Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/P_OMwCnhJ36H1DGmF-haxQpFWAw.roa
File: P_OMwCnhJ36H1DGmF-haxQpFWAw.roa (raw, json)
Hash identifier: FP/GfLOzMVLSwSCnoopQrTnnRg12F+0Jy+PNX6GpU7k=
Subject key identifier: 3F:F3:8C:C0:29:E1:27:7E:87:D4:31:A6:17:E8:5A:C5:0A:45:58:0C
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 09E80EF9
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/P_OMwCnhJ36H1DGmF-haxQpFWAw.roa
Signing time: Sat 01 Jan 2022 10:05:31 +0000
ROA not before: Sat 01 Jan 2022 10:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1213
IP address blocks: 77.87.24.0/21 maxlen: 24
87.32.0.0/12 maxlen: 24
45.144.8.0/22 maxlen: 24
91.193.188.0/22 maxlen: 24
91.123.224.0/20 maxlen: 24
193.1.0.0/16 maxlen: 24
2001:770::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166203129 (0x9e80ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Jan 1 10:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ff38cc029e1277e87d431a617e85ac50a45580c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:db:63:b1:ea:4d:16:6b:2f:80:cb:eb:e2:
2d:0a:76:7f:11:77:d2:db:df:1b:69:f1:2f:10:4a:
57:bf:72:a3:cd:86:90:4a:26:d8:33:ad:8b:88:6b:
2e:11:a6:92:75:14:a9:ed:28:fc:1f:ce:00:95:55:
ac:16:89:e4:e7:a8:da:4d:43:1c:b1:25:f6:4c:c5:
ea:88:86:31:76:c7:cf:31:70:7a:7c:82:fb:18:64:
f5:ed:09:e7:b3:96:8a:3f:9f:e0:96:85:62:56:50:
46:94:d5:3e:ae:3f:38:00:91:8a:bd:4b:d4:29:b1:
1d:c6:66:e2:60:68:49:db:95:cc:1a:04:de:99:af:
ed:45:ae:fc:50:f7:d1:35:20:e9:47:ee:b9:84:66:
fa:7f:64:13:78:be:59:48:43:08:5d:e8:14:3c:89:
6e:11:99:ae:e3:1d:1f:74:40:1f:45:54:a0:5c:93:
21:51:3f:5b:56:c0:91:60:a5:2a:c4:ee:0f:b1:c6:
98:2c:0f:57:10:e2:a8:38:55:61:32:d2:29:19:af:
69:1b:f2:3e:aa:69:8c:c9:e3:de:5c:4b:7e:1b:a9:
ce:05:a2:b1:78:85:12:eb:1f:a7:c2:42:a1:ee:d6:
10:bd:f4:2b:67:d6:22:a9:7a:98:96:85:df:63:c9:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:8C:C0:29:E1:27:7E:87:D4:31:A6:17:E8:5A:C5:0A:45:58:0C
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/P_OMwCnhJ36H1DGmF-haxQpFWAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.8.0/22
77.87.24.0/21
87.32.0.0/12
91.123.224.0/20
91.193.188.0/22
193.1.0.0/16
IPv6:
2001:770::/32
Signature Algorithm: sha256WithRSAEncryption
0b:7e:71:74:46:68:67:95:bb:b9:d7:14:9b:77:5f:70:cf:b7:
b9:b3:66:44:1e:cb:c9:a2:fe:cb:5b:be:5b:9c:79:1e:67:e2:
21:b5:61:5f:ed:85:53:18:c4:9c:f5:fd:b2:eb:58:a4:da:cd:
fb:ec:13:36:29:c2:04:cc:47:1b:ae:cc:72:fa:bf:bc:0c:57:
67:24:c0:29:41:ff:23:11:04:09:7f:d9:e3:98:36:dc:f2:a7:
4d:a3:f0:cc:14:13:63:96:b0:a9:61:5a:2d:6a:db:d6:c2:69:
60:37:53:b0:9b:11:3c:e9:f7:7e:fc:9f:ec:28:f2:16:5a:f1:
79:17:fc:f6:5f:32:b3:bb:c7:52:4b:34:f8:dd:48:9d:47:91:
fb:33:ab:76:57:e4:da:11:75:5e:20:8a:d2:63:7a:e3:af:32:
e9:be:6e:97:14:0f:5d:bd:86:1c:00:48:59:57:3a:12:85:f8:
6e:10:1e:75:83:cf:28:f5:31:e8:df:e8:da:ce:fe:f4:b6:92:
9e:28:7e:74:61:cf:b1:34:10:77:11:bb:2d:ae:45:a6:3f:03:
69:cd:ad:c4:cd:e8:db:bc:ac:fd:74:56:d2:ba:0e:b4:7d:22:
df:e9:ef:94:90:cc:c0:6b:0a:31:e8:eb:6b:8b:9b:4c:5f:44:
0d:48:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org