Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/nBWZ9ByJ4h7wWgjfcpYldKAWZ5Y.roa
File: nBWZ9ByJ4h7wWgjfcpYldKAWZ5Y.roa (raw, json)
Hash identifier: 7D10du85D0ibhYPkfrsDqh76Dv+SjLSEofOK3LQi9ko=
Subject key identifier: 9C:15:99:F4:1C:89:E2:1E:F0:5A:08:DF:72:96:25:74:A0:16:67:96
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 01841628D8DDC959890C1132FCAD02E07E62
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/nBWZ9ByJ4h7wWgjfcpYldKAWZ5Y.roa
Signing time: Wed 26 Oct 2022 21:18:06 +0000
ROA not before: Wed 26 Oct 2022 21:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42154
IP address blocks: 77.87.76.0/24 maxlen: 24
77.87.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:28:d8:dd:c9:59:89:0c:11:32:fc:ad:02:e0:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Oct 26 21:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c1599f41c89e21ef05a08df72962574a0166796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:e7:fe:91:36:7e:93:95:7b:c6:ad:5a:4b:
66:f0:69:27:75:69:85:69:08:c3:78:ee:04:1f:5d:
f9:ed:d9:9b:fa:17:2f:29:61:31:9d:72:55:85:60:
07:eb:97:05:5c:52:63:e5:19:da:63:76:05:26:72:
f2:0a:fd:8c:05:ad:e1:4c:06:bb:03:53:28:5d:30:
31:75:af:ef:2d:c2:52:39:26:90:b8:93:cd:2a:35:
8e:f8:23:00:c5:bd:ee:66:84:29:0a:63:1d:69:05:
7b:02:f0:ce:6a:1f:f6:f1:96:b1:d4:2a:30:91:8c:
0d:6b:69:b3:85:be:7d:25:62:bc:a0:13:42:a8:0e:
c8:94:33:f4:1d:53:b1:7e:eb:0d:95:6d:82:43:c1:
94:01:33:25:d3:b9:5e:a4:fa:c4:07:ca:ff:8d:86:
7a:5a:c2:6e:6f:e4:ae:a2:09:37:b8:f4:94:31:bc:
96:4f:a5:10:c6:71:44:f1:a1:e9:39:7e:58:df:0b:
7e:22:39:31:cc:a1:07:eb:53:9a:f7:96:ce:06:f3:
ac:aa:6c:23:2b:8f:8f:d2:78:41:40:2a:c4:8d:5d:
42:15:90:c1:50:ab:01:6e:bb:34:b9:d0:27:11:5c:
6f:d8:b7:83:75:27:ee:26:00:81:f3:1e:55:70:e1:
c8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:15:99:F4:1C:89:E2:1E:F0:5A:08:DF:72:96:25:74:A0:16:67:96
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/nBWZ9ByJ4h7wWgjfcpYldKAWZ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.76.0/24
77.87.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2b:49:72:8e:3c:e1:1a:47:5d:38:fb:17:7c:c1:c3:d5:c6:
42:56:b2:bb:59:c7:29:51:5c:96:bb:a7:19:5f:5f:d5:a4:a1:
e5:8d:1d:60:5a:23:cf:fd:ad:20:07:18:e2:b0:d4:fd:55:71:
32:f4:53:4b:97:08:36:e9:93:1d:03:5e:fa:c8:d2:19:2b:a8:
59:55:94:36:17:4d:63:de:2f:4a:83:6b:cb:5e:38:a9:b8:ee:
a8:66:b6:55:bb:93:8f:70:b1:e3:f7:bd:19:9a:67:f8:d0:d6:
dd:43:cc:26:3a:b7:fd:e2:fa:5b:6a:84:35:ec:2b:aa:14:28:
01:93:ce:1e:23:34:6a:19:23:c8:c5:19:07:97:3c:cf:0c:34:
06:a1:7e:e6:bf:ad:0b:00:e9:99:df:be:21:00:76:87:3e:dc:
15:bb:4f:3c:42:c0:16:d0:e0:a9:ed:bf:91:29:45:f3:e2:c9:
13:7d:16:6c:71:aa:79:07:d8:bf:3c:ba:68:e2:b8:42:a6:bc:
56:18:f3:4b:51:d1:c1:cf:b1:cf:1b:2b:1f:aa:af:8a:74:c0:
cd:27:4a:6d:c9:35:d2:3c:c2:c3:2c:fc:d0:ae:ce:de:9f:83:
2b:8d:b6:a5:06:9a:76:c2:61:61:ba:53:63:f0:8f:3b:db:e8:
ab:9a:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:23 2024 by rpki-client on console-ams.rpki-client.org