Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i5VhMr9L6_D8O7ygISBHv1uXP0k.roa
File: i5VhMr9L6_D8O7ygISBHv1uXP0k.roa (raw, json)
Hash identifier: +M2SMBkk5o7P2bxhi8/UOKg3RcEc6Lht9UvoUB6/xho=
Subject key identifier: 8B:95:61:32:BF:4B:EB:F0:FC:3B:BC:A0:21:20:47:BF:5B:97:3F:49
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0798E828
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i5VhMr9L6_D8O7ygISBHv1uXP0k.roa
Signing time: Thu 21 Apr 2022 06:32:29 +0000
ROA not before: Thu 21 Apr 2022 06:32:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 185.223.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127461416 (0x798e828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 21 06:32:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b956132bf4bebf0fc3bbca0212047bf5b973f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c1:37:75:5b:0e:b5:48:f4:d6:f0:26:79:ec:
ae:49:7a:5b:b5:7a:3b:79:fa:7d:5d:9c:00:c9:15:
70:99:3c:ef:76:92:fe:7c:79:c3:0c:19:2d:6a:77:
49:e8:32:e8:d7:52:4a:cb:04:80:6b:a6:c6:63:7e:
4f:e9:ca:04:6a:78:95:49:8b:7c:47:1d:8f:c5:df:
23:e3:58:d9:bc:5b:ca:b6:5e:d6:61:81:5d:72:bf:
80:19:13:83:a7:42:d2:ef:c4:14:ac:4a:19:0d:eb:
d5:18:31:9c:f3:c6:67:84:74:7e:62:ce:ae:03:bf:
12:57:4c:de:54:25:d5:d5:00:c5:0c:04:72:fe:ee:
28:20:16:c9:5d:4c:73:a9:0d:b1:26:b3:7a:6e:36:
f3:06:6a:24:33:50:51:81:4c:2c:9f:fd:b0:28:93:
8c:b0:a6:b2:23:e6:10:f8:06:21:1f:44:bf:8f:57:
0b:53:32:be:c8:89:fd:8a:62:d1:3e:83:c4:52:d6:
96:6f:80:f6:93:64:99:e5:25:cb:9b:fb:de:42:f1:
bd:15:86:1f:bc:94:e6:92:d4:51:51:cd:f1:ef:f1:
ce:f1:0e:51:94:31:b6:78:6d:94:93:79:ed:d5:02:
bb:c4:e8:66:72:12:d2:c4:d8:0f:1e:e6:fd:59:04:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:61:32:BF:4B:EB:F0:FC:3B:BC:A0:21:20:47:BF:5B:97:3F:49
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i5VhMr9L6_D8O7ygISBHv1uXP0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
43:bb:ff:ad:3a:6b:a1:2c:8e:5f:8e:43:8f:e4:ab:b5:65:79:
51:0c:4d:37:57:c5:25:11:64:8a:06:31:d8:11:c9:54:54:e0:
cf:80:8a:d4:8f:9d:db:a1:85:ff:14:3e:70:98:aa:92:95:59:
1b:1e:1a:e0:ef:aa:2e:4c:da:74:49:2e:39:76:92:30:e3:ec:
9d:26:77:02:90:eb:16:fd:c2:fd:42:b0:e1:b2:09:30:7a:1c:
2f:b1:2d:ed:d9:8b:c1:ff:5e:4a:79:71:8a:b4:b5:a6:85:d5:
4c:32:e0:28:f8:ed:ad:04:bc:8e:99:e1:25:4c:33:57:01:b9:
43:21:22:8d:9e:34:07:ef:d8:0f:3f:61:b0:6a:00:59:49:be:
99:5c:fd:d4:c6:1b:4d:a3:e5:61:d9:4b:98:d7:27:02:40:0c:
a8:42:08:64:b3:e5:e4:06:a9:f6:33:a1:dc:f1:8e:35:ab:f1:
7a:12:36:41:6e:9a:3f:e5:98:3f:54:97:c9:66:e9:78:41:eb:
fb:66:cc:a7:cd:c9:1b:b0:79:bc:88:6f:b0:87:12:f8:0c:05:
a7:1c:2f:ca:e1:68:87:44:47:32:1b:83:a1:74:87:89:1f:b9:
50:57:45:53:35:c6:70:70:ad:49:c8:f6:ef:da:62:e5:48:63:
76:29:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:07 2023 by rpki-client on console-ams.rpki-client.org