Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/qdkKD-mUvUlOOd1NpU-8RXMRirc.roa
File: qdkKD-mUvUlOOd1NpU-8RXMRirc.roa (raw, json)
Hash identifier: Yc7YxhkF5KCd9tuGQzETGmA98PrpZC1UV8LutHf/aEw=
Subject key identifier: A9:D9:0A:0F:E9:94:BD:49:4E:39:DD:4D:A5:4F:BC:45:73:11:8A:B7
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 020A37EF
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/qdkKD-mUvUlOOd1NpU-8RXMRirc.roa
Signing time: Wed 09 Mar 2022 12:39:12 +0000
ROA not before: Wed 09 Mar 2022 12:39:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 77.74.225.0/24 maxlen: 24
77.74.230.0/24 maxlen: 24
109.105.193.0/24 maxlen: 24
109.105.196.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34224111 (0x20a37ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Mar 9 12:39:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9d90a0fe994bd494e39dd4da54fbc4573118ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:47:56:a5:a6:08:0b:e2:53:e9:fd:af:90:
df:0f:d5:ae:aa:a2:40:cf:46:8c:0e:f4:1e:72:1a:
a0:79:3d:47:0c:cc:44:e4:38:36:d5:af:a2:00:e8:
40:b5:f8:59:9d:88:a9:39:d6:cb:a8:ec:d2:f8:c6:
9b:81:d0:dd:3b:dc:53:99:e2:d3:3a:43:87:bb:5e:
93:86:35:6c:45:d0:34:80:1c:2e:bb:dc:2b:09:b3:
fc:9f:c2:84:46:d3:73:9b:0e:87:11:b7:e1:e7:ac:
59:52:12:b0:64:b4:8d:b6:17:e0:5c:f2:b0:6d:8e:
db:ca:6b:d4:25:d9:1c:14:8e:23:79:92:28:47:50:
92:eb:c5:4b:32:ef:d7:59:53:99:dc:c2:a2:ba:a7:
48:05:7a:7f:37:cd:6f:9f:99:fc:66:c6:18:ac:9f:
4c:6e:36:e5:2e:b5:8a:f4:14:48:83:26:18:a0:dd:
ee:74:4b:54:a0:9b:aa:01:00:fe:96:62:c2:d5:bd:
61:f9:4b:1f:7e:4f:88:48:7d:ea:e8:ce:97:ca:38:
1f:fc:6f:62:c9:28:25:e5:a1:06:f0:7a:f7:c5:54:
37:df:a1:8f:55:d0:c9:2e:a2:e1:20:4f:a9:17:dd:
2d:79:77:8f:a4:94:3a:e9:d3:e7:20:4f:cf:eb:2d:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:0A:0F:E9:94:BD:49:4E:39:DD:4D:A5:4F:BC:45:73:11:8A:B7
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/qdkKD-mUvUlOOd1NpU-8RXMRirc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
77.74.230.0/24
109.105.193.0/24
109.105.196.0/24
109.105.198.0/24
Signature Algorithm: sha256WithRSAEncryption
13:59:aa:30:44:69:43:d3:35:1f:84:64:52:46:ce:e3:96:99:
08:d6:2b:e4:f3:9b:a1:a1:b2:6c:0a:11:ea:39:ba:3b:8a:17:
b3:99:a7:8e:fe:02:68:22:70:d7:a6:3f:27:8d:53:f9:a8:c0:
d2:c4:81:85:86:68:67:1d:cb:a4:ea:2b:5c:2e:d3:c8:3c:e4:
a6:00:83:1e:7f:91:81:44:af:ad:14:62:31:11:ac:67:6d:e1:
90:cb:a9:87:a6:8d:83:c2:c8:3c:3b:43:8e:b9:61:3b:b6:be:
b2:8d:39:ba:d2:0e:81:99:9e:6e:2d:4c:de:13:c1:ae:c6:7a:
67:f1:74:4e:a8:de:aa:19:df:53:7a:42:c7:0e:90:55:dc:e4:
5a:df:69:d8:ae:45:98:b1:20:11:0e:b5:d4:bd:32:3d:6a:a4:
a0:01:a9:e4:31:ea:aa:ae:cd:75:c8:f3:53:96:32:e8:55:06:
ef:09:74:9e:c2:46:71:5f:9b:7b:61:4f:ae:98:08:42:f3:f8:
72:6c:c5:8c:43:e9:f6:3b:53:cd:d9:e6:d5:92:f0:59:f9:1b:
2c:d4:7a:0a:87:df:fa:c6:53:0d:12:73:f9:eb:c4:07:2e:4c:
5d:1b:d7:23:ee:be:ab:b9:bc:21:22:88:13:29:71:e5:37:2d:
93:46:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org