Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/D6G_N5Fxzdnf4JX41T6qgGRHBYo.roa
File: D6G_N5Fxzdnf4JX41T6qgGRHBYo.roa (raw, json)
Hash identifier: g3eRaqK0M7SFijN5Z66FEoRnDQYHKQ3CsK4n23kAooQ=
Subject key identifier: 0F:A1:BF:37:91:71:CD:D9:DF:E0:95:F8:D5:3E:AA:80:64:47:05:8A
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 03CF1ADD
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/D6G_N5Fxzdnf4JX41T6qgGRHBYo.roa
Signing time: Sat 01 Jan 2022 09:02:30 +0000
ROA not before: Sat 01 Jan 2022 09:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10310
IP address blocks: 77.238.189.0/24 maxlen: 25
2a00:1288:f03e::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63904477 (0x3cf1add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Jan 1 09:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fa1bf379171cdd9dfe095f8d53eaa806447058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:ef:b0:6c:ba:7d:da:ab:d3:08:ad:29:81:
5f:21:c6:e5:90:02:59:2d:81:86:4d:a2:05:8a:bd:
b9:fe:7b:58:a4:43:ba:fd:ae:a1:ef:21:88:1a:86:
73:16:73:ce:51:49:64:a5:f8:77:1e:68:4b:b6:b6:
cf:3f:12:7e:e9:a5:aa:79:9b:28:08:76:f5:f4:64:
df:fa:0a:12:28:78:d0:df:71:16:6c:b1:3a:6d:3a:
a1:80:ea:93:d6:84:9c:e3:19:ae:0b:fc:c0:04:67:
ed:fd:c4:f0:42:be:7e:ec:20:fe:a1:d5:6f:c1:97:
6e:1a:05:e2:bf:89:3d:ef:0f:f5:78:e4:a8:12:3a:
3b:eb:33:44:e1:2e:ee:d6:2a:fe:a2:7b:f9:23:2e:
ba:8d:ed:88:41:b2:ed:9d:27:3f:e4:64:5d:33:f0:
a6:6d:2d:88:ba:21:5e:c5:20:26:a7:08:f4:34:ac:
53:06:9f:4b:dc:f5:12:56:06:b5:08:4d:bb:a4:68:
37:09:45:48:c8:6e:78:3d:ce:28:dc:1d:76:15:dd:
a1:91:b0:55:15:77:5d:05:c5:e0:fb:78:94:06:6c:
e6:7c:53:ac:b0:b1:b8:86:ad:e2:36:07:90:bb:26:
1c:bb:b0:40:48:2c:d6:03:63:b8:cf:a1:5d:28:88:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:BF:37:91:71:CD:D9:DF:E0:95:F8:D5:3E:AA:80:64:47:05:8A
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/D6G_N5Fxzdnf4JX41T6qgGRHBYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.238.189.0/24
IPv6:
2a00:1288:f03e::/48
Signature Algorithm: sha256WithRSAEncryption
ce:f6:fc:ce:b4:eb:b0:ea:4c:92:7f:45:f6:0b:50:c8:31:6d:
28:33:7f:f0:4e:7f:15:93:a5:54:f5:21:bc:d1:25:c6:7d:90:
9c:28:28:c2:f6:33:44:06:1e:f7:8f:eb:29:e3:a0:75:15:ed:
07:44:9f:7b:0a:07:58:cc:11:56:ff:a5:92:b6:50:44:f1:90:
20:10:70:ee:d9:f1:f0:19:21:fb:6b:68:fa:82:07:4b:c0:5c:
20:3a:d3:e3:16:d9:88:01:fe:7a:0e:ee:af:00:c7:9b:29:c6:
f9:75:2f:84:d6:22:93:c0:0a:8a:27:d1:da:ea:c1:ff:46:c4:
db:5d:34:6c:55:3b:82:e5:6e:b9:17:cd:ce:fc:34:1b:02:b1:
2f:e1:08:0d:44:f1:29:de:32:f4:b7:05:c1:ca:4f:8b:01:30:
6b:1c:56:1f:1d:b0:ba:6c:04:f3:9d:54:1a:8e:86:61:db:2a:
6c:42:ab:37:f3:9a:68:44:86:0e:d9:99:4b:b8:e2:72:7d:d8:
11:7b:b9:da:7e:a1:6f:04:95:ac:8e:45:3a:3a:5e:4c:ad:93:
e2:ed:68:44:36:f9:e4:80:c4:f4:f8:e7:dc:ac:ea:88:66:e7:
05:c9:6a:38:11:52:2d:85:ac:aa:9a:39:dd:80:46:04:83:2a:
b9:70:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:02 2024 by rpki-client on console-fra.rpki-client.org