Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ITTZKhX8Q8aEvE1ieAIKyV_febc.roa
File: ITTZKhX8Q8aEvE1ieAIKyV_febc.roa (raw, json)
Hash identifier: mGAYxSbEWrpc9NPWOFy6bYRMR3wswSwTBqUY4KQ3usY=
Subject key identifier: 21:34:D9:2A:15:FC:43:C6:84:BC:4D:62:78:02:0A:C9:5F:DF:79:B7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0188F6B2DBCD91BB8729745EDA3455C2ADBB
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ITTZKhX8Q8aEvE1ieAIKyV_febc.roa
Signing time: Mon 26 Jun 2023 07:54:56 +0000
ROA not before: Mon 26 Jun 2023 07:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:b2:db:cd:91:bb:87:29:74:5e:da:34:55:c2:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jun 26 07:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2134d92a15fc43c684bc4d6278020ac95fdf79b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:8c:c2:5c:09:23:c6:73:fe:e3:87:8c:b1:
3b:25:e2:65:84:4d:0e:55:d3:16:28:6d:e8:cd:9e:
0b:09:3c:42:56:3a:79:ce:ed:80:2d:13:c5:53:49:
d8:ff:df:ac:20:17:87:12:e9:8e:23:b1:bb:b8:f1:
dd:0c:12:0a:dd:a1:1f:9a:0d:3d:b8:09:c8:92:49:
d3:7c:52:43:bd:a5:78:61:62:d4:60:be:aa:96:43:
df:2d:e5:da:49:bf:c2:7b:5e:6e:16:b3:d6:1a:82:
ee:cc:df:df:da:9f:1c:05:00:2f:76:7a:4e:1a:4d:
4a:33:a2:fe:6f:b2:2e:cf:af:69:16:15:79:7f:67:
ea:74:55:a9:96:c6:05:bf:05:54:11:79:6f:6a:18:
8d:ee:f3:d5:1a:bd:eb:d4:48:5f:41:6b:f2:3e:d9:
29:24:2e:71:86:ab:0a:71:fb:51:af:69:c5:2b:e3:
32:a4:58:a4:7a:96:0c:2b:66:7d:d3:e8:1e:f1:60:
59:ae:1b:46:cc:17:ed:3b:d2:71:97:5a:43:d1:1a:
4b:15:a5:d3:62:4c:88:77:64:84:c2:4e:49:7f:5a:
3f:ac:2d:8d:16:a6:31:e4:3d:6e:cc:83:30:41:0b:
fa:cf:59:4e:a5:0c:2c:5b:8a:27:d8:ee:67:b7:c0:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:D9:2A:15:FC:43:C6:84:BC:4D:62:78:02:0A:C9:5F:DF:79:B7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/ITTZKhX8Q8aEvE1ieAIKyV_febc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
73:46:21:df:30:9e:ff:81:be:16:57:9c:61:0a:80:32:ad:94:
21:74:0b:41:64:45:0f:fa:5b:8a:7f:04:4e:12:0a:4c:02:d6:
f5:d8:74:de:56:0f:5d:dd:69:f6:74:7c:81:22:c5:6f:09:8e:
7c:4e:4a:30:60:49:68:7d:83:f6:36:c0:1b:64:af:d8:c0:b4:
d3:37:17:62:8e:1e:22:c1:1f:72:1a:28:65:0f:a5:35:f9:04:
d5:7c:33:f6:dd:a7:91:b1:42:4d:47:a8:54:bc:9f:aa:b5:27:
01:20:6d:aa:2c:9a:c4:20:84:8d:a9:9f:ac:90:24:f0:85:a6:
49:25:65:40:e6:24:c1:12:57:ef:bb:ed:10:ef:a2:b7:6d:bc:
3b:a4:8c:a5:e4:3e:65:ed:50:e5:66:1b:8f:f9:ca:f3:d2:43:
0f:fd:6a:af:58:37:1a:46:6c:44:36:3d:c0:ae:a2:eb:dd:35:
b5:ed:a9:40:83:5c:28:7b:81:64:03:b2:65:8c:43:c4:8f:5d:
a4:d9:6b:10:42:72:47:42:40:e3:83:5f:77:94:77:f9:41:17:
c1:ee:07:fa:fa:de:11:e0:ab:44:8d:49:89:b7:65:73:bb:93:
42:e3:29:06:93:2a:4f:cc:fe:f6:78:31:fb:36:cc:52:18:cb:
5a:f0:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:09:00 2025 by rpki-client