52:A4:4B:42:C3:26:08:CB:44:C5:6F:EB:76:00:39:FE
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/2sD_8VKkS0LDJgjLRMVv63YAOf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.24.0/22
Signature Algorithm: sha256WithRSAEncryption
37:fd:3e:84:38:e1:31:70:6c:ed:30:a4:0d:80:45:c0:c2:8e:
00:2d:87:07:7e:8f:d9:91:3e:6c:0c:b5:10:6c:52:f9:55:0e:
c9:c3:88:57:1e:5a:36:08:05:7f:b5:f7:3f:7c:d1:3b:06:b0:
fb:d9:9b:ab:b9:57:0e:cc:cc:ba:2b:b1:5b:d9:8b:a5:4c:fa:
e5:c8:3f:11:63:e2:14:b3:89:36:ab:90:21:3f:71:e9:dd:97:
4c:a7:1f:27:e0:8a:32:3a:ac:53:5a:91:5c:d9:cf:10:bd:7b:
58:0f:66:21:21:37:be:2d:8e:ac:27:d2:3a:0a:c9:b5:c1:7e:
a4:0a:09:05:7e:2b:dc:a2:9a:6e:1d:37:ba:b8:d8:c3:62:53:
8b:4f:d7:5a:1d:eb:c0:d0:ca:11:64:4e:21:c9:fb:07:62:c9:
f6:bd:a6:af:6e:ed:99:b0:91:2e:cd:ba:e0:26:37:68:31:44:
df:69:a8:1a:0f:3a:68:8b:38:e0:b3:79:d7:05:f1:af:b6:07:
a4:c6:25:48:35:d7:87:64:4d:31:10:5f:51:27:d0:5a:be:d2:
98:fa:95:7e:aa:db:95:58:5d:bf:36:98:9d:ad:c6:43:bd:c9:
a8:16:4b:65:85:83:86:7f:a5:27:ec:08:2c:87:c3:8e:b6:10:
68:d8:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org