Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/C9Qpbu3Z-zsxhbMmcB-k080pByU.roa
File: C9Qpbu3Z-zsxhbMmcB-k080pByU.roa (raw, json)
Hash identifier: iLF5qvb6deU2I9DztNCvO1wK+04CIyrD9TRnp2pLuUk=
Subject key identifier: 0B:D4:29:6E:ED:D9:FB:3B:31:85:B3:26:70:1F:A4:D3:CD:29:07:25
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 0722E940
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/C9Qpbu3Z-zsxhbMmcB-k080pByU.roa
Signing time: Sat 01 Jan 2022 09:01:07 +0000
ROA not before: Sat 01 Jan 2022 09:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12637
IP address blocks: 77.83.64.0/22 maxlen: 24
80.241.140.0/22 maxlen: 24
2a05:be80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119728448 (0x722e940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Jan 1 09:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd4296eedd9fb3b3185b326701fa4d3cd290725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ac:4f:20:4c:77:93:56:9e:7b:4b:e7:1d:1d:
cf:25:7d:d3:9d:90:e8:0b:f9:30:4b:66:a2:0b:79:
39:49:99:51:3d:0e:ca:27:77:b6:20:2b:fc:15:c0:
78:fd:fc:70:ca:92:49:49:f9:fa:d3:c9:14:91:d7:
2d:53:ba:eb:6a:7d:fe:e0:84:7d:cd:a0:78:a3:13:
f9:37:b7:05:f1:17:40:96:80:41:05:7a:69:a4:1c:
b4:34:cc:40:98:f4:00:94:82:a9:b3:bf:be:71:a9:
bd:8d:4c:d8:10:d6:bb:b4:a6:d0:be:26:de:a1:3f:
b9:ea:e8:cf:cf:3a:30:51:15:74:07:54:31:f1:20:
62:27:aa:dc:20:4a:4f:41:46:71:53:49:6b:c8:d1:
56:0b:48:03:8e:8d:9a:06:4b:0d:50:5b:2d:47:cf:
e3:b0:36:18:9a:6d:10:0e:36:81:b0:f3:44:90:3f:
49:51:23:99:9a:43:d8:b1:4c:82:63:bc:85:4c:fe:
4b:e7:9e:53:22:96:e2:76:0f:f6:5e:66:7a:d2:32:
f8:8a:3b:2c:60:a9:fb:05:dd:ac:b6:8a:05:2f:79:
11:21:58:38:0c:91:e2:73:42:d0:ec:b6:a2:4e:69:
78:99:a5:b2:34:81:28:13:cb:50:c0:7d:e6:b2:f9:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:29:6E:ED:D9:FB:3B:31:85:B3:26:70:1F:A4:D3:CD:29:07:25
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/C9Qpbu3Z-zsxhbMmcB-k080pByU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.64.0/22
80.241.140.0/22
IPv6:
2a05:be80::/29
Signature Algorithm: sha256WithRSAEncryption
66:b9:f8:b7:6e:c2:83:30:6e:01:26:f2:d4:17:b5:8f:ac:7f:
0f:d5:f1:f4:56:dd:d2:2e:c4:bd:be:fd:93:ac:f8:b5:9a:8b:
ec:10:f7:72:83:78:29:f3:9a:0e:47:89:d3:2f:58:58:b6:e0:
c4:cd:94:96:0f:3e:ed:08:8e:3e:3c:26:39:fc:28:4e:8a:c5:
0d:2c:60:24:b7:c1:b6:42:87:67:86:f3:d7:a9:a1:07:32:5d:
40:89:88:5b:a7:6e:be:80:9a:2a:f7:e6:6d:2d:1a:65:04:b1:
b9:2d:99:44:8f:a8:fc:bc:af:55:33:2c:61:0f:aa:7a:b1:4e:
49:3c:ed:0a:6e:0e:35:74:96:a2:e0:6d:ac:a4:e4:88:36:8d:
9c:a5:ef:e8:4c:c2:55:e9:34:c1:d7:3c:de:84:5d:6c:08:b9:
27:a1:a8:03:7e:dc:73:31:7d:39:35:ea:5f:36:ac:07:fc:d6:
2f:69:2a:cc:e7:3f:63:00:b0:af:1a:27:cc:b5:61:16:d5:c0:
00:4b:2f:00:ed:04:f1:7a:44:72:90:7b:88:ab:85:9d:ad:e8:
71:c9:49:7c:88:aa:81:1e:b8:69:6f:6d:de:24:8d:e2:d1:41:
0c:f9:17:ee:f6:4b:95:3f:89:02:e0:56:5b:0c:3e:61:36:c6:
10:d9:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org