Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1HwYyY9Lq5a2-PDtDU8csi6tqpw.roa
File: 1HwYyY9Lq5a2-PDtDU8csi6tqpw.roa (raw, json)
Hash identifier: 8P4RjA2ixf+hkbcJxq9KayLOV2C7JmzjqRJmo+swIgI=
Subject key identifier: D4:7C:18:C9:8F:4B:AB:96:B6:F8:F0:ED:0D:4F:1C:B2:2E:AD:AA:9C
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01822B5D19566C0B04B99C54D3632A8E2861
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1HwYyY9Lq5a2-PDtDU8csi6tqpw.roa
Signing time: Sat 23 Jul 2022 14:01:37 +0000
ROA not before: Sat 23 Jul 2022 14:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2b:5d:19:56:6c:0b:04:b9:9c:54:d3:63:2a:8e:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 23 14:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d47c18c98f4bab96b6f8f0ed0d4f1cb22eadaa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:96:4d:62:4c:2c:ba:bf:2b:ea:49:29:f9:
87:09:dc:4d:52:69:e8:4a:c9:0b:21:76:89:da:39:
96:a5:07:9b:c1:fc:3d:f3:e9:e7:69:56:4c:08:6a:
59:6d:eb:65:3a:ce:a6:67:bb:c6:49:d0:60:6e:24:
17:24:be:2a:71:f8:0c:20:c3:0a:dd:cb:51:17:9d:
5d:8a:ef:a5:ec:2f:02:97:ac:a6:76:2a:3a:df:99:
06:57:a3:41:5c:f5:f5:09:20:7c:e6:f2:7f:19:4e:
09:36:6a:db:89:51:14:bf:1c:97:30:88:15:43:b1:
26:e6:7c:54:df:99:18:64:35:5c:d8:df:6f:28:5d:
5a:98:0c:0b:cb:a1:48:bb:f5:6b:45:23:55:fa:cd:
3f:83:4e:2f:92:51:8e:ee:b4:a4:a2:1a:68:9f:a9:
ae:69:1e:c0:5c:2a:00:ac:78:2b:1d:54:7c:be:1f:
44:a8:41:77:0c:c5:ca:ea:e0:dc:8b:73:b4:e6:78:
48:29:26:81:f7:ff:22:06:28:31:1b:1d:8b:43:02:
02:69:a3:8e:e3:e2:0a:22:9a:0e:0f:d7:59:03:35:
e5:0b:cd:c1:66:d2:fe:dd:88:38:04:b7:14:a8:7c:
b2:bd:b3:c3:a3:6d:45:d7:8d:41:f4:2f:c8:f9:bb:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7C:18:C9:8F:4B:AB:96:B6:F8:F0:ED:0D:4F:1C:B2:2E:AD:AA:9C
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1HwYyY9Lq5a2-PDtDU8csi6tqpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a7:9d:08:d3:f1:8f:2d:7b:40:01:d8:7a:3e:f5:60:b8:b9:
cc:03:68:a4:7b:c5:e7:4c:f0:1d:16:cf:ba:04:ce:ab:2d:c5:
e4:ba:59:e0:30:fc:f8:be:00:37:c1:3c:31:e6:3f:e7:a4:34:
22:da:7d:14:94:e6:e6:5e:4d:4a:5b:79:bc:34:c0:30:3d:53:
d8:40:59:44:b3:04:0b:d1:cf:e4:db:1a:f3:ab:77:47:06:b2:
31:0c:9a:57:a0:e7:26:1c:70:d9:63:0a:85:ff:ab:31:7d:05:
97:7d:a8:d6:e5:43:46:d9:ae:e7:96:70:6c:74:f1:3f:25:78:
0b:f5:02:2d:33:e0:db:9f:29:b5:07:de:80:8c:a5:7d:e4:ac:
50:2f:78:fe:71:42:c3:0d:13:80:3a:a6:ae:3d:59:e6:4b:7d:
ea:9a:f5:84:c7:08:fa:03:b8:f4:23:22:31:2b:5e:47:86:26:
84:82:d4:53:b5:f3:73:c3:1d:0c:8e:52:df:0c:28:fe:7b:46:
85:eb:79:32:60:9e:aa:96:d3:8d:56:64:9c:3f:77:18:b1:e7:
40:61:79:4d:3f:b7:f8:63:d5:0c:af:96:49:a4:c0:52:18:b6:
d3:12:98:77:04:5e:57:0a:77:d7:ae:93:7d:8c:a6:25:ca:9b:
db:7f:ba:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org