Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gVXI1dqeqkWjx3___OUR1GG49D8.roa
File: gVXI1dqeqkWjx3___OUR1GG49D8.roa (raw, json)
Hash identifier: 768iK+HmV5B39zlWWYcDQgABbaeZjLb1WUHoboU2Ya4=
Subject key identifier: 81:55:C8:D5:DA:9E:AA:45:A3:C7:7F:FF:FC:E5:11:D4:61:B8:F4:3F
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0182A7F25E0FDF95320030A4AB1A1A9D654A
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gVXI1dqeqkWjx3___OUR1GG49D8.roa
Signing time: Tue 16 Aug 2022 18:37:35 +0000
ROA not before: Tue 16 Aug 2022 18:37:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211143
IP address blocks: 109.207.131.0/24 maxlen: 24
77.36.58.0/23 maxlen: 23
77.36.66.0/23 maxlen: 23
93.120.34.0/23 maxlen: 23
93.120.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:f2:5e:0f:df:95:32:00:30:a4:ab:1a:1a:9d:65:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Aug 16 18:37:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8155c8d5da9eaa45a3c77ffffce511d461b8f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:d1:19:4c:1d:6a:46:ee:08:2b:4d:0b:8a:
79:60:f1:f5:3b:82:88:f5:ac:e6:8f:1d:6c:94:8e:
5c:b2:cf:53:24:73:61:45:2c:1f:27:60:2c:da:e7:
2f:10:79:cb:33:8b:e4:8a:b9:f7:5e:69:e6:da:01:
46:26:fe:1f:59:38:80:95:5a:5c:6d:9f:a5:ae:14:
58:22:b8:0e:0a:d9:4c:97:db:af:be:9c:ee:d2:91:
88:9c:27:05:be:81:0b:40:f3:28:39:df:38:55:45:
1f:72:0d:60:62:4b:bc:1c:d7:07:73:85:e0:16:2c:
29:1a:b1:7b:69:22:1c:92:fb:7d:0f:06:20:52:be:
fe:bb:a5:45:b2:ba:79:32:4a:16:cd:12:c9:eb:25:
d4:5c:6b:af:4a:e8:0c:b9:13:ee:f2:6d:da:6b:5e:
7c:cd:79:ee:2b:ab:d6:5f:87:19:c0:d8:02:a9:7e:
6f:2d:0c:14:7f:13:55:55:54:64:64:b5:bb:f1:8d:
3b:64:01:7e:d5:15:86:0a:01:0d:f3:12:c8:f1:af:
4c:8c:63:5f:e0:42:9d:c6:a5:81:86:c1:2d:02:7e:
ce:b4:fc:9d:70:da:f3:c8:15:2b:d0:9a:9a:e9:aa:
f6:87:03:04:7e:35:00:9d:36:58:97:cd:00:b5:af:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:C8:D5:DA:9E:AA:45:A3:C7:7F:FF:FC:E5:11:D4:61:B8:F4:3F
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/gVXI1dqeqkWjx3___OUR1GG49D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.58.0/23
77.36.66.0/23
93.120.34.0/23
93.120.40.0/23
109.207.131.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0f:4e:f8:d5:81:90:a4:a0:80:88:21:4a:05:57:4b:2b:c0:
75:c6:a3:0c:fd:b9:fd:a7:5a:7d:65:2d:c3:49:46:9f:90:d8:
5f:aa:83:6a:74:3e:4d:f9:c3:39:ad:fd:b9:e3:e3:3b:c6:31:
00:4d:5e:27:46:0e:46:2d:20:b0:14:6e:4f:29:d8:1a:be:76:
4a:ea:3d:71:b5:2b:b6:bf:9c:c2:25:16:df:dd:e2:43:95:a3:
b8:c8:f1:d5:c6:48:e3:16:1c:27:70:34:a7:b9:db:b2:22:78:
d3:df:b2:09:d9:15:13:93:f0:f7:62:a9:dd:c8:e5:a2:3e:7a:
71:33:7b:16:35:54:f2:37:31:6a:03:78:f3:eb:69:0d:66:00:
9b:d1:51:c3:c7:35:66:fe:0c:66:b0:df:ef:cd:2f:31:1d:24:
e7:d1:af:d6:f4:72:9f:55:91:bd:47:1a:a9:a1:73:2f:5d:09:
dc:b8:af:ec:19:25:fd:52:1a:35:83:71:05:9c:85:79:14:2d:
ea:bd:55:be:1c:9a:f3:42:cb:b6:09:5c:d8:d0:3a:42:cb:dc:
42:f4:6b:0c:b8:61:22:f3:77:5c:d4:1f:d0:ca:74:60:1c:a9:
f6:75:5c:ab:b4:e5:81:76:aa:fc:51:51:c0:9b:3d:7c:aa:b2:
d5:26:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-fra.rpki-client.org