Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1MIW7DFZ943bRO_ZjrMYlQdy0tw.roa
File: 1MIW7DFZ943bRO_ZjrMYlQdy0tw.roa (raw, json)
Hash identifier: aon3x1Y5FkYl+Wg5SLKOiftCipPhr5NIIQurxZn0XA4=
Subject key identifier: D4:C2:16:EC:31:59:F7:8D:DB:44:EF:D9:8E:B3:18:95:07:72:D2:DC
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018873DF44443D1EE2E777800EEF5B78A880
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1MIW7DFZ943bRO_ZjrMYlQdy0tw.roa
Signing time: Wed 31 May 2023 22:13:11 +0000
ROA not before: Wed 31 May 2023 22:13:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.74.228.0/24 maxlen: 24
109.105.197.0/24 maxlen: 24
109.105.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:df:44:44:3d:1e:e2:e7:77:80:0e:ef:5b:78:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: May 31 22:13:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4c216ec3159f78ddb44efd98eb318950772d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:14:f2:4b:44:51:36:97:a6:9b:cd:49:b1:
c0:31:8a:47:21:40:01:3f:88:d7:25:f4:6a:6e:33:
e8:20:04:ec:66:0a:4a:58:c2:63:53:e6:2a:db:0f:
7f:48:24:c6:e6:77:42:d1:56:30:58:0e:ef:6b:dc:
a2:87:f1:31:68:bb:fe:a1:0b:61:44:e2:aa:12:26:
4d:3b:65:7d:3f:26:24:6f:7f:44:8e:71:86:8d:f6:
4c:ff:3f:7e:7b:cc:d9:b5:41:64:24:49:c0:64:99:
17:d1:a0:11:e7:30:5c:0e:2b:0a:07:c1:e5:c4:8a:
d3:88:6c:51:c8:ca:07:cc:0e:f9:a4:1f:76:9e:75:
b2:80:0d:a8:7c:f9:70:54:57:13:d9:dc:1b:88:8d:
ae:db:a9:04:18:10:bf:16:ac:8c:ac:67:41:c0:06:
a6:7b:ab:87:e5:32:55:3d:dc:1d:bb:dd:e0:cd:f6:
24:47:f9:73:f9:ef:7c:40:28:c3:6b:3e:52:53:c3:
08:ac:84:eb:b9:81:1f:25:86:60:2f:f1:43:f9:fa:
55:9e:fe:81:f2:f5:b2:ea:ae:ad:87:6c:a5:06:bb:
e1:66:74:fd:08:a4:77:28:83:5b:ee:58:bf:f7:3d:
99:3f:05:23:66:f5:8f:ba:13:1b:90:d1:fe:13:62:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:16:EC:31:59:F7:8D:DB:44:EF:D9:8E:B3:18:95:07:72:D2:DC
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1MIW7DFZ943bRO_ZjrMYlQdy0tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.228.0/24
109.105.197.0/24
109.105.199.0/24
Signature Algorithm: sha256WithRSAEncryption
07:60:e3:89:75:44:d7:aa:e9:1b:70:bf:12:90:74:b9:56:8e:
15:db:50:92:95:cc:a8:f7:10:8a:ee:7c:6c:c5:32:a5:61:6d:
54:29:bc:b1:af:51:44:9c:ac:c4:cc:31:f9:c6:9d:fe:ba:db:
b4:64:ea:82:be:e8:61:57:b6:85:fc:25:51:af:4a:c9:21:e6:
13:0b:4d:79:97:66:ce:85:0e:69:51:e9:68:e7:fe:0d:b6:8b:
e1:dd:45:ad:5b:e2:d0:dd:aa:ca:d3:52:19:61:b2:0d:56:40:
83:35:a4:31:40:77:ba:e8:26:22:3f:f8:0d:72:4d:b3:84:dd:
f8:e7:68:be:e8:f3:0f:f8:a9:94:6d:cc:16:6e:c8:db:a6:5b:
b2:01:cc:6c:b2:0a:b2:64:75:ad:9a:52:7e:a1:9a:ca:ba:e5:
f9:99:07:c9:1b:97:0c:6d:30:dc:24:92:7e:73:81:9c:b1:0c:
1f:73:4a:27:b7:6d:ba:40:32:0a:e6:35:eb:40:23:0a:2a:ef:
26:ca:47:64:73:65:d2:15:ed:0b:91:e3:e5:12:8c:be:85:f1:
48:82:78:78:3b:00:41:dc:2c:72:4f:ac:31:28:a6:f2:df:2d:
f6:a3:f5:33:f5:34:f5:0e:d0:92:38:e0:da:6b:fb:4c:f8:7c:
2b:a4:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:07:25 2025 by rpki-client