Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/zZrPDgBQgjGIXbbKs2op9Xx9ktA.roa
File: zZrPDgBQgjGIXbbKs2op9Xx9ktA.roa (raw, json)
Hash identifier: 14WStGvCr+7aeg3zKXQuRj9bUXe7s+pGhiavzLLdkBc=
Subject key identifier: CD:9A:CF:0E:00:50:82:31:88:5D:B6:CA:B3:6A:29:F5:7C:7D:92:D0
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01934528
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/zZrPDgBQgjGIXbbKs2op9Xx9ktA.roa
Signing time: Thu 27 Jan 2022 10:44:33 +0000
ROA not before: Thu 27 Jan 2022 10:44:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 77.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26428712 (0x1934528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 27 10:44:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9acf0e00508231885db6cab36a29f57c7d92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:10:68:02:bb:03:33:2f:bd:58:5e:28:49:f3:
8e:12:6a:9f:1b:31:41:ad:f5:be:a5:89:65:bf:16:
76:fe:e1:78:95:37:4d:60:c1:e9:36:5e:9c:95:dc:
9b:66:b6:17:ba:27:d3:6b:7e:e2:0e:f5:29:74:9c:
1d:04:64:a1:07:1d:a1:f1:2f:75:e1:97:4b:eb:0d:
3b:d2:60:04:39:4f:60:82:21:49:95:01:41:72:b0:
ff:40:5a:ab:1b:8c:ad:13:4d:60:e4:0d:34:4a:4a:
fe:3f:07:44:ad:54:f0:33:bb:35:63:38:0d:a9:b7:
fc:86:6a:dc:f9:59:f6:e7:2b:35:18:25:4a:db:79:
e1:63:6b:18:ce:71:24:5e:d6:42:d8:d7:9a:37:fe:
79:3e:7b:0f:31:eb:6b:5f:1d:0a:e8:c3:d8:35:ed:
e2:d5:f9:4e:04:a8:3a:b0:14:0c:0d:e6:5c:17:a1:
f1:58:47:eb:7b:e3:19:c1:8d:0c:c5:77:ab:b5:8f:
4e:bd:74:04:ca:01:c9:81:b3:40:d4:85:8f:41:eb:
be:d2:81:30:a3:9e:41:ad:8a:26:aa:fc:ad:c3:99:
1b:66:24:5c:dd:df:78:ba:60:d5:5b:3a:2d:80:db:
6d:61:44:cc:7f:98:7c:d0:b8:cc:9c:a4:9e:d4:61:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9A:CF:0E:00:50:82:31:88:5D:B6:CA:B3:6A:29:F5:7C:7D:92:D0
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/zZrPDgBQgjGIXbbKs2op9Xx9ktA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.231.0/24
Signature Algorithm: sha256WithRSAEncryption
90:16:f9:4a:10:06:0f:85:ec:58:40:84:ec:c2:83:c2:7d:b7:
59:fe:0c:a6:19:8e:97:45:11:b7:97:a9:a9:81:f0:3b:ee:8b:
73:85:0b:87:d0:e4:c8:18:29:ca:d8:96:1e:d5:b4:8f:81:16:
2d:87:98:a1:90:85:65:96:fa:27:f6:08:a7:d5:50:f3:ad:e4:
0b:58:91:30:19:3c:77:5e:bb:73:6a:fb:f0:fc:8b:09:81:5d:
e8:cb:1d:87:df:b6:5d:75:0c:20:59:08:b2:00:52:26:ed:1f:
0a:3c:05:5c:0d:98:fb:3b:78:cd:b4:97:2c:f3:9d:80:6b:9f:
58:16:19:3e:3f:65:d9:2f:ed:5f:ab:d8:7c:7c:00:82:f8:b7:
45:a1:ca:70:30:8c:dc:11:3b:b6:5a:4b:15:91:82:3c:2c:40:
58:2e:1c:9f:47:07:f8:f1:7c:d2:cf:71:53:6f:1d:32:58:e6:
d9:43:81:ba:da:2e:5b:17:1f:93:f2:cd:ca:2c:c2:aa:d6:32:
ce:3d:82:0b:7a:0e:cf:2d:72:46:b2:0e:1f:90:4e:23:32:b6:
1b:1d:5d:05:c9:a9:4f:74:25:fd:28:f7:03:9f:f2:77:9b:85:
5d:e3:0e:b3:c1:20:9b:ae:5e:50:ed:fb:b8:83:35:47:9d:bd:
2f:bb:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org