Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/b7ZrTfKwIuod0ZHYKWZbdwqPU28.roa
File: b7ZrTfKwIuod0ZHYKWZbdwqPU28.roa (raw, json)
Hash identifier: xDJAXvgDolLsHfznsB6CE/K9cNiFVK2Mx/SP8n7pio0=
Subject key identifier: 6F:B6:6B:4D:F2:B0:22:EA:1D:D1:91:D8:29:66:5B:77:0A:8F:53:6F
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 054F65
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/b7ZrTfKwIuod0ZHYKWZbdwqPU28.roa
Signing time: Tue 05 Apr 2022 06:23:18 +0000
ROA not before: Tue 05 Apr 2022 06:23:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61275
IP address blocks: 77.223.162.0/23 maxlen: 23
91.135.56.0/23 maxlen: 23
77.223.172.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348005 (0x54f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Apr 5 06:23:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fb66b4df2b022ea1dd191d829665b770a8f536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:96:ad:d7:03:1c:a8:c0:06:55:77:55:72:
c2:c1:81:22:22:3d:94:43:0a:8f:9e:73:93:c2:e7:
da:21:35:84:04:e8:2b:ce:80:a5:fc:1d:12:fa:0a:
fa:6e:7c:2c:d2:a7:64:a6:b0:4b:f2:58:0b:0e:d9:
c3:19:45:34:7c:3e:03:47:4b:61:5a:c0:5d:d8:b9:
48:09:6d:9f:25:69:d7:46:0f:cc:50:66:cf:11:dd:
76:7f:8d:fd:fe:3c:1f:fd:f3:78:7a:68:3a:95:75:
9f:a1:e5:3d:c0:b1:99:63:e1:20:e3:b0:bf:30:36:
04:68:d8:76:bc:1d:7e:8e:20:44:8a:43:17:23:19:
7b:70:ed:19:4e:e3:fd:51:95:e9:3d:78:a4:51:ca:
da:46:18:49:f8:a0:30:bf:fc:1a:2d:a2:b2:13:81:
0b:4f:52:d3:7b:c6:92:42:3a:f2:00:40:12:71:b3:
05:97:e5:be:7a:10:b3:de:25:21:85:c3:c3:22:c1:
f2:ef:d0:2e:80:25:ca:a4:db:0f:ca:41:8d:73:48:
d3:42:bd:fc:ab:74:0d:81:a2:14:41:a7:d0:e7:be:
cf:c8:a9:be:4c:8a:e2:95:10:e1:cb:77:84:6b:a1:
dd:18:65:41:4f:2f:13:65:2c:71:46:03:37:26:6e:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:6B:4D:F2:B0:22:EA:1D:D1:91:D8:29:66:5B:77:0A:8F:53:6F
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/b7ZrTfKwIuod0ZHYKWZbdwqPU28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.162.0/23
77.223.172.0-77.223.191.255
91.135.56.0/23
91.135.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a0:45:94:56:55:78:4d:35:f0:3e:70:4a:e2:b8:5b:7d:05:
08:e2:fa:5b:05:54:11:77:d2:29:67:3a:ad:8d:95:86:52:3c:
3d:90:77:b4:30:85:71:bb:de:4a:cf:49:fa:8d:85:bc:ae:8d:
7e:78:f2:c3:a3:31:6d:61:46:37:8b:f6:07:bc:8a:3f:51:1e:
42:42:ec:93:c9:65:99:db:96:91:3b:96:e2:7a:b2:3f:de:1c:
86:b7:23:39:91:7b:12:33:60:41:c8:8d:f7:30:39:c9:ac:dd:
b6:f2:19:70:ec:37:a1:42:88:84:7f:5e:e4:30:9a:fa:9e:a5:
07:cd:17:46:72:a9:e9:4c:e1:38:4b:c2:16:aa:63:8c:ca:1c:
e1:20:33:1e:79:f4:17:49:62:38:a7:d9:22:95:25:f7:8a:92:
c3:27:92:69:95:f7:16:f0:d2:c1:9d:b5:ff:24:71:a9:ec:9b:
30:84:9d:8b:65:ac:d7:ba:6e:80:fa:64:df:bc:e5:66:f2:f6:
f8:4f:19:dd:a8:f6:de:b1:5f:91:2b:fa:f3:86:a9:72:85:7d:
14:82:21:3e:40:d9:42:c8:be:59:eb:6c:02:cd:24:b7:82:0c:
4c:c5:d5:3d:22:eb:9b:56:aa:6c:7a:4b:a2:25:6b:5c:4b:32:
65:3c:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org