Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/1CCp5vRiZkTsRuBb5D5DRANttNc.roa
File: 1CCp5vRiZkTsRuBb5D5DRANttNc.roa (raw, json)
Hash identifier: qSn24mJCBpHb0i68hUmzwm0to0yTTeWqX3Le+kPICUc=
Subject key identifier: D4:20:A9:E6:F4:62:66:44:EC:46:E0:5B:E4:3E:43:44:03:6D:B4:D7
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01841628D9AE964D51ACEBF9014BA139B1FA
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/1CCp5vRiZkTsRuBb5D5DRANttNc.roa
Signing time: Wed 26 Oct 2022 21:18:06 +0000
ROA not before: Wed 26 Oct 2022 21:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61154
IP address blocks: 77.87.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:28:d9:ae:96:4d:51:ac:eb:f9:01:4b:a1:39:b1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Oct 26 21:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d420a9e6f4626644ec46e05be43e4344036db4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:45:67:5a:83:59:20:d5:df:ad:82:b5:7f:da:
90:18:81:03:62:a2:8e:05:c5:91:40:ff:c8:01:b3:
18:f8:d8:18:ff:c9:8c:83:0e:4b:c4:6d:85:d0:86:
77:d4:11:f6:5c:63:f6:58:d2:77:6b:b6:2b:e5:d2:
fb:2f:a5:37:93:86:34:bc:16:02:95:69:6a:33:3a:
fe:a0:92:63:2c:f9:cf:d4:81:ad:0c:19:d6:db:d2:
f1:03:13:32:72:91:6c:28:75:48:d7:b5:be:22:9e:
c2:5f:31:06:aa:21:86:ee:9e:fc:b1:bb:02:7b:fb:
7f:c9:13:9e:e5:e9:5d:16:3c:29:87:a3:2c:64:84:
37:83:2f:c2:8f:b3:f2:43:ac:a5:0f:54:1c:33:96:
05:bf:53:b9:42:06:27:8d:ae:1b:fe:3c:eb:6c:6e:
ee:9f:ae:a6:32:f2:d7:8c:46:9f:8c:29:a5:5f:33:
cf:db:d6:4a:cb:f9:ff:21:2a:c6:ec:4b:7b:38:9c:
7d:41:22:ee:3c:fe:34:eb:a4:61:23:6f:6b:e0:04:
3f:8c:ba:2c:aa:42:63:e8:c1:06:0e:28:98:84:3e:
78:43:22:84:6a:c3:24:04:65:7a:dc:51:d4:af:8f:
e5:e7:e7:2c:a3:f2:0e:7f:59:70:06:ec:2f:6c:8c:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:20:A9:E6:F4:62:66:44:EC:46:E0:5B:E4:3E:43:44:03:6D:B4:D7
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/1CCp5vRiZkTsRuBb5D5DRANttNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.78.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2e:dc:d2:f4:52:16:9f:67:97:41:68:9a:1e:cd:57:c8:4b:
20:b9:8f:74:b3:2a:40:db:69:71:dd:91:1a:aa:9a:3d:a3:e6:
ab:36:7f:84:be:9d:a4:90:33:d8:bb:98:38:17:68:78:98:d1:
e6:46:fc:b0:36:da:54:77:09:26:87:81:42:c6:6e:7f:4d:3a:
49:56:5d:94:99:72:b3:15:37:bb:13:64:ac:f6:ed:97:41:bc:
1b:d6:6e:7d:52:01:85:d2:ba:be:91:4f:ae:9a:b4:8b:1f:93:
5b:c5:05:4d:b0:6c:a3:74:4e:8c:d6:60:9a:26:7b:70:4b:e2:
fe:48:e7:05:42:43:6f:07:fb:17:fe:79:aa:da:88:af:85:f3:
85:74:8e:5e:7d:6c:e0:47:18:94:af:40:7c:ea:c9:3d:22:66:
5e:9f:0e:ad:0e:ad:82:e7:f4:7f:be:93:b6:4d:b6:39:38:9a:
4d:75:b6:d8:3c:f9:0a:d0:b7:ef:45:f3:d2:72:05:f0:3f:99:
96:cd:b2:e7:43:5f:a8:98:8c:88:7d:74:61:ba:f2:37:c7:20:
e4:c9:ae:c0:d0:d6:9f:e5:43:82:40:f1:ab:b4:f0:ca:2d:66:
15:16:14:35:07:8f:cc:15:22:42:9c:a3:cf:11:d4:0d:02:64:
51:fc:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org