Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ge3nUeLYRVG9HWESp_OgtwdjnYY.roa
File: ge3nUeLYRVG9HWESp_OgtwdjnYY.roa (raw, json)
Hash identifier: zwK3Gs20QxXuOy/8nuaRaNovXKKsGDhGKsLYN9uhAQI=
Subject key identifier: 81:ED:E7:51:E2:D8:45:51:BD:1D:61:12:A7:F3:A0:B7:07:63:9D:86
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 08B88F43
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ge3nUeLYRVG9HWESp_OgtwdjnYY.roa
Signing time: Sun 03 Apr 2022 14:11:42 +0000
ROA not before: Sun 03 Apr 2022 14:11:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 79.175.117.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146313027 (0x8b88f43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 3 14:11:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81ede751e2d84551bd1d6112a7f3a0b707639d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:6f:b2:c7:2d:9b:c9:a4:df:3b:ee:29:fd:
f1:bd:c4:b4:a8:a3:0a:b9:8d:38:ce:0d:52:32:2b:
9e:b2:4d:37:51:06:5f:d0:d2:83:f7:19:43:7a:b6:
99:25:74:b6:30:72:12:b7:cb:f8:88:89:32:5c:b4:
6d:c4:75:21:a8:d5:4b:64:46:1d:88:59:ec:23:4a:
23:2c:ac:57:ff:f2:e0:3f:6d:76:79:0e:96:e1:c1:
26:04:5d:18:5a:dc:ab:e0:44:15:c5:52:a3:72:37:
c9:19:1b:bf:01:e7:59:48:22:7c:04:a4:84:18:6d:
e6:e2:b1:c4:59:03:6b:46:c0:e4:87:2a:31:f4:f5:
36:58:12:67:7f:27:33:39:35:38:7f:66:79:eb:2b:
c5:9b:1e:3e:77:8c:12:fa:be:ef:39:2a:83:1b:de:
cd:c0:f4:50:34:44:cd:b8:d8:55:9a:6d:9c:40:8c:
3b:89:50:3b:f9:53:9c:95:f0:b3:c9:81:7c:59:d4:
bf:23:17:81:4f:ed:0f:39:9f:fb:3f:c9:d1:d9:53:
09:d7:d3:94:db:75:cc:a9:b5:26:e4:f2:ba:ea:ea:
eb:e2:a5:32:29:23:18:56:f2:e1:ad:a8:bc:f3:2e:
ae:9f:38:b1:92:9f:7e:3a:f2:f2:bc:78:b4:e1:8e:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:E7:51:E2:D8:45:51:BD:1D:61:12:A7:F3:A0:B7:07:63:9D:86
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ge3nUeLYRVG9HWESp_OgtwdjnYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
79.175.117.0/24
Signature Algorithm: sha256WithRSAEncryption
20:59:0c:98:e4:f0:8d:79:34:3c:6f:61:62:f7:5f:a9:ef:80:
0f:52:65:56:a1:79:3d:95:61:7b:dd:d9:2f:8c:b7:43:40:41:
4f:1e:cd:41:da:c1:b8:e6:2d:9a:84:6e:a2:ed:c4:ee:cc:94:
f9:ae:bb:89:19:be:48:17:56:01:d6:9a:cb:a6:77:7e:68:2d:
1d:95:ba:a8:b9:b9:0e:fb:77:8c:00:25:a0:bc:7a:e7:d9:25:
8e:a1:d8:2e:62:c3:47:ac:81:c2:75:74:a6:a3:f0:82:49:bb:
a3:43:71:6e:6d:61:d2:38:75:94:1d:5b:23:d9:c7:42:38:b8:
b6:4e:2a:4f:41:08:db:c8:37:dc:b6:2e:ea:7e:14:0b:e5:4b:
82:c9:86:cd:c5:a8:b0:fa:be:8f:a3:1b:5f:94:b9:9d:2e:0e:
c6:a3:5d:f8:fb:0c:aa:29:30:0c:6e:3c:0a:0a:e7:b4:d5:5f:
7a:a5:11:eb:b0:e0:7d:0d:3e:e2:ee:b0:56:43:06:47:9a:cf:
bd:fb:bf:e0:ad:54:3c:b6:2a:c4:b5:9b:32:56:9a:40:e5:e9:
15:02:c3:1e:b9:08:d4:f6:c6:9b:b9:75:c2:0c:d7:f1:1a:46:
83:56:44:3a:87:1f:dd:e0:52:a2:57:df:30:38:2a:a8:56:d6:
6b:41:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org