Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/oog7cL6OTk-2SAPbd0Cud9PPQ68.roa
File: oog7cL6OTk-2SAPbd0Cud9PPQ68.roa (raw, json)
Hash identifier: CeY+c9kKj8DsSR3w68snzZklPpVao6K6nMpA0oo/gfw=
Subject key identifier: A2:88:3B:70:BE:8E:4E:4F:B6:48:03:DB:77:40:AE:77:D3:CF:43:AF
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0EAD5BE6
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/oog7cL6OTk-2SAPbd0Cud9PPQ68.roa
Signing time: Sat 01 Jan 2022 08:03:09 +0000
ROA not before: Sat 01 Jan 2022 08:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5377
IP address blocks: 77.70.240.0/20 maxlen: 20
193.220.0.0/16 maxlen: 16
77.70.254.0/24 maxlen: 24
77.70.255.0/24 maxlen: 24
193.220.240.0/20 maxlen: 24
77.70.192.0/19 maxlen: 19
77.70.207.0/24 maxlen: 24
77.70.144.0/20 maxlen: 20
77.70.160.0/20 maxlen: 20
77.70.176.0/22 maxlen: 22
77.70.184.0/21 maxlen: 21
193.219.196.0/24 maxlen: 24
193.219.192.0/18 maxlen: 18
77.70.181.0/24 maxlen: 24
193.220.88.0/21 maxlen: 21
77.70.128.0/19 maxlen: 19
77.70.128.0/17 maxlen: 17
2a02:6600::/29 maxlen: 32
2a02:6600:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246242278 (0xead5be6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jan 1 08:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2883b70be8e4e4fb64803db7740ae77d3cf43af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:7d:16:7f:ad:50:f2:30:e2:0b:b2:07:a2:
eb:15:f9:10:a0:7c:49:a9:ed:02:15:4e:53:98:59:
20:ce:48:db:e7:dd:72:05:66:e0:4f:26:6e:da:52:
6a:66:87:30:83:27:06:66:71:b2:d4:3b:a4:f5:a7:
a6:ab:a9:35:e2:7b:12:ed:fe:34:0a:8a:47:55:f1:
cc:76:40:5e:28:ad:d2:19:8c:4b:f2:f7:95:cc:8b:
ec:b3:ba:11:4a:dd:8e:5f:79:97:e9:48:44:f0:7b:
39:a7:b4:e4:a4:22:0b:0e:49:00:4d:18:38:15:e0:
fe:07:53:4c:3b:33:12:0a:8e:0e:f9:74:27:6a:98:
f4:76:5b:70:0b:bc:b9:a6:69:d5:6d:c7:c1:b8:b6:
8a:69:4a:dd:d9:36:65:87:a1:92:a2:27:ee:ee:5c:
ef:fe:f7:90:9b:ef:96:f7:ef:39:d2:7c:62:30:81:
08:cb:43:7e:d7:54:cd:fa:2c:32:ba:15:c0:3f:af:
7f:db:a5:ee:86:83:6e:8e:3d:20:3d:3e:8c:5c:9b:
29:04:7b:76:6e:23:c2:66:bc:b9:67:fc:18:76:41:
28:ab:49:08:37:1e:0d:a2:60:56:c4:5b:09:2b:e7:
78:9f:5b:1c:b9:98:f6:4d:a7:32:b5:9d:45:e1:90:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:88:3B:70:BE:8E:4E:4F:B6:48:03:DB:77:40:AE:77:D3:CF:43:AF
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/oog7cL6OTk-2SAPbd0Cud9PPQ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.70.128.0/17
193.219.192.0-193.220.255.255
IPv6:
2a02:6600::/29
Signature Algorithm: sha256WithRSAEncryption
0d:1e:20:fe:f7:8a:cb:45:f1:a7:d8:2c:95:0e:7e:71:a2:41:
89:96:dd:a1:ca:ee:23:45:91:9b:0e:87:f3:aa:7d:50:2e:37:
f6:44:cb:36:ed:d2:4a:21:07:c6:e2:f4:a2:7a:9a:11:f1:9a:
db:f7:40:bb:de:4d:a2:d3:ec:c4:59:f1:59:3d:34:64:12:61:
2f:11:f6:a2:90:5f:a6:96:3b:89:41:8d:d8:dc:47:3d:26:61:
91:bd:aa:6b:50:e7:3e:5a:52:82:1b:a8:65:82:48:22:fd:d6:
4d:0b:0a:5d:9e:de:9d:cd:85:9f:fe:71:50:66:33:66:1d:f3:
5e:a7:1b:52:66:d6:0f:73:7c:41:9c:b4:ee:d3:45:29:02:09:
af:31:3b:84:c0:fd:6e:be:9a:2c:0f:2d:1e:84:d5:3e:5c:05:
c2:72:fd:a3:36:1f:31:be:58:e7:18:d8:12:70:4d:7b:0a:f1:
2b:f4:af:88:f1:1c:39:57:54:f8:6f:36:41:8e:ae:47:0e:97:
be:04:c8:93:95:6b:76:7f:76:a5:75:d1:36:ba:d8:09:99:89:
a1:e4:cb:46:25:9d:9e:03:95:58:6f:32:b2:bd:1c:65:af:c5:
c1:41:d6:f1:79:cd:04:0b:a9:be:a5:fd:b5:a3:0d:1c:ec:82:
27:26:b6:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:53 2024 by rpki-client on console-fra.rpki-client.org