Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5wCWg02rRUu_3xXraA9MxHHwZfA.roa
File: 5wCWg02rRUu_3xXraA9MxHHwZfA.roa (raw, json)
Hash identifier: wBFKdkA2vCORsGUlpusOAuyJz8bdSXDBq9CsqDoZD8Y=
Subject key identifier: E7:00:96:83:4D:AB:45:4B:BF:DF:15:EB:68:0F:4C:C4:71:F0:65:F0
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184BE54393495E7D4F08E2A7AB5F432A335
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5wCWg02rRUu_3xXraA9MxHHwZfA.roa
Signing time: Mon 28 Nov 2022 13:01:41 +0000
ROA not before: Mon 28 Nov 2022 13:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 77.105.22.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:54:39:34:95:e7:d4:f0:8e:2a:7a:b5:f4:32:a3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 28 13:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e70096834dab454bbfdf15eb680f4cc471f065f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:62:63:22:2d:03:21:36:c1:57:5c:11:d6:
7e:8e:63:d8:53:fc:5c:36:e8:5e:5e:df:09:45:3e:
b7:13:78:42:d5:a6:e9:20:ef:b4:73:5a:c7:3a:63:
c3:eb:09:63:e9:d2:fb:88:c6:da:b6:60:3f:c6:bb:
41:61:24:77:a4:87:c9:7b:f6:d3:2e:31:58:53:43:
90:3d:02:2b:f5:71:b2:23:41:02:68:a9:74:ab:90:
1c:1b:32:2c:ad:de:a7:a7:b3:bb:91:32:ca:e4:ca:
8b:29:16:e9:ed:1c:05:80:7f:f6:e4:88:0a:f2:e5:
89:4d:0b:71:85:95:71:f5:90:57:78:c6:62:a6:a0:
30:b8:fd:4b:7b:40:ed:05:ee:ef:e1:e4:7a:dc:69:
43:db:52:93:b8:3c:d1:2f:be:3f:76:cc:d3:b9:eb:
a1:d4:3a:e8:b2:8f:8e:6c:e4:38:35:94:e2:4a:60:
e4:26:1d:bf:5c:f7:05:c5:e4:ff:0e:e5:ae:a5:7d:
23:c9:9a:66:ac:a9:95:95:da:8b:14:e3:54:52:f0:
b7:40:97:9a:cf:20:01:dd:59:6a:3c:6f:3d:bc:38:
15:fa:d6:50:d8:80:12:ca:f6:cf:0e:24:af:87:ca:
ed:a4:14:5c:58:11:cf:26:dd:ec:43:f6:98:e6:c9:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:96:83:4D:AB:45:4B:BF:DF:15:EB:68:0F:4C:C4:71:F0:65:F0
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5wCWg02rRUu_3xXraA9MxHHwZfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
79.175.67.0/24
178.219.14.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
12:fc:ab:67:dc:a9:60:47:c9:35:a5:eb:d4:da:51:4a:20:db:
24:ff:93:9e:50:bc:a4:78:5e:d8:44:be:d4:df:ba:ca:9a:cd:
0d:d4:6b:68:b1:49:f3:73:5c:3e:ab:2f:d6:61:d7:39:e3:4d:
85:bd:61:ce:71:b5:a8:5d:2e:9d:9d:78:2e:df:5b:68:d8:42:
0f:36:36:4d:27:cf:20:8d:eb:cf:8a:05:87:14:ff:be:90:3d:
d8:1c:6d:60:29:17:15:b2:a6:d2:c7:9c:37:c2:da:61:47:84:
18:3d:ac:35:8a:6c:3c:a6:62:c3:0c:3a:2f:68:5b:44:fd:9f:
e3:62:7d:01:fd:46:8b:4b:8e:8d:e6:25:96:36:5c:ea:79:78:
88:51:6e:1d:19:9d:07:8d:0f:35:62:31:13:f5:b5:87:02:8f:
3f:0b:7f:55:05:c6:a8:c5:b9:a3:f6:ce:90:9b:da:ab:20:86:
d7:75:6d:c3:38:66:69:ee:05:1c:4f:c9:6f:f0:34:3e:f1:20:
a3:3e:f9:76:ec:ef:d4:8d:6a:0e:a3:51:17:64:87:38:1f:88:
1e:4c:dd:63:53:1c:73:38:78:fa:74:2c:da:fe:2e:0d:ec:26:
1c:21:03:df:22:0f:81:a2:ff:fe:31:ac:59:13:f1:62:c5:38:
8e:5d:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org