Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MY01HCIpHu3JdvknppCpcDM0ce8.roa
File: MY01HCIpHu3JdvknppCpcDM0ce8.roa (raw, json)
Hash identifier: pIb7qdmwWVx61Sc3lsrgH+OhAvrU37quLuilex8N0kk=
Subject key identifier: 31:8D:35:1C:22:29:1E:ED:C9:76:F9:27:A6:90:A9:70:33:34:71:EF
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 08A02E54
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MY01HCIpHu3JdvknppCpcDM0ce8.roa
Signing time: Sat 01 Jan 2022 11:04:09 +0000
ROA not before: Sat 01 Jan 2022 11:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 79.98.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144715348 (0x8a02e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 11:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=318d351c22291eedc976f927a690a970333471ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:a6:41:7d:ef:b7:45:e5:5f:ac:b6:c1:b4:
00:2d:2e:d5:7e:35:4e:81:00:db:19:71:e0:b3:e9:
c9:0b:60:2a:fa:f9:bd:f3:6e:ff:c0:e0:41:76:a0:
63:99:08:9e:19:81:97:39:8f:69:2f:1e:33:0e:be:
c9:92:c4:39:c1:98:8b:dd:ad:b1:9b:aa:a4:4e:69:
8c:5f:26:a4:95:f6:7f:de:31:79:09:50:6b:58:3e:
eb:4d:9c:ea:30:66:cd:ef:41:9f:1f:fd:ee:ff:26:
ad:c2:e6:68:c2:c9:a4:05:03:1a:9e:ec:63:35:27:
14:da:52:fe:71:b6:9e:fd:9b:b2:9b:8c:57:d6:21:
05:c4:ce:17:5d:b0:bb:7a:9c:e4:9e:a8:4d:78:50:
6c:86:ab:37:f9:ec:66:cf:f0:6b:97:ee:aa:75:3e:
e5:32:fe:f8:cc:2b:af:74:b6:ae:b5:c4:24:42:f9:
ae:90:d5:b7:32:31:af:6f:98:2c:c1:13:11:2d:92:
5b:ed:41:3d:8f:70:ea:23:9e:b8:03:4b:fb:df:0c:
5f:84:a9:f7:b2:b4:0f:fb:29:7c:c8:30:7a:a3:fe:
87:18:53:7e:05:0f:50:72:9b:d7:10:8c:92:bf:64:
77:65:ff:77:72:a8:6b:c3:8d:c9:0e:d8:82:e4:dc:
99:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:35:1C:22:29:1E:ED:C9:76:F9:27:A6:90:A9:70:33:34:71:EF
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MY01HCIpHu3JdvknppCpcDM0ce8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.180.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cc:76:02:a3:c8:36:22:db:e1:d3:fa:a0:39:5c:2d:f8:7f:
22:a9:47:68:03:25:9b:09:b2:92:98:15:17:5c:e1:99:24:5b:
d1:6a:06:1a:f2:89:01:d0:a9:c7:e3:1b:17:9d:66:46:be:3f:
29:23:d8:44:7e:8b:e0:b9:f2:01:f2:00:03:35:f5:20:57:a1:
78:fc:dc:29:33:93:8f:fd:8f:72:1a:c1:d8:10:b9:af:12:1d:
d0:c0:69:69:6a:e8:cf:a8:e2:06:6c:69:ee:ad:76:70:cf:72:
c3:88:25:41:70:5d:06:08:5a:d1:e2:d6:3e:82:c0:d1:29:f9:
15:7c:48:2a:05:c9:2f:24:70:00:c6:4a:a5:c6:8d:8f:c8:0a:
f2:d1:f3:11:50:72:f5:9b:e5:b8:41:8b:cb:94:a1:fa:1b:71:
da:42:b2:4d:57:5d:d4:24:9f:b0:65:9c:bc:d1:94:31:61:08:
16:da:80:0c:31:65:55:d3:02:92:b9:e2:06:04:7f:8c:af:4f:
cf:ef:4c:9c:6e:ef:d7:bb:b0:f6:a2:36:87:1a:b9:bd:fb:2b:
69:12:35:06:18:7f:b2:08:7a:e7:8e:c8:27:d5:d6:eb:5e:4c:
b9:00:c7:53:7a:00:e6:c4:43:bb:ce:69:91:cd:7c:09:f7:e4:
b2:cf:cb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:49 2023 by rpki-client on console-ams.rpki-client.org