Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UrQCG_S0zx5_MKlvcsp3RQmiuzc.roa
File: UrQCG_S0zx5_MKlvcsp3RQmiuzc.roa (raw, json)
Hash identifier: 2HdNQjuhPEwvqNjwqYbrSl/EfLGdFX4h232QhFSOoCo=
Subject key identifier: 52:B4:02:1B:F4:B4:CF:1E:7F:30:A9:6F:72:CA:77:45:09:A2:BB:37
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01D347CA
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UrQCG_S0zx5_MKlvcsp3RQmiuzc.roa
Signing time: Mon 21 Feb 2022 09:24:58 +0000
ROA not before: Mon 21 Feb 2022 09:24:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.74.225.0/24 maxlen: 24
77.74.230.0/24 maxlen: 24
109.105.196.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30623690 (0x1d347ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 21 09:24:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b4021bf4b4cf1e7f30a96f72ca774509a2bb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:2a:3d:40:b6:df:e2:6a:eb:df:4c:c1:36:
13:4a:53:59:c2:18:e5:8b:36:d3:40:48:55:61:75:
84:fc:a6:6c:c4:61:35:01:8f:5e:5a:56:f8:4f:a0:
73:d7:98:ee:ed:3a:5b:0a:ba:f6:ea:d2:d7:88:cf:
b1:b9:5b:75:ce:01:84:dc:5a:81:bf:54:77:7d:d2:
13:11:07:e0:68:c5:03:be:9f:54:31:f9:ac:8d:29:
14:09:23:2f:77:76:f2:88:98:79:4d:96:7a:92:c8:
75:d2:59:ed:a0:cf:22:0a:2b:fd:6c:f4:92:be:40:
70:c0:f1:21:0b:e3:3b:8f:b3:22:c7:70:31:e5:4f:
49:3e:ce:3d:23:d0:9d:8a:7f:70:46:8a:ee:f1:9d:
e0:3a:a4:92:22:a6:78:47:29:09:e3:2c:f6:85:c5:
3a:42:f6:99:c8:15:e5:dd:16:b7:db:e9:31:c6:63:
f3:b6:7c:28:28:af:9c:63:01:45:aa:2c:1c:28:63:
8a:82:3d:48:41:62:9a:b5:24:31:b1:80:56:a6:22:
f4:c6:0c:7f:21:29:91:22:66:92:d6:4f:9c:ab:68:
05:8c:df:95:56:33:4f:d9:33:b0:8f:90:5c:c0:9e:
d4:93:45:2e:b5:64:ed:50:7d:cf:fc:12:02:81:fb:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:02:1B:F4:B4:CF:1E:7F:30:A9:6F:72:CA:77:45:09:A2:BB:37
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/UrQCG_S0zx5_MKlvcsp3RQmiuzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
77.74.230.0/24
109.105.196.0/24
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dc:5f:77:1a:fb:87:3d:d2:47:67:94:80:01:1d:99:1f:a6:
ad:4c:a7:dc:f1:16:8b:ee:37:12:70:80:b7:74:d7:95:74:09:
53:0b:42:c6:bc:6f:3b:eb:96:5c:8e:e0:90:81:48:61:f3:9d:
46:b0:d4:b1:5c:cd:3d:43:83:64:22:0c:fb:11:f6:e5:47:3d:
73:86:07:8a:ac:0c:d7:45:9f:2f:1a:7f:86:d4:42:96:2b:ae:
79:76:58:9e:d2:32:1d:71:f2:9c:1f:ab:a5:3a:80:a2:1a:32:
fb:ac:5b:c6:e3:95:f3:b4:60:a2:c9:80:b1:1e:80:62:52:f2:
65:28:c8:7b:90:35:58:dd:45:c7:67:b1:f0:3c:8e:7d:ca:a6:
35:02:33:a9:4d:8d:f7:34:f0:f6:f0:34:f8:31:9d:ad:f8:28:
c2:4a:91:73:ec:99:53:a8:2b:7e:ed:cb:f5:2b:de:da:92:21:
f2:62:75:6a:5b:46:0a:6b:de:00:a1:b6:fd:cd:df:f5:64:4a:
95:1e:95:53:a3:30:d1:20:a4:ae:5c:30:f3:e2:65:5a:88:61:
c8:18:37:ed:0b:e8:a9:b9:39:88:91:49:40:7a:ce:1b:46:d1:
00:ca:2c:ec:5f:67:b9:6d:99:d0:1c:a2:1e:29:80:0a:51:a4:
52:f5:0c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org