Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iu6K7VZKEdoWUiQmmywXDG9_94E.roa
File: Iu6K7VZKEdoWUiQmmywXDG9_94E.roa (raw, json)
Hash identifier: 3smrX0AasVGrycsqFrbglI6I8oqj6x708qjRi0d72n4=
Subject key identifier: 22:EE:8A:ED:56:4A:11:DA:16:52:24:26:9B:2C:17:0C:6F:7F:F7:81
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07D33A20
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iu6K7VZKEdoWUiQmmywXDG9_94E.roa
Signing time: Mon 07 Mar 2022 18:35:04 +0000
ROA not before: Mon 07 Mar 2022 18:35:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.121.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131283488 (0x7d33a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 7 18:35:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22ee8aed564a11da165224269b2c170c6f7ff781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:9a:9e:97:86:60:23:75:d2:c0:d7:7b:7b:
84:20:33:9d:58:26:c9:7d:0b:3b:32:3a:7e:0a:19:
70:27:59:6e:b0:53:4f:26:ad:d1:49:c5:92:33:3a:
3c:2f:3b:7c:c0:b6:1a:e3:85:fe:a4:4c:a9:1e:b0:
17:ac:d9:3b:16:6a:55:a1:73:08:e0:a5:f5:6a:c3:
52:31:ce:39:4d:02:e0:f5:3e:f9:83:58:6a:2b:d5:
ab:ca:14:0a:c8:48:12:49:7e:e4:00:9c:4b:8d:98:
57:35:34:20:eb:60:6d:85:f5:a3:48:b7:91:17:aa:
17:d6:8e:8b:69:80:c7:a8:f4:58:71:a0:b6:06:aa:
dd:60:09:12:3b:fa:79:e7:4d:13:ae:a6:05:99:83:
38:61:9c:4e:a5:8f:c5:ad:11:22:09:fe:80:f3:83:
b7:6b:05:ac:49:b7:8a:3e:66:ea:ee:2a:c6:90:b7:
aa:ca:41:ce:c7:47:71:b9:8b:95:a3:4c:d4:30:18:
68:43:90:e5:20:2f:ab:b8:41:06:4a:41:85:75:55:
91:de:f4:c9:38:c0:fd:cc:a1:03:53:25:17:64:c1:
84:27:f4:37:08:13:ee:e1:bc:77:ee:7c:59:77:34:
c7:21:c0:f0:f1:5d:2b:25:02:54:8c:31:80:f6:af:
dc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EE:8A:ED:56:4A:11:DA:16:52:24:26:9B:2C:17:0C:6F:7F:F7:81
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Iu6K7VZKEdoWUiQmmywXDG9_94E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.38.0/24
85.209.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7e:42:ea:f2:c4:8c:bc:8c:ee:a6:f7:ce:cc:18:75:49:e3:
e7:6a:d9:3a:71:c5:93:34:b6:ef:2a:27:73:40:59:27:d4:dc:
bc:3c:c8:29:74:3e:81:d8:69:40:7c:fd:72:ea:2b:9a:2d:79:
cf:78:83:80:19:68:52:d6:a6:bb:c3:cc:35:17:c5:9e:12:c4:
0a:57:b6:f3:77:c8:92:ce:40:3f:21:d2:f6:3e:94:68:6c:80:
c5:fc:12:29:3f:43:a5:ae:49:a6:6d:36:08:b4:6c:00:79:45:
2a:6c:50:38:b1:10:c7:89:d9:b2:f4:24:f7:c0:f0:03:48:ff:
16:31:73:f3:53:ce:4c:68:97:51:e7:a0:c3:7f:9b:93:5f:d3:
01:3d:39:33:ec:2e:45:a0:e1:50:d0:79:31:3c:d5:06:ac:7e:
dc:04:e5:24:b0:ed:fe:f3:32:47:2a:94:f8:5a:a8:c6:79:42:
45:6c:97:a1:dc:ae:64:1d:12:da:54:9b:c4:cd:7d:00:34:f9:
a2:26:fe:4a:82:54:9c:35:d0:93:a1:3d:e0:ce:3f:68:37:fc:
e0:07:9a:7d:17:38:db:ab:42:4a:d7:18:f6:12:aa:43:69:fd:
66:8a:61:2a:07:08:10:c4:02:c4:79:95:ab:29:3c:24:72:df:
94:ce:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org