Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/65DXx3RCVfe3jLguj2jTzi-vvD8.roa
File: 65DXx3RCVfe3jLguj2jTzi-vvD8.roa (raw, json)
Hash identifier: pb/5q9jq8TriZ27IooPUnsglCbQbpTDWJ1muum/Kbcs=
Subject key identifier: EB:90:D7:C7:74:42:55:F7:B7:8C:B8:2E:8F:68:D3:CE:2F:AF:BC:3F
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 02BE14A7
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/65DXx3RCVfe3jLguj2jTzi-vvD8.roa
Signing time: Tue 24 May 2022 22:43:13 +0000
ROA not before: Tue 24 May 2022 22:43:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.74.225.0/24 maxlen: 24
77.74.230.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46011559 (0x2be14a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: May 24 22:43:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb90d7c7744255f7b78cb82e8f68d3ce2fafbc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:43:cf:24:c7:a4:18:3b:b7:72:b0:58:ac:
d5:00:71:8b:35:b7:65:d4:55:98:48:01:29:2c:2d:
ad:88:39:02:07:cc:07:5c:54:15:b3:2b:d6:71:e6:
82:a2:81:15:f0:3f:fa:12:3d:43:ef:4d:34:ec:00:
e6:c1:71:85:ae:43:83:71:36:15:fe:39:bc:58:3e:
59:67:b4:99:f4:cb:27:bb:58:ce:66:18:c8:89:e3:
7f:f6:5b:42:0d:b4:b1:8b:75:79:d6:0f:64:40:19:
86:22:d6:2a:b9:ee:b3:cc:16:87:7a:1a:cd:75:64:
d6:19:20:0c:48:b1:85:9a:31:45:16:e3:e2:53:e6:
de:e8:d0:8e:95:3e:e2:7d:04:1f:c6:0c:07:39:7d:
f6:ad:4c:07:7b:d4:ed:42:72:f5:50:8c:5e:49:cb:
d6:3b:39:28:c3:a6:e3:05:3f:5b:77:0b:b3:59:f4:
0f:4f:29:6a:91:75:a9:16:e2:c9:f6:5e:c4:38:58:
7e:a0:fc:c2:de:b5:97:a5:c6:a1:00:05:cd:6f:bd:
49:c9:52:6f:d0:8a:45:f7:37:e7:86:13:88:f4:86:
5b:f7:0e:cc:41:ee:65:38:ff:82:69:9b:45:e8:47:
a0:25:c0:85:3b:48:a0:00:86:36:ea:35:da:37:97:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:D7:C7:74:42:55:F7:B7:8C:B8:2E:8F:68:D3:CE:2F:AF:BC:3F
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/65DXx3RCVfe3jLguj2jTzi-vvD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
77.74.230.0/24
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:50:b3:7f:d1:9f:86:15:d1:43:ea:40:20:2e:16:51:c7:5b:
b0:e1:0a:5e:f8:58:78:4d:c4:8e:10:d9:5f:96:23:04:34:89:
a4:03:b9:09:7f:15:9e:98:13:44:0b:b5:44:23:55:c5:21:87:
0a:6a:45:fb:07:ed:95:df:ef:b2:0d:f9:ee:df:e4:d4:88:99:
03:2e:ab:bc:85:c0:d4:a1:6d:6b:a3:65:e3:24:ba:16:cf:c5:
e4:e5:dd:bc:7c:fc:20:49:f8:d3:b6:3d:1c:f8:0d:c9:70:f3:
c2:3a:ab:0d:18:f3:21:0a:05:10:78:f2:be:7d:60:e3:d6:f9:
e3:47:e6:55:6f:85:85:a0:81:b8:4d:4f:6b:e0:ab:73:b8:42:
8b:8e:28:f1:3a:09:ab:b3:30:ec:4e:e2:c5:72:be:51:3a:70:
08:61:cf:0b:bb:37:3e:cd:8e:bb:8d:75:5e:7a:a8:4d:58:63:
37:a1:94:47:41:5d:ce:d2:9c:f9:bb:4c:ee:e0:76:73:68:2e:
25:02:0d:bf:4f:22:10:bb:9a:4e:a0:a5:3f:94:f7:21:a7:d0:
11:5d:f8:73:31:d3:a4:cf:e2:bb:84:e4:05:0c:f7:52:6a:bf:
95:df:37:81:a8:df:14:43:34:fb:52:27:59:11:92:59:0e:3c:
f6:f9:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org