Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/eE34RzSrCoGqD54L3NcnLzNmPE4.roa
File: eE34RzSrCoGqD54L3NcnLzNmPE4.roa (raw, json)
Hash identifier: 81QBgN7sbuYyftoGSN5LW4QF78mgKBmMDuYz56qmX2M=
Subject key identifier: 78:4D:F8:47:34:AB:0A:81:AA:0F:9E:0B:DC:D7:27:2F:33:66:3C:4E
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01E3FD13
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/eE34RzSrCoGqD54L3NcnLzNmPE4.roa
Signing time: Tue 22 Feb 2022 22:24:02 +0000
ROA not before: Tue 22 Feb 2022 22:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43179
IP address blocks: 77.74.226.0/24 maxlen: 24
77.74.224.0/24 maxlen: 24
77.74.228.0/24 maxlen: 24
77.74.229.0/24 maxlen: 24
77.74.227.0/24 maxlen: 24
109.105.194.0/24 maxlen: 24
109.105.193.0/24 maxlen: 24
109.105.206.0/24 maxlen: 24
109.105.204.0/24 maxlen: 24
109.105.205.0/24 maxlen: 24
109.105.202.0/24 maxlen: 24
109.105.203.0/24 maxlen: 24
109.105.201.0/24 maxlen: 24
109.105.200.0/24 maxlen: 24
109.105.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31718675 (0x1e3fd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Feb 22 22:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784df84734ab0a81aa0f9e0bdcd7272f33663c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:ce:52:e7:58:97:01:d8:66:c6:83:9d:a8:
52:ca:d2:eb:65:4e:ff:3e:f2:53:08:59:2a:21:91:
b9:99:c3:90:90:af:2a:85:2c:cc:f3:ab:54:f2:ba:
f1:6a:19:a9:bc:fb:22:50:ec:c5:6d:cc:7d:49:9f:
e0:07:e1:c4:ab:0a:c3:2d:72:6e:ba:74:ce:2a:01:
0b:c4:cb:d1:1a:35:4a:31:da:8d:08:1e:51:74:16:
e5:03:b4:1b:da:20:e1:d3:7d:4c:83:4c:d8:7b:3a:
71:3e:50:48:a1:7c:f4:14:58:8d:1b:4a:6a:26:5a:
8d:ae:cd:02:95:b8:09:70:d2:67:9e:37:92:19:e6:
ee:64:24:52:71:06:a5:c5:8e:bf:fd:34:cb:e7:55:
bc:5f:9a:d9:ca:04:09:f1:20:a3:22:cd:f3:9f:4f:
63:25:3d:a6:c8:c7:c6:8f:77:17:55:a3:6c:0f:06:
03:38:9d:09:d5:67:c4:53:01:12:11:b1:f5:2e:7b:
f4:5d:83:2c:39:88:9f:f1:ec:d1:a4:e4:48:4d:cd:
db:ca:e9:66:4b:0c:fb:d5:9f:cf:bd:18:5b:e3:93:
e5:ff:bb:19:8f:19:a8:d0:fe:9e:49:39:48:2c:aa:
9f:b6:f6:22:89:61:ca:03:dd:1e:40:2c:f3:00:a3:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4D:F8:47:34:AB:0A:81:AA:0F:9E:0B:DC:D7:27:2F:33:66:3C:4E
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/eE34RzSrCoGqD54L3NcnLzNmPE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.224.0/24
77.74.226.0-77.74.229.255
109.105.193.0-109.105.194.255
109.105.200.0/21
Signature Algorithm: sha256WithRSAEncryption
47:c3:bf:f9:37:34:a1:4b:b3:72:1d:0d:f9:a5:5c:b4:ff:2b:
fc:f8:ae:60:e5:20:92:c5:69:2c:5a:23:01:ee:61:d7:80:9d:
22:ff:21:8a:7b:10:a7:48:fe:00:50:2e:d6:02:8f:35:5d:1a:
31:ea:b5:69:a9:7b:ae:4a:9a:31:61:18:53:77:37:8f:02:67:
1d:f7:90:d6:18:46:3a:a4:43:7b:8e:26:19:82:0a:6c:64:fb:
37:7b:92:9c:ff:c3:7a:39:5a:37:d2:34:07:e6:87:e0:98:4d:
d5:b1:34:a2:29:ed:5b:b2:d1:9f:82:5d:cf:4f:29:20:ab:43:
79:23:10:e6:11:83:e6:c5:b3:19:6b:0b:a7:7c:88:d9:5e:e2:
84:f4:ce:1c:ee:1a:63:e1:37:c4:05:2a:db:a9:6f:98:74:41:
c9:f3:a2:c2:e2:5f:12:97:00:b8:f1:56:90:80:86:73:f5:0b:
f3:00:64:9c:bd:f1:69:d2:3f:8a:ed:98:dc:5f:fb:61:9c:e5:
03:d0:eb:68:d0:7a:7f:25:db:e0:57:76:ea:4d:91:8c:db:18:
30:df:65:5e:c7:66:c7:bf:e3:20:f3:f0:fe:5e:d7:89:dd:5a:
7f:d9:2b:a4:60:94:fe:a9:a5:e1:35:ac:27:50:b9:1f:9e:f6:
35:e0:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org