Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-PYNsVd6UEFSX28wRrq1pnfAlTo.roa
File: 1-PYNsVd6UEFSX28wRrq1pnfAlTo.roa (raw, json)
Hash identifier: +xFO8/QOr5NS+9tVuUDR7ILaMp2GIKkxODAdJ9kJALo=
Subject key identifier: F8:F6:0D:B1:57:7A:50:41:52:5F:6F:30:46:BA:B5:A6:77:C0:95:3A
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01854EF42658B3A7D42CE9BF4B46039E6A59
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-PYNsVd6UEFSX28wRrq1pnfAlTo.roa
Signing time: Mon 26 Dec 2022 15:01:41 +0000
ROA not before: Mon 26 Dec 2022 15:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205361
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:f4:26:58:b3:a7:d4:2c:e9:bf:4b:46:03:9e:6a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Dec 26 15:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8f60db1577a5041525f6f3046bab5a677c0953a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:b7:9c:2f:68:31:b5:44:cb:83:64:60:e3:
07:5a:56:81:c5:86:8a:02:4f:33:88:eb:b9:54:c7:
92:b3:72:3d:2b:4f:9e:18:4c:2e:fa:71:80:55:89:
77:85:24:b2:f1:64:15:60:01:49:f7:09:bd:f7:ce:
da:54:6c:8b:a8:75:e0:ec:c1:2d:e5:2e:0c:ec:8f:
85:7d:a2:71:94:32:94:e8:5d:ac:9c:f7:d5:55:e1:
1c:8c:fe:2c:74:c2:40:94:ff:1f:0c:1e:73:93:4b:
8e:50:1b:81:12:06:c6:8b:06:bc:1d:c1:e6:bf:81:
f8:85:e5:ec:0c:bc:21:1e:d1:05:a9:07:ca:60:31:
63:5d:a4:8b:3f:43:11:fa:be:dd:22:05:de:7b:cd:
28:03:ef:a7:b9:6c:e1:df:0d:00:8a:66:9d:65:6f:
36:9d:c4:41:be:84:12:8a:5b:af:e7:7c:54:87:ef:
6c:f1:59:fb:36:93:65:4e:64:98:0b:29:f6:19:0f:
1e:8e:ee:d1:02:8f:00:8b:1c:f9:93:e0:15:30:19:
73:fe:f3:94:2a:e7:df:8e:85:a0:7c:02:9d:8f:b8:
c3:59:d3:80:13:4d:10:13:77:b0:89:79:59:6d:db:
91:01:36:49:3e:b6:7f:38:18:2c:93:c2:0b:33:49:
40:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F6:0D:B1:57:7A:50:41:52:5F:6F:30:46:BA:B5:A6:77:C0:95:3A
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1-PYNsVd6UEFSX28wRrq1pnfAlTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
36:56:f1:c8:cd:94:03:7e:c6:58:57:18:61:c3:16:a8:b8:35:
11:91:5f:40:24:cd:2b:3a:51:a8:be:3d:89:23:01:0c:a7:50:
b1:8e:ba:90:f5:1f:2c:51:ef:39:c9:8e:09:73:62:95:72:af:
37:5c:29:40:63:38:41:9b:cf:38:a4:65:2a:b9:dd:e6:40:08:
54:9b:cc:a4:a6:4d:72:76:69:98:79:f9:66:43:1b:6b:bc:11:
32:b8:13:47:69:8d:79:89:65:d3:fc:e1:dd:26:fc:ca:59:b9:
1e:15:63:f1:b4:44:5d:a0:ad:33:ec:3c:9e:5a:62:c5:5e:8d:
b1:5c:56:e2:3a:ab:71:be:30:35:db:0c:d9:97:87:7e:fd:e0:
40:64:a6:9d:5a:94:41:68:3f:3f:6e:c2:63:8c:e1:f9:86:f4:
d3:85:19:54:88:e9:0b:bd:47:84:9b:f8:13:95:31:54:23:14:
c9:70:ee:79:fa:db:66:a1:34:6f:68:0f:27:6b:8c:9f:a8:53:
9d:28:85:0f:10:70:83:5c:a4:d8:e3:3a:74:05:a9:b3:f3:f7:
dc:60:be:f9:f0:26:3f:77:3a:b4:e1:bf:99:2e:35:27:1d:53:
1f:94:09:9a:cc:0f:18:5a:73:99:cd:a4:de:4f:d7:d0:1b:a2:
97:2c:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org