Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-rMvPO-iSiuLulA9i4BR3D6i3Nw.roa
File: 1-rMvPO-iSiuLulA9i4BR3D6i3Nw.roa (raw, json)
Hash identifier: PM8XVQOAvG5U2Pvpfz3TfEZ3u4U4GiBWgnY7ACCHesE=
Subject key identifier: FA:B3:2F:3C:EF:A2:4A:2B:8B:BA:50:3D:8B:80:51:DC:3E:A2:DC:DC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01857355DD6273626EB8CA003DBFA2D59871
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-rMvPO-iSiuLulA9i4BR3D6i3Nw.roa
Signing time: Mon 02 Jan 2023 16:34:45 +0000
ROA not before: Mon 02 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53767
IP address blocks: 77.67.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:55:dd:62:73:62:6e:b8:ca:00:3d:bf:a2:d5:98:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab32f3cefa24a2b8bba503d8b8051dc3ea2dcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:7e:d6:83:47:bb:ee:e3:7f:fe:84:d4:d3:
e7:4e:3b:76:83:14:93:53:f9:c9:4b:df:54:80:74:
f9:f3:bb:aa:40:22:d8:05:17:83:d8:e5:1d:a8:c7:
e5:83:ab:ff:e5:9f:88:a1:8c:87:71:49:26:7b:a6:
da:24:bb:0c:3b:f4:82:88:56:e7:21:28:af:e5:40:
a6:4c:f2:37:a7:3b:10:73:82:a6:ae:90:80:f4:d6:
a9:c8:3f:45:f0:d2:3e:5d:a5:c9:47:24:1c:d3:fb:
7d:b7:4a:54:51:9b:4e:26:bc:cd:19:b5:e4:f2:55:
09:3f:ba:85:bf:a1:0c:15:86:2b:ac:c8:87:98:e9:
97:83:62:23:ca:97:46:ad:97:ef:a7:d1:62:2f:5b:
ad:f5:57:cd:ae:a6:41:28:45:85:bb:05:a2:4f:7a:
64:f5:88:71:d9:3a:4c:76:34:cd:9c:b3:aa:f4:a8:
73:08:4c:4a:f1:39:57:c5:94:17:1c:28:e2:25:30:
d4:92:f1:7a:28:9e:06:f5:de:2c:5e:42:53:5f:8d:
0c:4b:e5:ee:43:1a:b4:ff:87:3e:e1:35:76:b7:08:
a6:32:81:f2:fb:c6:b3:2b:31:74:8f:8f:af:4b:f7:
d0:d6:e5:6d:74:26:6c:5c:22:77:03:06:c6:9d:81:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:2F:3C:EF:A2:4A:2B:8B:BA:50:3D:8B:80:51:DC:3E:A2:DC:DC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-rMvPO-iSiuLulA9i4BR3D6i3Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:cd:57:7b:0f:dd:6d:8a:51:db:a0:1a:f6:53:88:6a:08:48:
5b:e5:90:3f:25:f3:86:d4:e0:6c:bf:be:a0:f1:be:ec:45:7d:
33:ad:3b:4c:79:d2:ca:c4:4c:ff:b6:1d:32:8f:e2:76:21:38:
35:7a:2d:01:07:16:58:8e:e0:c5:a2:71:f0:6a:94:40:7f:b1:
0c:3a:0f:95:f7:b4:0c:74:db:76:a2:7f:7b:e7:dc:e9:f2:aa:
05:d5:39:7b:a9:9a:d5:29:42:93:cc:2f:c1:fb:56:ff:0c:08:
f0:76:7a:88:69:e7:d4:c0:f4:c9:a5:7f:1b:19:5e:fa:d5:d3:
c5:08:97:91:db:d3:43:aa:99:f8:5b:80:cc:c8:fc:56:dd:e5:
6c:f2:2b:8f:09:29:05:54:4d:d9:eb:2a:aa:ac:d5:b2:f5:92:
3f:46:92:ae:35:6f:88:cd:37:05:c7:ca:da:67:0e:bd:f3:be:
2b:86:23:5d:17:5c:57:cf:e2:e4:2d:c1:62:a9:29:b8:1d:54:
26:be:58:a0:6a:49:49:a1:58:49:1f:bf:93:3f:38:8c:ed:1f:
36:15:ee:67:41:76:fd:d6:48:ad:a6:8b:c1:3a:d3:e8:6e:78:
43:d2:38:61:ec:a3:9c:4b:aa:28:b4:d2:75:65:2c:53:88:0f:
5a:f8:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:31 2025 by rpki-client