Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Ddf-sNphJOmerjqqAnk2x0rcZuc.roa
File: Ddf-sNphJOmerjqqAnk2x0rcZuc.roa (raw, json)
Hash identifier: hR7TNs7zivHgNQuv4BV3lObMFqYcGkHrLh09iO9yUEY=
Subject key identifier: 0D:D7:FE:B0:DA:61:24:E9:9E:AE:3A:AA:02:79:36:C7:4A:DC:66:E7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01822B5D19C8E4DE8B112AD4B4265616C6D3
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Ddf-sNphJOmerjqqAnk2x0rcZuc.roa
Signing time: Sat 23 Jul 2022 14:01:37 +0000
ROA not before: Sat 23 Jul 2022 14:01:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2b:5d:19:c8:e4:de:8b:11:2a:d4:b4:26:56:16:c6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 23 14:01:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dd7feb0da6124e99eae3aaa027936c74adc66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:8c:96:03:0f:5b:d0:cb:70:c6:e1:d2:f8:
9f:a7:db:b7:59:0d:e8:a9:77:fe:b6:9f:26:c5:38:
0e:4d:d3:fe:1f:44:cc:76:5b:d6:2d:5e:34:ab:f3:
30:60:c7:d6:78:c6:23:bf:ff:b1:b4:d5:a8:2a:1e:
ec:07:8f:ca:a9:34:9d:e2:a4:bc:26:d4:35:d0:8c:
e4:05:39:33:9f:c4:20:ef:5e:78:9b:03:c8:c0:43:
1e:a4:58:29:2d:22:ed:c5:00:2b:64:da:7d:5c:59:
04:00:c8:b6:bf:6b:58:1b:c4:1b:e2:e8:d0:9e:8b:
c4:6b:a2:ef:fc:1c:93:8c:3f:50:3d:16:31:7e:f2:
2c:19:fa:d3:cf:22:ce:4c:47:1b:69:9c:10:5a:0a:
c7:78:8c:bc:b3:c9:a9:c9:7c:28:a5:3a:38:ac:64:
39:0f:16:47:2e:29:77:75:18:11:eb:96:dc:f7:7f:
f4:fa:72:14:ab:bc:4e:1c:ff:e2:48:1b:e0:fd:a1:
8f:59:94:c3:49:a7:83:e3:92:29:b9:9b:b5:11:be:
ec:3a:7f:47:0f:0c:e4:5a:a1:a6:89:fa:71:a4:90:
4c:f7:f2:32:a7:eb:39:c7:c8:6d:38:52:c5:02:b8:
1d:eb:c0:2b:cb:1d:aa:b0:22:8f:ca:dd:81:58:73:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D7:FE:B0:DA:61:24:E9:9E:AE:3A:AA:02:79:36:C7:4A:DC:66:E7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/Ddf-sNphJOmerjqqAnk2x0rcZuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bc:27:85:f5:21:90:10:5e:67:3b:76:d6:da:44:40:a2:3d:
38:43:0a:9e:a3:c1:a1:e1:37:f2:6e:34:01:c8:e1:36:36:c5:
79:a3:bb:da:ef:0e:3d:f4:c8:48:c2:89:3b:b4:67:c1:5a:e5:
36:d6:94:a7:b6:d8:53:23:19:31:a6:05:61:c9:d4:f3:1b:83:
9d:d2:ab:2d:2b:0f:24:85:d7:79:c7:ce:51:64:6f:a1:3d:a6:
2e:aa:65:eb:b2:51:e6:53:8e:76:9e:60:5f:9a:ec:1a:8c:bf:
8a:d1:b2:15:47:1b:3d:ae:03:05:e0:59:79:5c:25:be:44:9e:
46:b6:07:61:25:d1:58:93:77:e9:22:61:74:58:90:c6:aa:96:
1e:2b:89:30:20:54:cd:c9:2c:47:3b:73:95:1a:1b:7c:ac:51:
fc:1f:5f:66:fb:67:4c:8a:b6:31:18:70:c8:ab:51:2e:34:51:
96:72:12:1d:8e:14:94:72:3a:b5:22:ee:71:ba:de:8f:d2:b6:
b8:4b:3a:5e:f0:3d:65:16:af:fd:fb:68:2f:f3:7c:8e:39:08:
9c:07:96:db:a8:91:8f:22:6e:2f:95:d6:97:bc:91:e1:e4:d6:
3a:45:66:6e:6c:70:1e:b8:df:ef:48:59:23:61:5f:e9:6b:c5:
f6:e4:b3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org