Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t7576W8pAoMwOxMV7ZxAgCkGg9M.roa
File: t7576W8pAoMwOxMV7ZxAgCkGg9M.roa (raw, json)
Hash identifier: W8MHBDFCGUDKIrupByY7SMfXecIEVMnzcuyLHsoHxpE=
Subject key identifier: B7:BE:7B:E9:6F:29:02:83:30:3B:13:15:ED:9C:40:80:29:06:83:D3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01849EA09C806AA56F0DE3AC8295D93D6DB4
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t7576W8pAoMwOxMV7ZxAgCkGg9M.roa
Signing time: Tue 22 Nov 2022 09:17:16 +0000
ROA not before: Tue 22 Nov 2022 09:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 109.121.38.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
79.175.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:a0:9c:80:6a:a5:6f:0d:e3:ac:82:95:d9:3d:6d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 22 09:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7be7be96f290283303b1315ed9c4080290683d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:9d:3a:87:e4:b5:1a:94:18:b2:d0:52:a2:
33:00:20:5e:df:b2:a5:5c:bb:dc:ff:58:43:34:d1:
e3:ec:6c:2f:44:e6:53:61:d7:7f:90:9a:de:41:ed:
c3:9c:b3:81:55:8c:ca:c9:7a:1e:81:6b:be:1f:08:
3a:e3:47:c3:3e:ec:1c:28:4e:0c:b1:8b:0c:95:d3:
95:eb:b9:7e:b2:0f:00:5e:d6:b5:8a:0c:10:18:f2:
2d:8c:14:aa:db:e4:26:fb:33:af:b8:d8:d9:29:0f:
41:db:7b:e7:50:88:68:c4:4d:c4:1e:10:85:d7:81:
c2:46:e4:f6:62:01:7b:59:fe:55:c1:11:ba:4f:0e:
da:b8:25:d8:55:4b:6c:c6:c2:3a:d3:90:51:84:45:
7c:82:c3:e5:58:73:7c:2b:65:b3:7b:e5:48:15:f8:
d2:da:35:05:da:91:23:4d:19:98:e3:80:be:e9:6b:
4d:4e:14:5a:4f:4d:e0:eb:e4:9c:6c:2a:ed:f0:61:
83:02:af:74:69:6a:02:e6:58:49:0f:94:74:21:63:
cf:1f:1a:57:4c:75:b0:f7:77:99:a3:43:87:cd:b0:
51:09:e4:69:9c:80:3d:34:93:a2:52:85:71:e3:01:
26:34:21:7e:0e:02:1b:d8:66:aa:f3:b8:1b:d8:e0:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:7B:E9:6F:29:02:83:30:3B:13:15:ED:9C:40:80:29:06:83:D3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/t7576W8pAoMwOxMV7ZxAgCkGg9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.66.0/24
109.121.38.0/24
109.121.41.0/24
Signature Algorithm: sha256WithRSAEncryption
67:3a:cb:15:42:7c:28:7f:0b:aa:81:82:dd:11:3d:d1:84:41:
4e:1a:41:83:26:8d:60:1a:b2:99:33:65:c6:40:e7:89:ba:da:
92:f3:87:60:1f:47:22:7d:b9:4f:40:08:28:68:5d:cb:4b:60:
a7:bd:4c:10:db:f7:cc:c1:4b:9d:98:1b:3b:ff:4c:33:af:3d:
b3:38:13:25:55:d0:b1:b6:05:99:35:f6:b1:e9:2c:a3:dc:9e:
f3:86:b6:29:21:d2:27:ac:d3:ea:7f:e2:9e:c0:3e:57:96:ea:
14:e4:a8:4c:6d:5f:67:a0:4f:08:a9:08:05:d7:39:ed:1a:8d:
65:98:4d:04:77:ee:0f:98:92:cd:e2:3a:a1:18:81:08:ad:82:
be:b9:d3:01:16:5f:7e:84:ed:3c:82:a5:24:74:de:48:79:fe:
26:62:41:e6:fd:2c:38:23:57:8d:cf:8d:5a:33:05:1f:8b:96:
b3:86:12:35:c4:2a:68:95:d0:94:e4:06:7c:a4:5e:0c:10:60:
51:5d:21:33:9a:2a:e0:28:e2:6e:cf:b3:62:bd:a3:2f:6f:b6:
a9:9e:54:ec:96:2f:2e:d7:3b:9c:26:2d:ac:72:c8:7b:44:6d:
f9:dc:2f:d6:e0:1c:af:eb:49:a8:52:23:53:93:48:c0:11:4a:
c9:a9:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org