Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/poxX29tGyq_romdR01phx118AiA.roa
File: poxX29tGyq_romdR01phx118AiA.roa (raw, json)
Hash identifier: P+9pgAApIJnqyvcnuZLPRsoXWLdk9lzXpj4kmYCfaSg=
Subject key identifier: A6:8C:57:DB:DB:46:CA:AF:EB:A2:67:51:D3:5A:61:C7:5D:7C:02:20
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 0572D870
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/poxX29tGyq_romdR01phx118AiA.roa
Signing time: Sat 01 Jan 2022 11:00:57 +0000
ROA not before: Sat 01 Jan 2022 11:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203210
IP address blocks: 91.196.49.0/24 maxlen: 24
91.196.50.0/24 maxlen: 24
91.196.51.0/24 maxlen: 24
91.196.48.0/24 maxlen: 24
77.87.74.0/24 maxlen: 24
77.87.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91412592 (0x572d870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 1 11:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a68c57dbdb46caafeba26751d35a61c75d7c0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:c8:c9:cd:c9:09:fb:b2:c9:bc:fd:39:62:
13:bb:af:7f:78:98:46:d2:2c:1d:fc:4d:ae:95:1d:
1e:7f:24:20:75:be:d7:eb:c3:0e:e2:0e:f9:28:23:
ee:a0:63:1f:20:36:86:ec:c2:7d:49:c2:76:00:f2:
e0:9d:28:27:cc:1f:6b:70:d5:fc:c1:62:9e:83:6d:
ec:5c:a5:3a:2f:98:dd:45:20:f3:22:35:22:1b:51:
e2:91:67:dc:50:d4:b4:1d:8a:a8:90:e3:bc:8c:69:
02:1c:04:f2:1b:46:93:35:1c:dd:01:e2:d2:39:84:
3a:5e:29:21:59:7b:1c:dc:84:64:cd:f5:a0:55:da:
57:98:6b:42:fb:47:11:a1:f0:e9:37:17:ac:c2:10:
49:ae:0c:2a:7a:97:4b:7f:16:e4:20:2b:57:3a:58:
bc:c8:d4:08:f3:e5:90:ee:82:e8:2b:45:db:3b:0f:
a6:4b:af:40:6e:02:be:4f:6c:2c:e8:f7:fc:d5:ed:
fe:43:e0:b7:30:69:56:18:e0:81:36:16:34:11:a6:
89:aa:57:a4:0e:e4:d7:7a:49:5c:97:23:79:99:ab:
62:fc:a5:a3:7f:e1:66:71:51:6a:5d:70:3e:a5:7e:
f5:6f:0d:91:66:c9:dd:68:cf:46:fd:54:84:13:bb:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8C:57:DB:DB:46:CA:AF:EB:A2:67:51:D3:5A:61:C7:5D:7C:02:20
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/poxX29tGyq_romdR01phx118AiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.73.0-77.87.74.255
91.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
00:d9:2d:ac:80:76:d2:3a:11:2a:e0:41:b5:0e:94:69:3c:2d:
dd:fc:1a:1f:2e:fd:f4:cf:3a:0f:1d:34:1d:53:a5:d6:d3:79:
7d:71:53:9b:db:a4:8a:6e:60:5d:87:6f:71:15:6f:c9:60:0b:
14:97:6d:58:b6:e4:dc:d4:45:e1:3d:84:90:e2:ac:8b:84:5b:
a3:30:65:7a:16:4b:96:c0:ef:90:11:2f:00:8f:50:24:93:3f:
d5:a8:81:10:5a:fc:51:8d:1c:84:10:ec:1c:f8:0b:dc:77:4f:
73:2a:ef:4c:5b:20:47:c9:7e:ac:8d:2f:60:99:8d:80:bf:9e:
fc:77:e4:0e:62:d1:09:1d:26:67:d7:ab:5a:b0:d0:33:43:79:
da:7f:57:44:74:59:98:d2:93:0c:ac:dc:c8:26:f8:20:59:c7:
44:b1:56:1c:ff:e1:d0:c0:6c:97:1e:5e:f3:19:a7:6f:4a:bc:
ec:8c:dc:5a:6e:5c:80:4f:d4:a0:2f:39:19:91:57:bb:cf:74:
43:e9:3d:37:a1:75:a5:62:ce:0d:8b:cb:4e:32:d6:7f:0e:d1:
29:75:8c:dd:af:2a:e7:7c:9f:a2:97:ac:02:36:44:85:8b:3d:
59:55:21:87:02:c7:18:61:98:c5:5a:3c:e4:41:ac:c9:bf:fa:
76:1c:40:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:48 2024 by rpki-client on console-fra.rpki-client.org