Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rFjeC_1yXURzl7L8O_sRvOoyMOY.roa
File: rFjeC_1yXURzl7L8O_sRvOoyMOY.roa (raw, json)
Hash identifier: spIA7OZ1LLeUf9ueG1YYRvtDWvR7RIjQa8/SYcgek3s=
Subject key identifier: AC:58:DE:0B:FD:72:5D:44:73:97:B2:FC:3B:FB:11:BC:EA:32:30:E6
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 01845D0C8BEBF73D15603C61FEDEDB4410EA
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rFjeC_1yXURzl7L8O_sRvOoyMOY.roa
Signing time: Wed 09 Nov 2022 15:40:14 +0000
ROA not before: Wed 09 Nov 2022 15:40:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209203
IP address blocks: 77.78.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:8b:eb:f7:3d:15:60:3c:61:fe:de:db:44:10:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Nov 9 15:40:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac58de0bfd725d447397b2fc3bfb11bcea3230e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:07:92:af:e2:b4:dc:db:a6:91:d4:15:61:
0a:81:e7:23:d9:c0:46:e7:bb:19:66:b6:16:f6:06:
2d:ca:cb:26:fa:75:b6:86:ca:27:1a:7b:09:86:30:
c5:4f:de:21:ac:cf:4e:b0:49:83:18:03:be:fd:8c:
02:98:70:7b:c7:c6:8f:88:c4:7d:f0:83:dd:a3:4a:
3a:22:33:7e:37:4b:68:b6:8a:ad:64:86:70:09:ea:
21:bd:e0:5c:89:f1:a7:2b:b6:15:51:13:7b:69:ab:
0f:04:ea:7f:e6:51:d2:64:f9:cb:0e:ed:5b:19:66:
0d:1e:d3:83:d6:84:57:cc:49:3d:e3:67:38:7a:12:
76:e9:da:71:66:52:fe:ab:a4:30:fe:d1:0e:61:34:
38:bd:89:b6:54:a2:39:8a:d4:bb:30:4e:f4:6c:b4:
3a:8a:09:35:a5:d4:0a:ea:ac:b7:c8:78:c7:49:40:
8f:44:b3:d8:27:ff:0f:dc:8b:68:49:cd:1a:64:46:
29:16:45:55:fc:a5:d2:9d:40:b5:aa:c8:f7:c2:13:
63:7f:41:60:ef:50:ed:02:dc:4d:17:5c:ab:4b:49:
83:e2:b7:70:97:46:f1:89:fb:df:47:dc:25:c0:3b:
4c:82:3a:11:ed:e6:ce:03:99:08:3d:13:af:b3:c7:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:58:DE:0B:FD:72:5D:44:73:97:B2:FC:3B:FB:11:BC:EA:32:30:E6
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/rFjeC_1yXURzl7L8O_sRvOoyMOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.144.0/24
Signature Algorithm: sha256WithRSAEncryption
36:04:0a:7f:46:f7:3a:71:25:bc:b7:78:b2:97:df:37:25:8f:
51:01:d7:de:40:0b:3f:dc:6b:75:a0:87:a5:5e:17:78:7e:31:
e7:07:02:46:1c:ea:08:89:97:c2:67:8c:75:eb:7e:ae:73:b8:
bd:d6:30:c4:e9:9f:c9:ae:1a:77:1d:be:66:86:f9:20:2b:3e:
cb:1d:22:3e:6c:a6:db:86:2b:76:ca:e7:0a:91:84:31:79:9b:
21:56:f1:7d:73:df:61:e8:b7:02:42:09:db:cf:9a:4b:b0:27:
13:de:43:97:5c:16:c2:e1:9e:7a:3d:ee:ff:30:c7:45:99:b0:
b6:f0:8a:81:6e:52:b0:66:9e:99:ce:68:a3:22:84:19:d0:c6:
f6:36:50:63:84:47:12:4e:28:f0:10:db:20:49:bd:94:75:b5:
a3:2b:eb:60:2e:d9:31:08:30:13:2e:ec:e9:de:31:80:3a:02:
52:51:5e:0c:a8:5e:79:64:47:62:8b:45:3c:f6:1f:52:89:7f:
5a:15:c8:c0:b0:d0:c3:04:7a:f3:bd:22:05:5b:8a:24:aa:92:
9b:d3:e1:16:95:59:84:f9:de:aa:06:bc:37:4f:5f:2f:06:08:
59:79:17:dd:58:cf:0f:20:d7:dd:4f:01:76:6d:de:d2:7d:6c:
b5:60:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:35 2023 by rpki-client on console-ams.rpki-client.org