Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7DzGS1NsUlgnj65am_V4_9PCVd4.roa
File: 7DzGS1NsUlgnj65am_V4_9PCVd4.roa (raw, json)
Hash identifier: Gh8TIUKqjDlhVyAPALN1djwLvu1SGJWGgnXvw0RWyug=
Subject key identifier: EC:3C:C6:4B:53:6C:52:58:27:8F:AE:5A:9B:F5:78:FF:D3:C2:55:DE
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184C7DFF69BA924D148F3FD646C37FFF3F9
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7DzGS1NsUlgnj65am_V4_9PCVd4.roa
Signing time: Wed 30 Nov 2022 09:30:54 +0000
ROA not before: Wed 30 Nov 2022 09:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 77.105.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:df:f6:9b:a9:24:d1:48:f3:fd:64:6c:37:ff:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 30 09:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec3cc64b536c5258278fae5a9bf578ffd3c255de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:03:8a:40:f4:f2:e0:77:87:5d:dc:65:2b:ea:
cb:9d:0a:43:17:0b:da:4c:7a:63:9f:97:50:38:c2:
93:87:56:fe:2a:31:52:78:2c:18:ed:25:48:ea:96:
f4:50:be:f6:30:04:5f:72:d8:31:5b:cb:47:8a:a1:
c9:e1:69:51:6e:0e:e5:b8:51:c9:40:1e:0e:94:6f:
0f:e5:98:07:a1:f8:04:bd:a0:10:6b:d6:10:00:ec:
b0:ae:5f:2c:7e:81:76:bf:12:22:6b:74:31:ae:09:
73:b7:12:5d:13:42:ed:2b:d8:d1:98:8b:bf:f7:f0:
d8:08:f1:c1:e4:a7:3a:24:97:d6:fa:75:5d:6c:79:
95:9d:9c:a6:5d:da:c0:b9:43:94:c0:3b:cc:26:3b:
38:88:51:bc:6a:44:8a:96:77:34:80:6d:0a:01:39:
c3:8d:61:a2:7d:fb:e1:f6:e6:12:6d:a1:3c:86:5b:
a5:e8:ed:59:15:39:77:96:4d:33:d2:3d:59:4e:12:
eb:95:26:48:9d:06:4c:15:8f:e8:29:ae:fd:72:5e:
fa:47:5d:b1:40:9d:17:80:b7:a8:c5:ef:41:ab:f0:
d6:63:8a:42:60:a6:a3:3b:1a:16:c3:70:91:1e:b2:
5f:88:4f:9e:52:8c:db:8e:88:8f:4c:7f:e4:25:db:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:C6:4B:53:6C:52:58:27:8F:AE:5A:9B:F5:78:FF:D3:C2:55:DE
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7DzGS1NsUlgnj65am_V4_9PCVd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1e:07:c8:e8:6d:4f:58:fe:04:6f:de:27:82:f1:40:d0:2b:
b9:de:81:a4:46:cf:7a:23:b9:68:1d:c1:a5:30:06:c5:8c:6f:
d0:29:09:6c:b7:57:c4:1d:2e:8f:38:fc:84:38:a3:1c:fc:3b:
0a:4b:2e:c2:be:14:28:ef:26:66:ed:4c:80:2d:e3:5a:ca:0f:
62:80:64:38:8d:7e:2e:15:1e:ee:2e:41:98:14:59:54:a8:e8:
0f:ad:89:08:84:2b:96:77:74:97:6c:a6:6c:25:3f:ae:5e:74:
11:06:06:db:cc:b9:60:48:07:83:c3:75:d7:f5:e5:a3:f1:6c:
dc:6f:67:2c:2d:70:fc:b9:1b:84:21:3e:bf:8c:3e:2d:1c:8f:
dc:a4:c3:38:c7:2a:7a:d3:43:4d:9d:0b:e4:50:65:c6:3c:47:
28:72:44:33:37:42:03:d8:5e:f7:a8:77:e9:60:8c:06:83:6e:
cd:64:2a:fc:40:f5:79:cb:0c:b2:98:4c:a1:82:0c:3e:ad:47:
81:03:84:d8:35:6e:7d:99:36:12:dd:cc:51:68:ab:1e:39:30:
ce:af:ff:09:de:95:21:4c:7e:cc:b3:3b:04:81:09:a2:06:4d:
08:81:e2:82:20:b6:83:5b:78:65:e0:0f:5e:06:6b:9e:bb:56:
76:2d:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org