Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JYcBoZH5qjDoLKuNF1RiW5GChn0.roa
File: JYcBoZH5qjDoLKuNF1RiW5GChn0.roa (raw, json)
Hash identifier: E0ScxV5GYpduivdfau7+0kvXY2+52dYQBrcM8HJNnSw=
Subject key identifier: 25:87:01:A1:91:F9:AA:30:E8:2C:AB:8D:17:54:62:5B:91:82:86:7D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018243C72EB77CA42314CA2FD0D88CA778D7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JYcBoZH5qjDoLKuNF1RiW5GChn0.roa
Signing time: Thu 28 Jul 2022 07:48:23 +0000
ROA not before: Thu 28 Jul 2022 07:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 79.175.117.0/24 maxlen: 24
188.255.229.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:c7:2e:b7:7c:a4:23:14:ca:2f:d0:d8:8c:a7:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 28 07:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=258701a191f9aa30e82cab8d1754625b9182867d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:dd:7e:e9:49:e4:65:39:44:39:6b:86:28:
3d:9b:04:6d:35:d7:1f:fa:1d:e8:ad:3c:94:52:cf:
01:86:d1:33:e5:9f:70:be:34:1e:54:b8:1f:77:86:
0e:cd:5b:c4:e2:72:7c:5c:b8:38:d5:32:86:d2:1d:
95:59:d3:c3:be:9a:70:50:5d:d9:68:4c:1f:cd:79:
1c:97:d4:85:3b:8b:35:70:64:85:fe:dd:00:2d:2a:
43:b4:3c:9e:68:f6:a9:0a:e2:e6:4f:a7:39:8f:d9:
f5:94:ad:2a:fd:44:ba:04:22:2a:c4:41:15:61:b7:
d4:a8:4d:46:d6:ab:08:94:27:11:a0:d2:b8:8f:fa:
b8:1e:27:a7:fd:73:e9:41:77:de:84:27:03:74:4b:
39:a9:5d:50:4c:09:33:be:79:af:89:f2:04:60:91:
02:f5:ab:e2:b1:5e:07:a3:45:1b:75:a9:59:79:43:
f7:94:8d:0b:bc:6f:d9:a7:15:aa:49:49:85:4e:df:
7d:c4:61:9c:fa:57:37:5d:19:c4:76:38:25:33:1d:
3b:7d:5b:fe:54:23:d1:dc:ac:2d:8f:72:36:e2:50:
78:e4:ec:28:0a:52:6d:dd:3c:ad:77:35:2f:b9:40:
60:51:77:ee:63:76:86:a7:c7:13:f4:91:41:1e:99:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:87:01:A1:91:F9:AA:30:E8:2C:AB:8D:17:54:62:5B:91:82:86:7D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JYcBoZH5qjDoLKuNF1RiW5GChn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
79.175.117.0/24
188.255.229.0/24
Signature Algorithm: sha256WithRSAEncryption
18:00:e9:76:ec:e7:5b:de:23:b3:ac:d1:f0:a9:f1:35:30:11:
90:ba:78:d6:3d:1f:7e:47:3d:38:3a:9f:74:28:20:49:cd:00:
2b:9e:5a:fd:ef:e9:f4:a8:80:84:fe:5a:ab:eb:1a:45:13:e9:
c5:19:e4:6e:32:de:1f:e0:79:f9:17:16:9f:77:0e:3c:b7:e7:
9d:38:a9:08:5d:34:c1:8e:32:d0:75:48:eb:0d:07:a9:9b:72:
70:de:4b:3b:25:42:d6:9e:eb:04:da:7a:b1:9f:e5:9e:d8:27:
0e:51:51:e4:24:4b:93:f2:b7:3d:0e:9b:bb:39:42:54:b9:16:
66:93:7b:22:a1:2b:09:31:02:8b:db:18:e8:5f:cf:f5:03:67:
44:5d:cb:c4:ae:2b:d3:5a:c1:09:57:a3:63:a0:cf:fd:15:ac:
a2:9f:f4:1e:27:d4:e4:fe:f5:53:e0:d8:6d:e7:bc:29:9a:cc:
d4:f5:c9:5b:8a:7a:65:b2:fa:58:65:16:cd:ce:55:99:97:cd:
81:67:6a:3f:47:18:48:8e:f3:3a:9d:d3:0e:56:7f:57:65:43:
74:a6:3b:45:00:52:17:fb:8b:4d:26:d1:13:bd:81:ee:81:a2:
71:7f:93:dd:20:46:8a:ac:af:23:d7:30:a4:3c:f8:89:05:95:
91:f9:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org