Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x222dw6nqsljsM-O6QlV21OOBAE.roa
File: x222dw6nqsljsM-O6QlV21OOBAE.roa (raw, json)
Hash identifier: i0VAiiShz9yvmUdBC/gA6TFQHBXVG7WwOlqYm9YjyrQ=
Subject key identifier: C7:6D:B6:77:0E:A7:AA:C9:63:B0:CF:8E:E9:09:55:DB:53:8E:04:01
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 0184EC21B3F70115BD8A822398341D703884
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x222dw6nqsljsM-O6QlV21OOBAE.roa
Signing time: Wed 07 Dec 2022 10:29:02 +0000
ROA not before: Wed 07 Dec 2022 10:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49849
IP address blocks: 87.119.108.0/22 maxlen: 24
77.77.128.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:21:b3:f7:01:15:bd:8a:82:23:98:34:1d:70:38:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Dec 7 10:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c76db6770ea7aac963b0cf8ee90955db538e0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:88:1a:d5:8b:37:ec:a6:b8:9b:4c:7d:04:f3:
59:5e:03:24:11:33:49:87:04:81:d9:85:e9:07:8e:
c4:8d:6e:e1:f9:9a:cc:8f:8e:59:80:ab:96:4c:fb:
cb:eb:db:23:6c:1e:93:97:3f:c1:a8:db:c6:d6:a7:
5f:70:10:1a:20:72:a7:03:c1:67:e2:b7:53:cd:6c:
1b:91:60:8c:80:3b:25:df:7b:5b:83:27:be:1a:3f:
a5:f3:c0:71:d0:c9:43:06:df:41:c8:68:7d:e0:57:
4d:21:ce:15:c7:8f:c2:94:3b:c3:de:c2:97:c4:c8:
68:a8:8e:9b:df:c8:7d:4a:75:cb:18:31:bf:5f:02:
89:ad:97:56:dc:00:80:f4:d6:fb:68:35:6b:79:dd:
9f:32:28:e0:65:06:98:01:86:ef:a3:10:05:06:e6:
6e:e4:a7:87:c2:3a:4a:5e:5f:c1:7f:78:4b:13:97:
6e:4e:98:55:7c:7a:5a:9b:f6:db:61:55:30:24:89:
ae:1a:c9:72:2c:6f:e5:7e:58:3c:7c:91:ad:45:8d:
81:eb:91:c1:57:09:cf:c8:4e:01:f7:e2:28:5c:57:
af:59:15:e3:f1:db:cd:d6:89:71:c7:16:a8:35:82:
74:35:f9:19:62:28:22:1a:d2:e5:86:d5:89:d0:11:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:B6:77:0E:A7:AA:C9:63:B0:CF:8E:E9:09:55:DB:53:8E:04:01
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/x222dw6nqsljsM-O6QlV21OOBAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.77.128.0/21
87.119.108.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:8e:c1:80:83:8e:b1:d6:2d:5e:83:b0:84:13:28:09:8d:03:
58:ce:5b:6f:99:41:93:3d:f4:eb:87:95:b1:dd:ac:b2:07:c6:
98:71:4b:d8:3c:08:e8:27:51:18:49:47:7c:da:4d:31:99:99:
86:a5:51:66:d2:0c:70:ed:33:cb:d8:70:96:9d:79:53:7d:4e:
1e:85:01:4a:73:74:81:c0:d6:ca:6a:60:18:09:6a:23:24:04:
c2:3a:6c:62:06:80:a2:06:e9:d4:5e:26:1a:b7:00:b8:4b:cd:
1e:4a:a2:cc:38:a1:36:53:fd:ac:94:ea:28:17:87:0b:b3:7e:
1b:56:9d:a1:e0:b5:54:ec:95:7d:7c:ea:7d:38:64:07:db:3c:
a1:1f:98:9d:00:02:5a:cf:e3:fa:d8:b8:4e:a2:62:d9:b3:ff:
9c:4d:fe:67:68:7c:15:0a:bd:3f:dd:85:ee:e9:0e:ea:d8:06:
bf:83:6d:e2:fa:c0:85:a3:a2:89:9e:4c:7f:f2:41:14:13:80:
6a:7b:68:eb:3e:ab:e8:9d:3c:d4:62:2d:c1:1e:83:fb:cf:8c:
9f:f3:41:23:56:20:1f:6d:32:61:c5:47:21:6f:eb:3a:ed:68:
1b:b3:1f:5c:d3:3f:8c:dc:45:25:e7:72:f9:a9:5e:2d:67:70:
52:d6:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:16 2025 by rpki-client