Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa
File: a_TOWwu1BSL_F6PsUH-XjprnZlI.roa (raw, json)
Hash identifier: 3bPj8nNIPOaoC+d4VFr/JZ6hy/jUcrJbP/dJIUddMAY=
Subject key identifier: 6B:F4:CE:5B:0B:B5:05:22:FF:17:A3:EC:50:7F:97:8E:9A:E7:66:52
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08F8CEA6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa
Signing time: Thu 21 Apr 2022 06:51:28 +0000
ROA not before: Thu 21 Apr 2022 06:51:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150523558 (0x8f8cea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 21 06:51:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bf4ce5b0bb50522ff17a3ec507f978e9ae76652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dc:76:6f:7d:63:ed:e3:55:c8:8c:4a:9f:ba:
b0:ab:28:a2:8a:ec:97:d2:27:04:8a:a6:44:3c:e7:
fb:d6:fb:a6:41:4a:11:7b:85:b2:a6:40:41:ca:9d:
e6:c1:0c:34:5a:4e:55:ee:63:ec:9d:26:6f:f1:34:
74:42:f7:1b:03:4c:f4:16:e1:e8:f8:c6:91:84:37:
da:23:59:17:18:93:4e:9f:ea:a7:28:68:6a:8b:82:
8c:98:3a:03:7f:43:6f:72:2a:55:60:53:a3:f7:9b:
37:8e:cf:8c:a0:3e:0d:a0:65:a9:ad:99:a8:62:d6:
88:3d:65:84:bc:f8:80:f8:7c:e2:40:59:4b:f4:7e:
8e:8a:60:09:a3:4a:9d:03:ea:c6:17:c7:e8:78:e0:
9c:af:c6:b9:6f:5b:0d:9d:8b:05:fd:78:8a:34:97:
53:65:a6:2e:ea:94:6d:bf:95:24:56:85:b3:40:a0:
8f:c5:08:95:8a:81:0c:b0:cf:66:76:e1:7b:56:88:
67:5f:61:d0:3d:bc:66:bf:d3:be:8d:e2:e7:33:a1:
8d:18:32:55:d5:2f:56:4e:9d:c3:87:dd:cd:1e:69:
06:a0:0c:a8:5a:0e:94:30:09:ab:6c:39:ef:b2:77:
1d:63:fc:42:87:5c:b8:bd:7a:30:df:77:20:37:3b:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:CE:5B:0B:B5:05:22:FF:17:A3:EC:50:7F:97:8E:9A:E7:66:52
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/a_TOWwu1BSL_F6PsUH-XjprnZlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fd:9d:84:25:61:c3:93:05:91:8c:78:15:4b:39:26:73:97:
3b:cb:16:fe:01:28:8f:9b:56:f4:bc:41:83:35:d9:7e:ec:1d:
95:3a:1b:54:b5:6e:58:83:5a:85:54:4a:54:3f:7e:c7:06:d9:
72:24:aa:f9:92:3f:7e:16:f9:98:11:02:82:c6:91:b4:90:73:
6e:6e:26:df:61:00:6b:77:65:0d:b2:22:3c:31:20:e7:3f:0f:
7d:b4:12:04:f4:e1:d3:91:04:57:ac:66:76:44:12:3b:9c:e2:
f9:fa:ba:91:e6:9c:07:90:e2:86:e8:64:03:5f:9c:33:cd:9c:
d3:c2:88:4f:9c:11:87:8b:ea:35:ae:a4:ff:46:03:30:a2:17:
6b:ef:7d:f7:44:20:8f:af:db:66:18:f5:9a:e9:cf:4c:13:ff:
05:28:6d:b7:c9:54:b7:75:80:21:1c:d3:ff:f8:45:9a:73:84:
57:04:59:99:e9:90:0b:6d:a2:b2:2f:a4:53:e3:f1:01:a1:3e:
86:b2:e5:0b:68:70:90:c7:d4:9b:1e:00:da:31:28:25:83:66:
98:ff:99:60:7c:1f:27:3d:2d:3e:f9:12:4d:0f:31:e6:13:dd:
14:02:18:9d:49:e7:5f:be:0b:5a:ed:3f:3f:27:6f:12:8d:7a:
2a:78:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org