Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/eQIpMjltZWGryUaOGou7RmrcoXY.roa
File: eQIpMjltZWGryUaOGou7RmrcoXY.roa (raw, json)
Hash identifier: JKa43WUgbkx7B5BbHYfuBo0rdo3WmL5GbCe077s9bmI=
Subject key identifier: 79:02:29:32:39:6D:65:61:AB:C9:46:8E:1A:8B:BB:46:6A:DC:A1:76
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 06003AF0
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/eQIpMjltZWGryUaOGou7RmrcoXY.roa
Signing time: Sat 01 Jan 2022 13:55:35 +0000
ROA not before: Sat 01 Jan 2022 13:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207944
IP address blocks: 77.225.29.0/24 maxlen: 24
212.145.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100678384 (0x6003af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 13:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79022932396d6561abc9468e1a8bbb466adca176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a1:bc:35:04:00:e2:d5:ab:32:9f:f7:d2:
e8:95:88:0b:51:b4:57:6a:ad:dc:36:00:31:6c:e3:
ee:28:78:94:ba:e3:20:12:e7:68:06:97:d8:05:13:
b6:b6:3d:4a:c2:ea:78:62:d8:77:0f:54:39:97:20:
93:a2:15:97:7e:5a:fa:9f:82:b3:d9:fc:14:ea:a7:
25:54:ba:85:4e:5f:52:30:c9:85:2d:d4:a6:b8:af:
57:7f:93:f9:64:dc:ab:f6:6f:9b:9f:a2:d5:9a:e7:
db:e3:47:28:0f:1e:63:e6:a2:03:87:3f:9d:5b:86:
a9:62:c4:81:2d:cd:49:2d:8b:23:e7:3a:ab:0f:2e:
1a:88:57:83:8e:6d:af:38:09:18:58:89:e4:d4:b0:
76:5f:0a:80:13:47:83:5b:b8:38:f6:7a:5a:70:26:
cf:1f:80:fe:d9:64:f6:e0:ab:99:c0:5d:eb:00:81:
ce:9a:66:4b:32:06:ed:af:df:f5:ac:74:b7:17:a8:
9a:24:3b:23:31:1b:d2:53:62:ff:dd:da:f4:dc:3b:
d7:c6:46:ff:bd:60:9d:3a:4e:14:c2:9f:59:c8:2d:
14:78:75:b8:05:7c:58:f5:44:cb:ae:7c:0b:85:4f:
15:9d:ce:3a:00:5a:cd:b1:99:44:f9:3e:75:01:9c:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:29:32:39:6D:65:61:AB:C9:46:8E:1A:8B:BB:46:6A:DC:A1:76
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/eQIpMjltZWGryUaOGou7RmrcoXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.225.29.0/24
212.145.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9b:9d:79:ce:7c:7b:d9:7f:13:9c:b5:1a:a6:b6:fa:9c:f6:
46:0d:ff:64:af:79:b1:3a:eb:08:97:5e:52:53:4b:d0:ee:4b:
17:88:4f:6b:c2:21:e6:41:2a:f6:f4:8b:14:9a:04:d5:3d:71:
27:58:b8:0e:41:a7:48:82:f1:2f:1f:9c:e9:18:57:d7:dc:23:
e0:25:ec:32:b4:b9:53:60:8b:75:0b:93:a9:82:72:06:ff:99:
12:77:db:8d:c2:b0:df:c0:54:9e:0b:52:5e:5b:18:dc:63:d3:
f5:f9:5a:83:e2:10:8c:63:2f:78:74:3b:4a:bc:79:6d:56:b3:
43:68:bf:c9:de:a8:11:82:d7:4a:f9:0d:98:a3:18:a6:e0:0e:
2f:23:9f:bc:35:6a:ab:bf:3d:ab:56:3d:d4:9a:31:84:fd:e4:
6d:18:3a:d4:ef:fd:be:e8:99:22:1f:e4:bc:26:65:d9:d1:2e:
ea:63:16:35:f8:e7:8c:51:6b:88:0f:bd:0b:ca:20:51:d3:df:
6b:ff:58:23:a8:a4:dd:16:96:7e:e2:17:fa:9c:a1:41:1c:18:
9f:49:12:ff:7a:90:b5:3f:93:1a:d8:04:5c:78:46:1d:5c:ba:
b4:bb:ec:57:99:4d:5e:ec:ce:8e:e8:a2:4b:e0:3e:e4:11:9c:
f5:3c:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org