Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/duen9PSD-qU3T2IFyprv6bOHSGY.roa
File: duen9PSD-qU3T2IFyprv6bOHSGY.roa (raw, json)
Hash identifier: havYuQTMWc1bENgDfKtIsbMF82GUdJ3TpTgVfb4dbdA=
Subject key identifier: 76:E7:A7:F4:F4:83:FA:A5:37:4F:62:05:CA:9A:EF:E9:B3:87:48:66
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0183C61FCF2DD26BF918E7ADD02477A9FDB5
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/duen9PSD-qU3T2IFyprv6bOHSGY.roa
Signing time: Tue 11 Oct 2022 08:18:36 +0000
ROA not before: Tue 11 Oct 2022 08:18:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 77.222.136.0/24 maxlen: 24
80.91.182.0/24 maxlen: 24
193.108.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:1f:cf:2d:d2:6b:f9:18:e7:ad:d0:24:77:a9:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Oct 11 08:18:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76e7a7f4f483faa5374f6205ca9aefe9b3874866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:79:7f:88:65:88:39:62:c9:3a:2a:7f:78:
88:77:af:cb:21:24:98:cd:5f:bb:e4:5f:e9:9c:fe:
40:25:dd:23:6a:03:aa:36:ca:44:7f:28:02:e0:b9:
79:48:59:77:69:fa:df:1a:ef:a6:a3:74:45:31:c9:
3d:e9:3b:10:64:d1:ed:a6:8c:7f:bf:ef:99:c8:21:
11:23:4e:75:9e:05:50:78:ed:30:32:00:9e:95:2d:
e0:a6:13:24:17:50:cb:71:2a:2a:3c:b9:90:63:8d:
cb:aa:ed:8c:72:a1:39:fb:2a:48:74:bc:f9:72:28:
1d:31:1c:9e:32:0f:1d:d2:8f:40:e7:e4:02:b9:d1:
0f:3b:b2:26:41:17:fa:47:96:c2:01:c3:a5:eb:3f:
0d:f6:a7:94:df:32:b1:fb:c0:f8:5d:bd:70:7f:7c:
dc:b8:30:87:8e:92:64:38:ed:0a:8a:7c:f4:7f:d0:
6d:e5:f4:56:c2:3d:c8:c8:b9:9d:bb:ba:87:4d:97:
63:7d:03:56:99:e3:60:c6:e9:ea:e3:7f:8a:c7:b8:
14:c4:e6:19:dc:33:64:31:12:12:7c:ea:95:79:f7:
32:c9:e2:b1:96:05:a3:14:af:db:e9:ab:31:82:4b:
fc:76:48:51:81:0b:9d:c5:70:cf:98:93:43:ad:32:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:A7:F4:F4:83:FA:A5:37:4F:62:05:CA:9A:EF:E9:B3:87:48:66
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/duen9PSD-qU3T2IFyprv6bOHSGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.136.0/24
80.91.182.0/24
193.108.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fc:89:10:cf:4f:c6:06:f4:a0:83:68:9d:b4:1a:c4:c7:00:
bf:f0:cc:fd:f7:f3:6c:5f:8a:7b:05:bd:7e:b8:b8:5d:e5:a3:
30:15:03:f2:b4:79:bd:bc:4c:15:0b:4a:d0:cf:e1:30:77:21:
1a:86:22:c1:49:11:e8:8d:26:d4:5d:39:aa:f7:bf:eb:dc:f7:
ba:6d:1c:c1:6c:4e:5a:ab:ff:f1:f6:42:87:37:5a:11:2f:ea:
11:f0:a6:f9:a3:04:bc:96:9c:ec:69:c8:5e:1e:de:ab:93:1e:
75:54:a8:1a:6a:5b:5c:af:ce:0a:8e:0f:d6:6c:c1:da:09:b3:
72:e5:f5:02:c4:f0:39:1a:ad:6c:00:e6:59:a1:dd:fe:54:ea:
f7:99:80:6c:fb:67:a9:fb:b7:35:a0:54:63:06:01:dd:c6:d4:
50:ec:32:10:0e:b5:29:5c:f6:22:02:fe:43:e1:11:63:24:cf:
53:96:3e:79:6c:fb:c8:bb:d3:15:de:30:7b:8f:bd:46:fa:ea:
54:19:fa:51:80:87:a7:09:07:bb:32:54:a4:d5:3d:29:e2:ea:
54:c6:b2:cb:7a:5a:90:8e:7e:9c:d4:10:2d:53:1d:b0:e8:94:
02:d6:1e:51:01:02:19:3c:85:ac:87:e8:22:2c:56:65:a5:e0:
de:37:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org