Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/fOVt4iUoEISUl4YHZtf_t2IXpJ8.roa
File: fOVt4iUoEISUl4YHZtf_t2IXpJ8.roa (raw, json)
Hash identifier: 1vyyrD1rLYlxUWaFUIaBnoyxShNIPQH2iUvoiXbmReE=
Subject key identifier: 7C:E5:6D:E2:25:28:10:84:94:97:86:07:66:D7:FF:B7:62:17:A4:9F
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 020B64D2
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/fOVt4iUoEISUl4YHZtf_t2IXpJ8.roa
Signing time: Wed 09 Mar 2022 12:39:12 +0000
ROA not before: Wed 09 Mar 2022 12:39:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43179
IP address blocks: 77.74.226.0/24 maxlen: 24
77.74.224.0/24 maxlen: 24
77.74.228.0/24 maxlen: 24
77.74.229.0/24 maxlen: 24
77.74.227.0/24 maxlen: 24
109.105.206.0/24 maxlen: 24
109.105.204.0/24 maxlen: 24
109.105.202.0/24 maxlen: 24
109.105.203.0/24 maxlen: 24
109.105.201.0/24 maxlen: 24
109.105.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34301138 (0x20b64d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Mar 9 12:39:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce56de2252810849497860766d7ffb76217a49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:99:79:de:9a:5e:a1:49:cc:94:71:57:f1:
b7:b8:3a:a7:f3:4e:b5:65:b3:f8:8c:ef:8d:93:5f:
4f:7a:e4:da:95:42:81:ee:a3:af:47:e6:2f:e7:7c:
a6:f9:c6:49:d1:46:0c:c1:3a:e6:ba:70:24:d3:f3:
5d:68:fd:bf:0a:df:a0:3a:38:bc:f8:a2:b6:6e:2b:
cc:0d:93:42:d1:7a:6a:c8:4d:b6:9e:29:27:d3:76:
69:8b:63:77:79:3c:b2:ec:58:ab:64:e3:9a:69:f2:
25:04:61:c2:6d:cb:46:f5:1e:e2:1b:aa:a0:2a:a0:
50:3d:51:1c:a4:be:09:40:44:09:c2:16:d5:02:05:
64:cc:74:e8:3e:d8:91:4a:7a:84:7c:dd:b4:03:8a:
ab:6f:10:0c:3a:aa:c4:87:b3:5b:03:28:8a:d0:0c:
1f:17:72:c2:2c:30:66:40:19:9f:e5:7f:73:c7:68:
9c:3a:ab:bd:49:f2:f9:9d:82:f5:cf:26:b6:49:8d:
2c:7e:66:67:39:ea:77:6f:b3:00:2c:97:0d:eb:0c:
fb:b9:40:38:69:31:95:69:3b:e7:e0:75:22:16:1b:
43:40:16:04:d9:e6:33:12:22:5b:12:da:a9:bd:6c:
9d:b6:bd:e2:e3:f7:1d:a0:42:f3:dc:a7:43:66:b8:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:6D:E2:25:28:10:84:94:97:86:07:66:D7:FF:B7:62:17:A4:9F
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/fOVt4iUoEISUl4YHZtf_t2IXpJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.224.0/24
77.74.226.0-77.74.229.255
109.105.200.0-109.105.204.255
109.105.206.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0c:ed:90:38:e2:0a:1f:36:c6:c0:49:36:95:2b:ec:b7:ee:
f6:63:f2:14:1d:d1:36:2b:24:14:d4:c0:ee:74:b0:f5:f4:43:
cf:06:b6:be:c5:a6:c8:20:8a:2e:3b:5b:5e:47:b7:91:a9:a3:
bd:6e:88:5c:99:4a:dd:d3:ac:ae:b5:4b:c1:a5:80:00:f2:d3:
c0:83:78:bd:21:dc:35:68:6b:41:13:f4:ad:8d:8f:e2:29:10:
fd:a3:8b:51:33:8d:fc:00:69:8c:30:e4:66:59:37:cd:57:db:
44:65:6f:6b:7a:0c:4e:47:b8:a7:f7:99:67:2c:11:70:57:96:
8b:84:16:b3:68:91:a1:c2:c0:8c:7f:b5:8a:ff:52:dd:20:06:
3e:ed:bc:8e:88:aa:cf:f6:ec:5f:44:e3:41:eb:b2:78:b7:66:
98:12:7d:21:c3:e6:d0:e9:3a:b5:5c:ef:2a:62:97:a7:9f:52:
e1:6b:f6:22:3d:ff:22:de:30:0c:c8:ae:c4:05:c0:41:24:f2:
99:bf:10:63:f7:d5:58:ec:d0:e5:36:c2:e3:23:38:ae:23:6c:
d0:34:1a:3c:53:c5:7e:15:be:42:d4:f5:c9:10:cd:e0:16:f6:
b6:04:dc:36:fa:f0:25:c1:fd:b3:19:3c:98:3a:e7:f8:67:6d:
bd:83:c7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org