Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Ozy06t4srjza2gS_kjmyY1uyRdE.roa
File: Ozy06t4srjza2gS_kjmyY1uyRdE.roa (raw, json)
Hash identifier: ttfu+hzcbxbRHnsKywD6TH2lf8J1ePGvAYS3KxMveYQ=
Subject key identifier: 3B:3C:B4:EA:DE:2C:AE:3C:DA:DA:04:BF:92:39:B2:63:5B:B2:45:D1
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01851194A85ABB38B56A12749D2D01F41149
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Ozy06t4srjza2gS_kjmyY1uyRdE.roa
Signing time: Wed 14 Dec 2022 17:00:33 +0000
ROA not before: Wed 14 Dec 2022 17:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200494
IP address blocks: 77.81.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:94:a8:5a:bb:38:b5:6a:12:74:9d:2d:01:f4:11:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Dec 14 17:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b3cb4eade2cae3cdada04bf9239b2635bb245d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:85:13:4d:7e:b9:ca:5e:e0:0b:1f:ed:ab:
e8:ef:44:95:cf:4f:2b:81:3f:63:45:f4:67:ef:32:
fc:8e:5b:ae:d5:6f:bc:cb:52:3d:26:a5:b7:4f:4d:
3c:59:1d:5e:2b:52:d0:f6:c5:15:3c:05:33:0a:5f:
d2:ba:07:8b:b4:0e:49:e0:e3:a1:47:06:fe:7f:9b:
2c:b5:c7:56:01:21:0f:1c:35:cf:59:e5:7c:a8:8b:
0e:f6:6a:c6:14:3c:8d:41:a0:2a:99:4d:a7:d0:a9:
ed:86:21:87:fa:0b:4c:15:93:9e:79:ea:57:f5:cd:
30:f9:3a:18:ec:f5:22:ea:7a:46:64:23:7c:2e:e9:
74:24:e6:8f:cb:17:0b:8e:6c:d5:2a:d6:0c:bc:76:
c0:f4:15:01:28:f7:a2:0c:31:1f:a2:ec:7b:7e:9d:
60:ce:c4:89:6a:83:0e:8a:d1:99:7f:92:29:17:ee:
49:65:e4:2d:2e:e9:e2:40:ec:3f:c8:17:ce:8c:91:
e6:d9:03:3d:45:9b:f1:b1:00:d7:de:d9:d3:89:71:
6f:c6:3d:0a:bf:53:cb:42:23:2d:9c:63:08:2e:ac:
c5:46:d8:d2:46:0d:68:45:40:2c:08:8a:59:b6:ab:
2f:45:95:98:65:c4:84:73:65:4d:af:f4:3c:14:ee:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:B4:EA:DE:2C:AE:3C:DA:DA:04:BF:92:39:B2:63:5B:B2:45:D1
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Ozy06t4srjza2gS_kjmyY1uyRdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.176.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5d:7f:07:57:29:dc:37:ab:62:db:17:21:fb:43:a5:a4:39:
c6:2c:84:75:31:03:eb:d0:9d:c7:ca:0d:c8:9d:c5:8c:77:ef:
cb:38:76:a6:d3:3b:72:e5:f3:5d:99:9d:d6:09:9c:f1:fd:c5:
f6:9c:b5:6f:df:c1:b2:8c:65:89:ce:c8:03:37:c9:fd:3f:23:
b9:fa:07:9c:69:15:e8:0a:21:f2:18:20:4f:ce:e7:98:d7:42:
80:f5:c9:b8:b8:07:a5:e2:0c:fa:8f:c7:67:ac:57:d8:ca:13:
2f:86:f5:1c:2c:67:be:25:2e:30:6c:a4:fb:50:2b:69:4a:b9:
12:bb:2d:c8:7f:e0:3b:f6:51:d1:f5:4b:e7:e5:c3:7c:4d:26:
56:16:c7:8b:f6:bd:54:0a:24:d8:f6:14:01:ff:3d:f6:d1:9d:
7f:30:db:ec:c9:f1:b7:aa:97:0b:09:61:b4:f4:a8:69:94:e2:
40:cf:56:21:8a:d0:93:a5:49:40:fb:83:f7:18:98:93:f5:a0:
91:a6:aa:ef:5a:65:9f:c3:86:15:ce:1d:f1:32:f8:39:b0:b9:
1f:fa:ef:4e:a4:01:98:19:bf:93:96:c5:64:0a:8b:d1:32:9c:
c7:bb:e9:e6:7b:0b:2a:6c:dd:58:4f:1c:92:f1:f2:52:4d:3f:
e3:54:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:08 2024 by rpki-client on console-fra.rpki-client.org