Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/MkZBPmcRoVcTCzue4XO8IuNIrts.roa
File: MkZBPmcRoVcTCzue4XO8IuNIrts.roa (raw, json)
Hash identifier: HljIhAP9kD8S6oKVBVyfnKQqfElFF1AGCvNHAjks5No=
Subject key identifier: 32:46:41:3E:67:11:A1:57:13:0B:3B:9E:E1:73:BC:22:E3:48:AE:DB
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 02BFD650
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/MkZBPmcRoVcTCzue4XO8IuNIrts.roa
Signing time: Wed 25 May 2022 12:04:14 +0000
ROA not before: Wed 25 May 2022 12:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.74.225.0/24 maxlen: 24
77.74.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46126672 (0x2bfd650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: May 25 12:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3246413e6711a157130b3b9ee173bc22e348aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:72:4e:27:73:b9:c3:91:cd:17:a4:3e:5c:
69:96:61:75:0c:7a:5e:be:ea:f1:a5:d5:b6:de:ef:
47:bd:0d:89:e1:3a:51:b5:8a:d3:34:62:c1:e0:60:
cd:60:14:3c:60:10:33:5e:aa:27:a9:31:b2:95:82:
4e:d0:c5:2a:dd:92:ee:f6:a4:84:2b:e3:66:53:99:
8f:ad:eb:21:0c:a9:d8:76:bc:4e:12:6f:69:61:26:
fd:97:c6:4d:9b:f6:45:b2:ed:86:c7:f6:cd:ac:7a:
fd:a1:b0:a1:17:fc:fe:3f:43:f1:fa:21:e5:5c:20:
e8:a7:52:71:ff:fb:fc:b6:40:20:24:0f:df:f1:b4:
44:76:7c:f7:e6:06:62:b9:c0:79:12:40:08:8a:c7:
2b:72:af:5c:72:df:1b:bd:7d:49:5f:36:4f:06:0d:
38:bf:1e:7a:54:0f:3d:04:a1:94:aa:9b:e1:55:9a:
f5:5a:e1:85:00:9a:05:bb:d2:41:13:41:23:1a:0d:
f6:ef:0d:c9:8f:45:3a:83:9d:ec:09:f0:37:7e:aa:
f1:48:69:16:e1:d7:56:96:e3:e5:82:01:46:29:60:
c4:7e:e6:ab:63:aa:59:79:20:33:3a:64:2e:39:31:
33:6d:22:ce:0e:84:1a:a3:b0:47:35:71:89:76:da:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:41:3E:67:11:A1:57:13:0B:3B:9E:E1:73:BC:22:E3:48:AE:DB
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/MkZBPmcRoVcTCzue4XO8IuNIrts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
77.74.230.0/24
Signature Algorithm: sha256WithRSAEncryption
76:26:3b:59:a2:76:36:ed:01:6d:03:5c:3b:c6:76:29:e8:99:
5b:92:8e:d3:f3:16:61:00:26:7e:5d:f3:64:ec:41:65:99:a9:
c3:96:2f:d7:df:59:f7:c8:49:de:7a:84:5e:8c:ec:d5:66:33:
fe:25:84:cc:54:64:d8:03:22:9c:13:df:3f:b1:ec:fe:de:e3:
6b:0a:09:87:ac:cd:37:5b:df:33:9b:8f:47:c8:01:b0:af:b5:
ca:3d:04:33:69:c0:85:a1:c2:30:e5:62:25:f3:5d:b6:9f:ca:
0d:d5:95:f8:9a:f2:74:90:fa:1e:42:d4:b9:ee:99:eb:b4:27:
79:17:64:80:4b:eb:00:e0:b4:0a:13:dc:37:4c:75:e7:7f:42:
a6:fa:be:57:34:b7:74:a3:0a:66:bc:ad:f0:d3:43:04:7e:9a:
97:96:46:07:32:b8:04:b7:13:32:25:be:2d:e7:0a:ef:24:4d:
6e:84:a4:64:87:20:73:6b:67:da:f2:d2:5d:9d:b9:d4:18:3f:
37:4a:26:b1:ec:41:a6:42:4a:a4:f4:5b:36:04:4d:90:a6:16:
bc:f9:47:38:72:3a:dc:f0:6d:fe:3f:5d:51:56:d7:18:32:e7:
0b:91:33:20:ea:28:32:74:32:0c:11:a2:e5:8c:07:ff:d4:63:
c9:68:01:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org