Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/h7sBfEGTxC2Y2Z6aJuVyaJOfoCk.roa
File: h7sBfEGTxC2Y2Z6aJuVyaJOfoCk.roa (raw, json)
Hash identifier: b65jAz4O9qVqt5LqBB09atKDByMw7WAAiWOJOPu1H3k=
Subject key identifier: 87:BB:01:7C:41:93:C4:2D:98:D9:9E:9A:26:E5:72:68:93:9F:A0:29
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B2627B4
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/h7sBfEGTxC2Y2Z6aJuVyaJOfoCk.roa
Signing time: Sat 01 Jan 2022 13:58:21 +0000
ROA not before: Sat 01 Jan 2022 13:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213174
IP address blocks: 77.65.160.0/21 maxlen: 24
77.65.168.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723920820 (0x2b2627b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87bb017c4193c42d98d99e9a26e57268939fa029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:15:93:d5:b1:30:ab:fe:be:67:05:af:67:
fb:b1:1d:41:ad:34:f4:98:50:69:8a:2d:70:39:bd:
ba:82:12:05:1d:c7:9c:2a:fe:dd:fd:e0:df:be:4f:
1f:35:e6:b8:41:53:7e:87:94:a5:82:e1:ad:d6:c5:
b0:09:eb:5d:ba:ca:f0:ca:a7:f3:4d:ce:84:22:d6:
33:46:8f:04:43:38:7c:e4:7c:be:72:bc:f8:c4:ed:
9a:df:42:a9:0b:02:61:fd:e4:34:0d:07:62:69:ac:
8e:39:de:e8:ae:08:90:b7:f5:63:17:5c:ad:6e:4a:
8e:d5:f3:81:74:5d:12:8a:75:b4:35:d5:ea:1a:6f:
0b:97:e8:c2:0a:07:05:33:6b:36:52:cb:cb:3c:b8:
79:ba:4e:a0:d8:63:0e:94:02:41:bc:ca:3d:58:af:
d9:31:cb:46:66:31:e9:fc:90:13:90:af:9a:f9:f5:
9e:3b:d6:34:9e:53:d6:5f:a1:4d:be:50:fd:77:a9:
b0:d9:ee:fd:25:d5:6a:33:c3:46:df:7f:df:a9:41:
ea:0e:25:cd:c7:c2:32:34:1e:5c:75:fe:cf:0b:e2:
4d:e5:2a:0f:7e:29:3b:61:cd:69:a7:08:25:8e:6f:
74:4a:0a:50:29:4c:32:cc:ad:06:e0:00:07:2e:2f:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:01:7C:41:93:C4:2D:98:D9:9E:9A:26:E5:72:68:93:9F:A0:29
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/h7sBfEGTxC2Y2Z6aJuVyaJOfoCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.160.0-77.65.169.255
Signature Algorithm: sha256WithRSAEncryption
18:79:cb:8b:9e:a4:8d:ef:57:3c:92:ad:23:61:77:93:60:30:
ef:4c:c6:1e:16:d8:19:e8:4f:7d:1e:08:d9:d0:8c:92:a5:10:
c2:c9:cc:d9:7b:56:1f:09:cf:70:54:a9:a1:a1:be:81:0e:4f:
33:8d:7c:56:e5:1c:36:2e:be:a5:25:37:fb:4d:48:f2:46:07:
50:e0:59:68:30:34:f7:63:9e:f2:87:17:fc:53:d9:16:c7:ae:
c1:43:6b:27:99:e3:b3:09:ad:60:a0:21:3a:56:0a:57:dc:ff:
c1:2b:4a:5b:5a:7d:8f:fc:ba:32:2c:5a:f1:6e:b8:3e:56:77:
27:16:33:d6:67:69:25:03:6e:fc:03:ff:31:53:42:e4:9e:59:
cc:99:b6:0a:54:00:cb:f9:fe:9c:62:2b:6e:09:88:9c:eb:d6:
25:11:0a:06:05:10:7d:51:64:ef:5c:26:7e:5b:21:83:dc:1a:
af:2d:a0:a2:5e:89:0a:8d:2d:7a:27:f9:8f:e1:15:39:1c:4e:
aa:bf:df:35:b1:ae:b7:d4:57:f3:15:ae:e0:f3:91:fe:44:57:
a8:7b:18:a3:cc:88:12:a2:19:e5:f0:0e:eb:42:d3:99:c8:54:
a4:ba:8e:aa:ad:45:8b:22:85:58:88:37:b4:a3:0f:21:cc:b5:
b1:8c:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org