Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-qHSCJfbMWviLFqxLrlhqmoir0.roa
File: z-qHSCJfbMWviLFqxLrlhqmoir0.roa (raw, json)
Hash identifier: doVdsgEOi/N9ZNJn6Bd1oLEt+H3EjDvaiqwTKgENNng=
Subject key identifier: CF:EA:87:48:22:5F:6C:C5:AF:88:B1:6A:C4:BA:E5:86:A9:A8:8A:BD
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 3A6561E5
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-qHSCJfbMWviLFqxLrlhqmoir0.roa
Signing time: Sat 01 Jan 2022 14:56:39 +0000
ROA not before: Sat 01 Jan 2022 14:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206675
IP address blocks: 77.104.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979722725 (0x3a6561e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 14:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfea8748225f6cc5af88b16ac4bae586a9a88abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:b3:3f:a4:3f:63:c6:ce:ba:49:c5:51:9c:
44:65:55:41:41:5b:3f:23:4e:73:fc:26:e2:6f:fc:
f1:7a:6b:0d:ec:a1:14:2c:3c:9a:ab:d3:42:7a:12:
26:25:92:14:e9:c4:33:37:fb:56:37:75:43:10:01:
0a:85:c1:b0:95:d4:5f:c8:b3:b9:77:a2:c8:fd:4d:
94:fb:bf:f9:99:7b:0c:0a:11:1c:2d:82:43:cf:f5:
0d:01:22:9f:d9:d3:ef:06:0d:32:6c:03:0e:01:ed:
0d:85:66:00:a0:a4:cf:8e:d7:16:05:6b:4b:83:a5:
a8:85:d1:26:38:50:d5:78:01:75:e2:89:4a:1b:4e:
5d:b7:84:b9:11:6e:04:12:c0:7a:44:ff:80:f0:72:
6c:5b:f5:5b:c3:37:5f:f9:c4:1a:9d:58:91:90:59:
e6:5b:21:07:47:2a:03:67:f1:1a:89:71:93:0d:3f:
b9:59:f9:d2:7b:9e:2f:1b:f6:7d:01:73:38:d0:5f:
a9:85:f0:8f:f0:d2:13:76:2a:2e:96:36:25:cb:97:
87:84:b0:0d:f3:be:63:f8:36:27:e1:1a:87:85:95:
ff:f7:9a:49:5f:a0:a4:e0:96:a3:f2:40:3b:ef:3d:
91:31:c1:0e:53:fb:db:77:2a:5f:a1:aa:46:d4:af:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:87:48:22:5F:6C:C5:AF:88:B1:6A:C4:BA:E5:86:A9:A8:8A:BD
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/z-qHSCJfbMWviLFqxLrlhqmoir0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.100.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:24:34:b4:a3:18:23:f3:f0:04:e2:70:26:fc:7f:b9:ec:c2:
6f:c5:ca:af:b9:0f:f3:f3:40:02:ae:ae:03:51:ae:3f:78:52:
ef:80:50:0f:d9:17:d7:e2:18:7d:48:20:91:12:d2:e2:f3:c7:
09:63:35:85:47:56:f8:45:94:16:50:1e:c6:a5:22:db:06:a5:
f0:f0:71:bf:60:69:13:fc:bb:4c:65:97:bc:6a:3b:39:4f:18:
66:ea:07:7a:b0:4e:39:0f:a8:55:69:73:0e:fe:2d:9b:24:ce:
63:fc:1d:2e:ea:ef:2c:91:08:47:a9:ee:c4:7a:92:0a:f4:67:
62:af:56:87:3e:10:f0:3c:0a:38:68:2d:d3:f7:a2:af:36:51:
a0:0b:81:d0:24:f4:03:42:92:72:bc:e7:0c:de:7d:85:df:25:
4b:7c:8f:04:8e:1b:84:4a:68:b4:f8:0c:1c:fa:69:ad:b7:64:
0a:62:6a:54:95:91:87:b3:d3:66:c1:3d:ab:41:71:78:82:54:
b2:ce:6e:9b:02:25:e8:f4:ae:b9:f7:32:0b:01:a1:bc:ae:79:
ed:9f:98:bf:8c:fa:b5:13:4b:a5:30:f2:ae:4b:80:c3:9a:f8:
ef:0b:44:19:ea:8c:01:7d:d7:a7:6d:b9:da:da:d8:25:be:72:
7b:4b:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-fra.rpki-client.org