Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/XG1n6zBlPhH1bxpw9y9__pAbnlA.roa
File: XG1n6zBlPhH1bxpw9y9__pAbnlA.roa (raw, json)
Hash identifier: bkSQnux1PSrHfxDxP7WIimVt59rDZboPaeJWjgEl9cg=
Subject key identifier: 5C:6D:67:EB:30:65:3E:11:F5:6F:1A:70:F7:2F:7F:FE:90:1B:9E:50
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01D630B1
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/XG1n6zBlPhH1bxpw9y9__pAbnlA.roa
Signing time: Mon 21 Feb 2022 10:36:59 +0000
ROA not before: Mon 21 Feb 2022 10:36:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43179
IP address blocks: 77.74.226.0/24 maxlen: 24
77.74.224.0/24 maxlen: 24
77.74.228.0/24 maxlen: 24
77.74.229.0/24 maxlen: 24
77.74.227.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
109.105.194.0/24 maxlen: 24
109.105.193.0/24 maxlen: 24
109.105.206.0/24 maxlen: 24
109.105.204.0/24 maxlen: 24
109.105.205.0/24 maxlen: 24
109.105.202.0/24 maxlen: 24
109.105.203.0/24 maxlen: 24
109.105.201.0/24 maxlen: 24
109.105.200.0/24 maxlen: 24
109.105.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30814385 (0x1d630b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 21 10:36:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c6d67eb30653e11f56f1a70f72f7ffe901b9e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:ef:30:28:dc:ee:d7:16:f8:f9:7d:ff:72:
42:22:f0:b3:7a:ef:a1:bc:07:36:de:c5:19:40:73:
66:18:14:b2:46:97:0a:f4:f7:81:1a:ab:23:c2:65:
bc:0d:a1:99:da:0b:19:90:b2:3e:cb:96:91:52:e2:
d9:6c:25:62:6c:41:1b:ac:43:e9:ff:48:29:9f:25:
68:10:c3:72:ba:29:82:e3:95:13:26:2e:69:bb:fe:
ff:56:06:c8:c8:87:e0:ce:f9:3c:84:f8:04:8b:cc:
26:e2:4c:f8:a5:1d:eb:53:ee:fc:2e:58:f3:96:29:
22:a8:fc:03:c8:d4:a4:04:e5:94:5d:70:e2:49:5c:
30:d3:09:b1:a1:46:4e:f1:5c:93:03:b8:32:92:cb:
da:f8:b2:a5:ac:fe:9b:93:da:27:f2:25:59:da:ca:
13:e3:c8:b8:cb:48:0f:fe:c2:d8:c3:10:1e:c5:b0:
c6:45:80:3f:74:f7:62:21:05:e8:c9:3d:18:90:5c:
52:d8:ae:82:a6:f1:b4:3d:6e:86:32:2a:87:6c:fb:
dc:8a:53:37:91:7d:12:4f:bf:ce:8c:5a:c9:0e:62:
99:15:9c:8f:6e:a0:2d:76:70:ec:1d:d9:1c:51:ac:
34:60:39:3c:19:f9:2a:8e:48:55:23:9b:4c:c1:f8:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:67:EB:30:65:3E:11:F5:6F:1A:70:F7:2F:7F:FE:90:1B:9E:50
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/XG1n6zBlPhH1bxpw9y9__pAbnlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.224.0/24
77.74.226.0-77.74.229.255
109.105.193.0-109.105.195.255
109.105.200.0/21
Signature Algorithm: sha256WithRSAEncryption
40:7f:ea:77:f5:84:01:70:c0:a0:5d:b2:9b:7d:7c:ed:0c:c2:
18:c7:c5:ed:71:25:d2:34:af:14:b0:26:19:3a:63:78:36:ce:
42:c8:e2:72:f5:9f:3d:88:da:10:96:57:0f:27:9c:e8:d2:59:
3b:d3:75:bb:b2:db:6c:6d:9e:61:8d:ae:05:97:e0:8c:64:32:
50:43:ae:bb:1a:b8:ea:46:52:cf:fe:ca:12:eb:1c:ef:06:9d:
6c:8c:3e:c8:5f:76:da:fe:9a:df:d2:92:f5:c3:7a:c0:a3:58:
dd:2e:0c:c2:9d:ae:7d:6a:62:40:24:4c:91:a2:bc:c3:08:53:
18:60:16:0c:7a:db:9f:6c:55:77:d4:9b:ba:ca:58:21:f2:26:
02:05:9b:7a:08:92:6b:19:c3:ed:da:6d:9a:9a:c0:8d:55:8f:
51:5e:4f:55:62:24:7d:34:75:b1:eb:9a:e5:dc:ff:e7:3b:1e:
a4:30:7e:5f:95:e8:31:19:6d:2c:33:8c:c7:c0:b5:18:fe:09:
2f:07:0b:d5:7b:6e:2e:43:65:b7:19:0f:30:17:ac:66:c0:ca:
0b:ef:2a:fb:8a:68:6c:48:e6:71:47:2f:bf:31:97:f0:71:ec:
15:e7:a4:68:ef:08:df:2d:c4:e5:05:75:50:96:4d:22:a4:20:
f8:2c:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org