Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pYXdtfdnvWWtUjA2uYyFO-hfKt8.roa
File: pYXdtfdnvWWtUjA2uYyFO-hfKt8.roa (raw, json)
Hash identifier: UuHFua4WWodYnE6zn6Ms5U7Z3KMqPdNYK24ihQIDhW4=
Subject key identifier: A5:85:DD:B5:F7:67:BD:65:AD:52:30:36:B9:8C:85:3B:E8:5F:2A:DF
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0185E8A4D0851503895C5576EA4D63A88AD7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pYXdtfdnvWWtUjA2uYyFO-hfKt8.roa
Signing time: Wed 25 Jan 2023 11:16:33 +0000
ROA not before: Wed 25 Jan 2023 11:16:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34074
IP address blocks: 77.77.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:a4:d0:85:15:03:89:5c:55:76:ea:4d:63:a8:8a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 25 11:16:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a585ddb5f767bd65ad523036b98c853be85f2adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:82:c8:21:fe:ce:4a:96:da:91:50:c3:37:
9f:58:9b:cc:b2:94:e3:1a:63:08:93:63:b4:f8:3f:
02:f0:10:e5:82:f9:82:47:58:01:6b:ea:92:03:54:
fa:f8:40:25:34:dc:35:88:e9:60:f7:aa:b3:6d:7a:
d7:0d:e4:39:e6:5f:69:f5:19:62:7d:b6:01:c1:69:
ff:47:52:98:2b:d0:ea:ae:82:45:f2:66:ce:90:f5:
89:f8:da:6f:e4:0c:71:1f:e2:27:6a:39:93:ec:48:
b8:77:e1:b4:96:2c:a9:38:ab:3b:f9:62:a6:3b:c0:
fd:a3:55:ad:4c:06:7e:e1:c2:0e:c1:94:d3:1d:b6:
2c:0e:81:76:ed:a4:5f:7d:87:16:5c:bc:60:ba:f2:
f7:8c:86:d7:7b:3c:e7:1d:ef:79:a8:7e:5f:fe:bf:
4c:02:db:b7:b1:09:22:8f:5a:6f:b6:ae:1a:71:81:
70:c0:f7:06:ff:00:cf:de:a8:dd:c1:39:12:5c:50:
55:1b:f1:ad:49:70:8e:fa:44:59:1e:bc:85:7e:81:
61:2b:3b:99:79:ca:52:d2:00:e7:18:d3:da:66:8e:
87:5f:62:06:a1:44:a5:23:63:3e:f2:c3:9b:59:df:
a4:49:66:57:49:00:7f:dc:4c:e1:58:dc:18:d9:32:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:DD:B5:F7:67:BD:65:AD:52:30:36:B9:8C:85:3B:E8:5F:2A:DF
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pYXdtfdnvWWtUjA2uYyFO-hfKt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.152.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:6a:69:16:87:7c:3f:45:6c:d1:33:a8:a7:3c:62:f2:13:85:
9e:93:f9:21:2a:dd:c0:0b:6d:81:81:d6:fc:a1:47:78:fd:4d:
4f:f6:d1:51:f9:be:6c:45:6d:4b:40:cf:ed:63:c1:1c:b1:52:
36:de:59:a7:41:a9:7f:65:2d:62:d1:00:5e:91:f6:f0:12:b3:
70:22:68:2c:1c:4d:25:a6:eb:e4:f2:da:76:7a:a8:76:32:6d:
58:c9:82:e8:e3:11:ea:23:b5:a8:15:37:6f:2e:2f:ca:07:77:
be:12:8b:03:98:bf:2f:15:55:5c:18:66:61:8f:cd:da:87:ef:
80:f1:63:7e:f1:57:18:d6:a7:85:33:a0:3d:ae:69:8f:c3:48:
78:ad:72:03:f5:b3:3f:6b:25:5c:56:fa:4c:a5:5e:bb:24:ff:
e4:cc:26:ee:3d:31:4e:ef:6a:7c:a0:6c:3e:f1:54:a1:48:7a:
a2:37:46:4d:ea:d8:dc:48:92:f6:c0:c9:ad:e4:5f:e3:b1:43:
dd:03:4a:61:e9:7c:94:94:d7:81:78:d1:6b:93:5c:dd:c4:08:
53:ee:f5:7e:b1:c9:08:bc:9e:43:bf:7d:c1:c3:c0:a8:ff:9a:
3a:b5:6a:61:1c:68:15:b0:a0:b7:c3:31:fc:9d:47:3a:0b:4d:
d9:5b:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:03 2025 by rpki-client