Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/gryr_AuXkSQCkR7ghOSOrWZCZSs.roa
File: gryr_AuXkSQCkR7ghOSOrWZCZSs.roa (raw, json)
Hash identifier: M6CPiZSke9vS1weNDzXdGwslKfxWvfS6Iaoe8xW3AkU=
Subject key identifier: 82:BC:AB:FC:0B:97:91:24:02:91:1E:E0:84:E4:8E:AD:66:42:65:2B
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018485FCB08F18EEC0BA65FDFD74DE788D2A
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/gryr_AuXkSQCkR7ghOSOrWZCZSs.roa
Signing time: Thu 17 Nov 2022 14:27:20 +0000
ROA not before: Thu 17 Nov 2022 14:27:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 77.232.132.0/22 maxlen: 22
77.232.128.0/22 maxlen: 22
77.232.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:fc:b0:8f:18:ee:c0:ba:65:fd:fd:74:de:78:8d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Nov 17 14:27:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82bcabfc0b97912402911ee084e48ead6642652b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:71:a9:4a:ab:c4:78:99:25:c4:ed:47:60:
ff:58:3d:cb:01:c0:1b:9c:0a:de:53:b7:67:98:01:
72:b8:de:45:5b:4b:1c:19:c1:29:d0:9d:f0:0f:7f:
eb:78:58:8b:d3:6f:56:1b:4e:66:42:d9:f9:63:fb:
da:09:c9:50:0a:6e:5d:22:b5:5b:f4:f0:ad:9c:e8:
62:d2:57:db:2c:1f:bf:e5:c0:5b:f2:6b:60:14:11:
9f:cf:95:08:dc:b4:c2:01:50:a0:31:20:3a:04:c4:
4a:c0:34:5c:50:d3:25:6a:18:70:92:b7:3a:47:63:
50:ba:f0:c3:7f:ce:93:b2:b0:40:ce:8d:b7:59:ce:
3d:12:93:af:5d:a7:9f:3d:97:b8:80:26:77:64:47:
27:75:37:cf:f1:b7:77:98:ea:b8:bf:13:96:11:2e:
17:ca:34:67:19:3b:ce:26:35:9a:a7:24:3a:bc:f6:
26:1f:b0:a6:3c:cb:97:d9:1a:7d:23:5e:5c:ec:79:
3a:2f:0a:1c:58:b3:76:e8:1e:72:77:66:33:7c:ff:
13:3f:85:b2:61:c7:af:4a:0c:1b:f4:d7:53:77:3b:
d0:f8:b4:db:e5:c2:bc:90:9b:fc:73:55:6d:f8:4c:
a5:cf:56:1a:b4:2a:56:b7:4c:ee:ec:06:03:97:c1:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BC:AB:FC:0B:97:91:24:02:91:1E:E0:84:E4:8E:AD:66:42:65:2B
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/gryr_AuXkSQCkR7ghOSOrWZCZSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.128.0-77.232.139.255
Signature Algorithm: sha256WithRSAEncryption
e4:85:11:4a:9c:f2:c6:52:06:d7:4b:92:65:1f:df:92:be:56:
e2:df:13:e2:74:87:ed:b6:37:21:54:db:4e:41:d5:01:b5:92:
b6:a7:24:38:fa:cd:b8:d5:3c:a1:86:db:8e:30:4d:12:1e:be:
c7:ef:30:9b:52:25:cd:4b:d0:1c:a8:14:d2:01:51:cd:8a:18:
c5:3d:1c:ba:18:e0:31:a1:f6:65:01:28:01:8b:df:ff:e6:d5:
57:b3:e3:f2:a0:df:49:37:e6:03:c2:63:0b:00:fa:69:3a:05:
68:15:89:38:bb:9f:1c:76:55:f6:c8:e8:2b:d1:af:8a:a8:2c:
bd:d8:3e:df:f2:7a:63:a2:54:67:4a:cb:94:8f:68:e9:78:4b:
4d:21:0f:64:a9:f3:3d:ae:75:bd:49:e5:a5:12:2a:44:41:67:
39:06:26:f4:10:03:7c:18:31:ac:3c:9f:3c:81:87:3e:f7:89:
c0:6e:03:73:49:f8:4f:7b:04:92:f8:b5:b3:9d:2f:e5:79:c3:
26:44:dc:aa:ea:40:b9:a9:b2:3a:28:68:f1:c3:ed:22:3c:db:
57:0f:2c:fe:98:a7:1c:8e:86:02:13:2b:0d:70:f0:a1:ec:c0:
44:0c:0c:2e:9c:4d:81:9a:01:2c:36:74:f1:3b:08:b0:17:c1:
08:8a:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:04 2023 by rpki-client on console-fra.rpki-client.org