Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQRUxURdJ33NnjEFrWz2NDvc13g.roa
File: PQRUxURdJ33NnjEFrWz2NDvc13g.roa (raw, json)
Hash identifier: jdyun8XWOYnrXBQVzkljdR5lsB/07vQboDxKeBIzt2M=
Subject key identifier: 3D:04:54:C5:44:5D:27:7D:CD:9E:31:05:AD:6C:F6:34:3B:DC:D7:78
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09B58EF7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQRUxURdJ33NnjEFrWz2NDvc13g.roa
Signing time: Mon 27 Jun 2022 06:57:47 +0000
ROA not before: Mon 27 Jun 2022 06:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162893559 (0x9b58ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 27 06:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0454c5445d277dcd9e3105ad6cf6343bdcd778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:4e:18:19:8b:6d:95:38:48:e1:5d:80:03:
84:ac:cb:90:60:b6:cd:44:0f:ba:5b:1a:ac:02:40:
c2:d5:87:ed:6f:e2:01:3e:50:e3:53:51:7f:1d:fa:
eb:55:4f:91:35:3a:0d:af:fa:4b:cc:60:8a:68:9a:
06:f4:ea:7c:e0:8d:13:b8:54:73:c2:e8:16:14:8f:
35:18:1e:95:80:aa:da:8e:0b:cd:ae:2e:22:4d:f9:
a5:91:7c:a6:86:5c:69:a4:37:f8:9c:06:bb:38:67:
e9:c0:eb:0d:83:5e:67:8a:cc:84:3a:26:42:89:bb:
46:2c:a3:ed:c4:9a:1a:7a:5d:5b:e2:e7:08:62:ad:
b8:b6:8f:85:b2:19:8f:f1:85:e0:d7:ee:dc:ad:63:
01:6a:5f:64:b6:18:89:ed:23:fb:10:82:53:bc:71:
69:e9:06:92:9c:62:4f:4b:e5:5b:3e:a8:5c:3b:2e:
14:4c:f9:22:91:fd:27:37:6f:ed:fd:38:d1:89:ac:
c5:2d:da:04:86:b4:08:a6:be:fd:1a:f3:71:97:75:
4d:c4:da:f1:50:34:20:38:7a:b6:11:af:5c:e5:db:
a5:b4:50:eb:b2:fa:39:e0:33:92:3b:c2:e6:58:06:
c9:c6:bb:3d:30:6e:5b:3a:05:f0:8d:5e:7e:91:77:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:54:C5:44:5D:27:7D:CD:9E:31:05:AD:6C:F6:34:3B:DC:D7:78
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/PQRUxURdJ33NnjEFrWz2NDvc13g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.32.0/24
109.121.34.0/23
109.121.38.0/24
109.121.40.0/23
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/23
Signature Algorithm: sha256WithRSAEncryption
40:76:b5:57:f8:1e:e8:04:fa:c5:ac:c9:11:9a:bf:00:22:00:
3d:d3:17:97:08:57:2a:61:b6:5f:4b:8f:68:2d:d3:46:84:ef:
ba:46:48:7c:17:23:97:56:ed:0e:d5:27:ed:08:a4:1c:fe:31:
65:50:b4:ce:74:e0:e1:87:f9:4c:ba:c1:b0:98:c2:8f:27:d0:
0a:1a:62:a8:b0:be:dc:0f:b1:2b:61:0a:3c:22:55:4f:22:d7:
69:88:9e:22:b4:de:3d:30:9c:dd:1c:04:93:71:bf:fe:c8:f4:
23:a9:d3:02:d5:f8:c1:b2:fb:8a:21:16:df:3a:6f:49:59:2c:
31:6a:45:66:ab:69:74:1a:30:4e:25:bb:a7:63:fc:1a:8d:d7:
d7:43:70:25:28:73:6d:8a:e1:94:63:e6:a8:51:82:44:80:84:
df:1b:8b:f5:0c:8c:13:10:4f:a0:97:b7:46:08:66:d4:04:2a:
fb:01:c7:7c:63:3c:da:11:c5:15:17:da:9f:f2:0e:25:d9:4b:
48:19:5c:0f:a2:44:5b:c7:bf:05:5d:57:c4:99:47:de:24:53:
3d:e5:29:49:1a:c5:ea:cd:40:c8:1c:9d:cb:18:80:22:de:68:
70:89:43:c6:b7:56:e0:a4:04:4c:8e:ea:5d:75:1b:66:0c:9f:
36:37:32:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:26 2024 by rpki-client on console-fra.rpki-client.org