Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa
File: RLvqX__jMQZMedXl-ACd6-qNL-s.roa (raw, json)
Hash identifier: ZpWNy8EisIjDt6CwJj6hyk8nm8eoq9LhCyxmWyvRTo0=
Subject key identifier: 44:BB:EA:5F:FF:E3:31:06:4C:79:D5:E5:F8:00:9D:EB:EA:8D:2F:EB
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A63B9AE
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa
Signing time: Sat 01 Jan 2022 14:56:37 +0000
ROA not before: Sat 01 Jan 2022 14:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204812
IP address blocks: 77.104.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979614126 (0x3a63b9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44bbea5fffe331064c79d5e5f8009debea8d2feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:07:d9:a9:f7:7e:92:e1:fa:2a:7d:d9:e6:
7c:89:80:60:d8:7a:e8:5d:07:1c:fd:8a:f4:21:7f:
a2:e9:ae:ae:95:c3:a9:47:db:a3:3c:5a:cf:e7:3c:
e0:f0:99:23:46:58:2c:87:27:60:47:94:6f:e4:e1:
d5:16:bf:f2:64:67:c0:f7:b4:85:5b:3e:15:9c:60:
45:1a:51:c2:a2:69:e4:a6:57:b4:cd:05:95:05:7b:
4f:99:73:42:bc:c6:6b:9c:0c:4a:97:93:c7:c3:5b:
fa:a0:5c:51:0e:77:0b:61:7f:07:10:3c:87:ab:7d:
df:9c:aa:f2:d5:86:94:39:b2:0c:ee:84:e6:1d:de:
26:3c:94:42:61:6e:12:5b:b7:c4:d0:65:3d:bc:f8:
91:a9:dd:1f:cf:0c:0e:b8:2b:d7:e7:56:9f:15:0c:
65:fa:e6:16:c4:98:36:ca:b6:8c:ab:a3:8c:fe:d9:
61:77:d4:84:a4:c4:9e:6a:90:d5:9f:33:17:16:79:
d8:0d:e0:ce:7f:7e:5a:83:46:b6:d1:a1:19:ea:1d:
38:81:27:24:23:8e:ab:02:7f:a3:c5:e4:bf:72:3d:
ef:bd:e5:39:dc:9b:d5:2f:d1:b9:12:89:2f:bb:2a:
4a:22:12:16:2f:6e:3c:d4:b3:1b:12:98:b3:52:d9:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:EA:5F:FF:E3:31:06:4C:79:D5:E5:F8:00:9D:EB:EA:8D:2F:EB
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/RLvqX__jMQZMedXl-ACd6-qNL-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.124.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5c:c9:68:22:e5:38:3d:4b:ba:08:0a:34:87:0a:cb:5c:92:
10:19:8b:02:5e:6a:ff:5a:91:e9:eb:0c:c9:cc:7a:62:40:36:
ab:0b:e9:b6:4c:8c:95:15:04:58:79:a7:11:0c:7a:d2:e0:d7:
ee:67:40:5f:ac:5e:f3:8e:58:82:a9:58:7c:b3:f6:6c:09:dd:
5a:79:f3:0f:f2:3e:e0:eb:01:6b:de:a0:d2:4a:b5:c8:82:2a:
5f:35:d8:ac:8a:7e:ea:86:d8:3e:bf:61:33:d5:e0:8a:96:b8:
bd:92:bb:7f:9e:7e:62:32:51:94:a1:74:6b:43:b6:b0:5c:b1:
44:60:9f:e5:50:8d:a3:c6:9b:12:ae:0f:77:8f:b5:4c:ae:ac:
5c:84:0f:f7:c4:4f:19:9f:b1:7d:d0:5b:46:fb:fb:1c:66:9c:
42:c3:ce:be:75:ee:c3:f5:af:54:23:ed:f9:f4:32:6a:e0:74:
cd:90:9f:af:ff:21:47:57:de:0f:aa:08:1f:1a:24:e5:49:22:
fd:46:8d:3c:10:9e:82:06:d7:d0:c2:92:8b:5d:6d:1e:53:26:
2d:77:1f:5b:44:3e:bc:6b:b3:7f:2c:4e:16:11:f3:b0:f5:c3:
cb:a8:aa:86:85:e8:5b:78:ec:32:10:85:71:e4:2f:31:e4:a9:
b8:0a:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org