Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3oeT_nt4BTsTn4rm678NXkD_Y1I.roa
File: 3oeT_nt4BTsTn4rm678NXkD_Y1I.roa (raw, json)
Hash identifier: +d4D+gBdzOnBOEuYulEsbjPHCVTLOsmuT9+GWscMdII=
Subject key identifier: DE:87:93:FE:7B:78:05:3B:13:9F:8A:E6:EB:BF:0D:5E:40:FF:63:52
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09CB370E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3oeT_nt4BTsTn4rm678NXkD_Y1I.roa
Signing time: Thu 30 Jun 2022 14:56:02 +0000
ROA not before: Thu 30 Jun 2022 14:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 79.175.96.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
178.253.215.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.253.235.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164312846 (0x9cb370e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 30 14:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de8793fe7b78053b139f8ae6ebbf0d5e40ff6352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:8b:55:c8:74:51:a0:3c:07:db:27:fa:32:
20:d5:c1:bf:02:ae:13:2e:7f:68:ce:7f:e2:da:f8:
e7:1a:1f:59:67:c6:10:c6:20:e6:a7:36:c7:ea:07:
32:4a:31:f9:78:b3:48:a6:b3:e3:1c:a3:94:36:2f:
35:27:83:64:ae:81:1d:11:50:fa:02:26:55:56:bb:
82:bc:07:9e:ec:e9:91:a1:db:64:3a:f0:8f:95:81:
8e:93:9f:34:07:9e:0e:df:b1:74:37:4d:f1:86:42:
95:66:cb:6b:d3:c3:e9:1d:b6:3e:80:d3:6f:72:40:
3f:51:7c:9a:86:22:42:f5:1f:6f:6b:8f:60:79:d0:
15:61:a1:1b:26:64:d2:5f:d6:91:e8:88:72:ac:c7:
bc:ca:dd:88:e0:11:1b:e1:e0:f5:9d:91:c1:ce:5d:
09:3c:30:14:3f:a4:26:b0:4e:17:f5:7b:ee:0b:bf:
73:b2:20:83:b5:93:31:fa:ff:49:aa:23:35:9a:71:
44:ea:63:a1:6f:7c:db:2f:41:4b:51:86:24:37:f3:
24:4a:12:5f:fc:b0:8d:df:ce:d2:82:59:5d:36:b7:
36:9e:5d:88:03:1c:90:24:67:9d:85:a9:da:e1:78:
cb:d2:40:78:1d:8e:52:15:ee:b2:a5:28:42:ed:cd:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:93:FE:7B:78:05:3B:13:9F:8A:E6:EB:BF:0D:5E:40:FF:63:52
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3oeT_nt4BTsTn4rm678NXkD_Y1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
79.175.96.0/24
178.219.14.0/24
178.253.215.0/24
178.253.235.0/24
188.255.141.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e5:67:bb:b9:37:81:9f:b1:46:33:09:04:e9:bb:73:aa:29:
ab:dc:f3:81:06:90:30:25:52:4f:af:f8:ad:8b:f3:9b:5b:43:
d2:b5:8e:54:41:ab:b1:ae:43:b6:43:d6:0a:40:24:4f:66:38:
67:52:41:1a:4c:bc:2a:69:b6:38:76:6c:be:eb:90:73:09:2e:
16:f9:db:5d:c9:41:82:00:8d:11:ca:92:a0:1c:d5:19:d6:30:
3e:67:fb:6f:2a:de:bf:b1:80:cd:b5:64:f2:8a:4f:e9:03:59:
d1:05:f5:c0:36:03:c9:a9:b7:e0:b3:71:b7:78:06:61:b3:91:
ee:ac:d0:e2:fb:93:ba:cd:bf:1b:2f:28:a3:f9:23:57:46:10:
83:80:8a:91:c9:78:48:ed:8a:37:9e:83:8b:8f:12:39:dc:c7:
ce:e3:ec:99:4d:94:3b:c7:42:e2:77:c5:d8:cd:69:96:02:8e:
9b:72:f5:3b:36:7e:56:34:55:ec:42:18:f9:76:3e:63:99:9e:
98:b3:1a:a4:ba:f5:74:03:d0:8e:f3:65:c8:16:c5:e5:e3:a7:
e6:b4:42:b5:87:44:38:cc:0e:5b:38:98:b7:e9:3d:03:16:ed:
5a:55:a8:62:07:b8:47:df:ce:d0:40:5b:cb:9c:a3:07:1a:24:
da:9e:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org