Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/aCfOL9nFJmWugcIlIOaXoIKmiks.roa
File: aCfOL9nFJmWugcIlIOaXoIKmiks.roa (raw, json)
Hash identifier: RaeVcjeJVZNPgI+//ayTFr3r9qRA6n53S37WY2jUhsg=
Subject key identifier: 68:27:CE:2F:D9:C5:26:65:AE:81:C2:25:20:E6:97:A0:82:A6:8A:4B
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A5CE452
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/aCfOL9nFJmWugcIlIOaXoIKmiks.roa
Signing time: Sat 01 Jan 2022 14:56:33 +0000
ROA not before: Sat 01 Jan 2022 14:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62362
IP address blocks: 77.104.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979166290 (0x3a5ce452)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6827ce2fd9c52665ae81c22520e697a082a68a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:29:a9:36:90:76:e8:97:90:54:e6:a0:2a:
13:5b:2b:fd:8a:56:67:c7:af:52:a7:41:a2:96:89:
1f:7e:a5:a1:30:7e:0d:f4:92:2f:ae:8c:85:7b:32:
67:bf:e6:97:e0:ea:d9:8f:3a:93:2a:30:b8:83:7c:
be:54:0b:bd:39:ef:cd:ab:5e:e3:f1:13:77:e5:f2:
13:c0:d8:20:53:10:ab:c5:86:4b:33:b7:d7:78:db:
53:95:85:8a:74:d6:dd:f1:de:bc:dc:4e:c0:89:9f:
aa:f1:a8:64:40:c5:d3:ce:e5:68:2f:40:cb:05:4d:
c7:8a:ca:b6:c7:8e:a3:eb:56:16:ee:cc:fc:e5:93:
5e:0b:e7:50:19:26:99:06:09:64:73:13:d3:cd:82:
02:ae:0f:e2:d6:9d:2b:c2:f5:85:26:ff:09:47:93:
a9:ec:13:5c:bf:0f:df:a3:61:3d:e0:ca:48:c1:4a:
bc:19:e8:b1:37:c7:da:d8:19:7f:b9:b2:e2:a7:75:
1b:b3:99:60:58:0b:db:76:0a:e6:31:99:db:9a:e2:
e4:4c:bc:ba:99:6a:90:73:06:91:de:1a:06:4d:eb:
ef:c7:d4:ce:90:54:97:76:10:60:ee:b2:46:35:bb:
e8:da:08:3a:76:fc:d3:b5:86:26:58:84:dd:56:1b:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:CE:2F:D9:C5:26:65:AE:81:C2:25:20:E6:97:A0:82:A6:8A:4B
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/aCfOL9nFJmWugcIlIOaXoIKmiks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:28:3b:15:0b:41:65:f8:c9:ff:d5:4a:41:32:dd:cf:d3:7f:
71:3d:f5:83:6d:28:f4:4a:fa:50:d0:a7:49:0c:8d:a5:d0:1a:
ae:41:8c:bb:71:74:28:86:b0:0f:f9:d2:a5:4a:00:df:60:aa:
a4:33:d9:8f:c0:5f:c2:57:74:25:67:cd:ce:0b:a4:67:39:d3:
2f:39:87:5b:63:7b:ef:c4:2c:46:32:52:f1:ce:46:4c:e8:a2:
ee:76:cb:a8:c8:66:ef:91:59:4c:7d:d2:87:e0:55:62:0e:2d:
34:c4:1c:54:1b:99:b1:01:b7:08:c2:94:19:fc:b7:f3:98:27:
7d:b8:88:ec:2c:e1:ee:f0:c4:62:47:b2:c3:0a:82:4f:2f:f0:
b0:4e:95:ca:35:8a:f5:e9:53:b4:41:73:8a:f4:3f:ff:4c:07:
36:72:56:73:1c:76:17:c4:13:5d:08:06:76:d9:26:46:aa:fb:
ef:af:38:c4:a0:02:60:61:26:40:43:4b:8b:cb:ab:ad:c2:ad:
76:18:f5:7b:1c:4e:5d:54:a3:5b:6d:20:76:2a:eb:c3:db:d9:
06:fa:72:39:2b:39:02:38:81:de:1d:90:f3:ce:0a:9f:7e:e7:
1b:05:fb:20:0a:83:1a:72:15:0c:6c:82:0a:0f:55:e2:0c:92:
f2:7f:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:21 2024 by rpki-client on console-ams.rpki-client.org