Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qQsPmri_zQ1TFzfYzNYnb88bOCo.roa
File: qQsPmri_zQ1TFzfYzNYnb88bOCo.roa (raw, json)
Hash identifier: B1MktYL6xktmU+v6IB2X/SaNykv2OIMTGtbiyGjDeLA=
Subject key identifier: A9:0B:0F:9A:B8:BF:CD:0D:53:17:37:D8:CC:D6:27:6F:CF:1B:38:2A
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 33065FF8
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qQsPmri_zQ1TFzfYzNYnb88bOCo.roa
Signing time: Sat 01 Jan 2022 09:58:38 +0000
ROA not before: Sat 01 Jan 2022 09:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21011
IP address blocks: 77.88.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856055800 (0x33065ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 09:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a90b0f9ab8bfcd0d531737d8ccd6276fcf1b382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:0c:b5:78:79:33:b9:9a:4e:8b:01:e7:1d:
a2:cc:b5:80:3c:9a:02:0d:20:a2:a7:90:a4:e0:99:
83:d0:33:44:03:7a:fc:a2:9c:15:a2:1b:d2:c5:59:
a4:ad:ce:41:ae:e9:f0:31:53:d3:6a:5b:e9:9c:8b:
e7:76:d9:59:6f:44:9e:c3:0b:20:19:e9:cb:38:c5:
a6:a5:5d:b8:93:0e:61:b6:a1:6d:6e:d8:cf:6e:f9:
6b:62:ac:e6:de:12:6e:a9:d8:11:f0:36:35:65:52:
9c:8d:9f:a0:22:14:f1:6d:8c:27:4c:72:f0:a4:10:
4f:99:3f:57:0f:37:bf:ce:ad:ca:51:5f:47:58:d6:
7e:54:6c:2a:54:1b:3b:d5:ee:84:61:ca:92:ea:de:
0d:bd:39:72:9c:f4:b0:f4:53:ce:10:e6:b7:f0:bd:
67:5d:1d:5f:11:19:ac:68:84:90:ea:3b:e3:84:4f:
3f:b1:fb:0d:05:ef:52:dc:d2:18:6c:1f:c6:4c:0c:
f8:b9:b6:18:17:37:a9:40:9a:1f:3b:73:9a:ab:ae:
9e:28:42:9e:7e:ca:20:af:ca:c7:a7:1d:8e:e3:d7:
63:73:ae:ef:c1:12:a2:e5:22:44:fa:9d:d2:ee:6b:
4a:0b:52:a1:73:25:2d:fc:12:19:0f:58:12:26:4d:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0B:0F:9A:B8:BF:CD:0D:53:17:37:D8:CC:D6:27:6F:CF:1B:38:2A
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/qQsPmri_zQ1TFzfYzNYnb88bOCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.222.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5a:bd:0a:05:cd:e5:da:ab:10:7d:64:01:a0:17:14:50:eb:
a8:04:7f:96:88:7f:7f:71:16:9e:55:04:c4:e7:76:9f:36:00:
09:ac:be:a5:3c:70:ee:11:13:99:0c:d6:cb:4c:1f:4d:5d:89:
94:83:24:4c:ef:c0:65:a7:58:ac:a4:74:c1:44:85:e2:be:3c:
19:fb:13:06:fc:d0:89:4a:fb:fa:cf:29:56:03:2d:27:3d:32:
ee:eb:05:de:44:d3:f0:ec:1e:5c:37:65:a0:d2:b0:fb:42:4f:
ba:db:a3:13:f2:2c:9b:38:21:8f:37:cb:9a:de:22:4f:2e:e2:
e8:81:15:5e:e5:3d:57:95:97:a7:7d:f8:1c:4e:fd:94:c4:90:
79:03:0d:c1:d9:50:96:d5:f5:8c:80:d2:99:41:1a:7b:8f:e7:
9a:a5:53:28:2f:26:3d:0b:a4:85:43:b4:9e:1e:6c:f3:1d:b5:
13:da:97:14:50:cd:d0:04:b4:eb:f8:73:60:9b:c2:42:3c:00:
70:cf:55:a4:4b:0e:4f:6a:ff:62:87:07:07:38:33:2b:e5:0a:
6e:54:d5:d8:dd:46:42:8c:fa:14:07:09:0d:8c:17:b1:f6:cd:
07:3e:2f:a7:cc:28:fc:7c:d5:82:cc:d9:d0:ae:56:a0:73:12:
27:a9:34:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org