Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wIYWBR1I0H-OBR8D84vu6_Jq2OE.roa
File: wIYWBR1I0H-OBR8D84vu6_Jq2OE.roa (raw, json)
Hash identifier: t3828YUyCt0NC9X1yTPKnfD4X5djuap6kCSObDkIB+M=
Subject key identifier: C0:86:16:05:1D:48:D0:7F:8E:05:1F:03:F3:8B:EE:EB:F2:6A:D8:E1
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09BCA647
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wIYWBR1I0H-OBR8D84vu6_Jq2OE.roa
Signing time: Tue 28 Jun 2022 07:04:13 +0000
ROA not before: Tue 28 Jun 2022 07:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163358279 (0x9bca647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 28 07:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c08616051d48d07f8e051f03f38beeebf26ad8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:04:d8:88:78:3f:3a:22:31:af:65:7d:ef:
44:50:a5:9d:06:f1:ee:f4:ff:f8:3e:12:e7:54:ae:
e6:9b:1c:55:f2:7e:a9:c3:cc:e1:da:11:1b:3e:8f:
6b:0c:c0:71:fe:85:b8:45:33:a6:b8:3f:fd:6c:7e:
25:6e:b6:2c:5d:6a:43:9b:ab:bf:c1:e2:f1:18:26:
b6:58:de:15:2a:ed:b4:dc:59:16:c0:a6:67:ba:9a:
83:f4:f8:bc:37:97:2f:65:68:e9:9f:49:02:7a:2b:
aa:7f:09:e6:52:86:11:62:64:05:35:7a:86:b4:28:
db:a7:b8:f4:62:bf:94:50:bd:d4:e9:03:4a:e2:13:
38:dd:0b:13:ed:40:ad:28:45:63:7e:a2:6f:80:49:
a3:d5:47:c3:67:a7:35:81:5c:7b:b5:66:f0:e9:29:
19:5e:f3:b7:e3:5b:a2:28:f3:e0:53:4e:5c:4b:18:
e7:5a:19:fb:c2:17:2a:df:af:54:62:5b:78:c1:05:
ec:c2:91:41:13:81:1c:0b:32:23:a1:83:f2:d0:68:
80:75:2d:dd:9a:e0:bd:82:6c:d3:0a:f3:52:14:f5:
4f:b8:e0:4f:5b:27:85:ac:f5:a4:0e:73:55:26:9f:
26:26:ba:be:e3:47:25:06:f7:06:9c:f8:4c:9e:3c:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:16:05:1D:48:D0:7F:8E:05:1F:03:F3:8B:EE:EB:F2:6A:D8:E1
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wIYWBR1I0H-OBR8D84vu6_Jq2OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
77.105.6.0/24
109.121.32.0/24
109.121.34.0/23
109.121.38.0/24
109.121.40.0/23
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a7:d6:ef:6f:0b:9b:fa:d8:16:c1:90:9b:a6:c3:4f:5c:65:
bf:11:25:02:10:1e:b9:92:b6:84:98:38:4a:5b:d2:37:50:b8:
2e:0a:3f:9e:62:29:33:a9:7c:9b:05:98:c0:28:21:d6:80:cb:
91:7c:ab:50:c7:3a:ac:c6:2c:06:51:8a:64:03:82:6c:db:83:
46:2d:ec:93:ac:e8:a3:98:a0:62:d0:ea:c3:f2:1e:f2:ff:58:
00:4d:83:f7:bd:60:b1:45:a8:3b:d0:19:de:74:ff:f1:a1:d3:
f2:ea:fb:af:72:86:87:f1:6d:e4:fb:75:d4:56:d4:45:ea:4a:
b4:f9:86:86:33:41:c4:ab:aa:a5:3b:0a:ba:88:08:bc:32:72:
e2:4f:45:23:b1:e2:a4:ef:e5:a2:57:cf:f2:bf:ad:0a:fb:3e:
35:e5:e3:19:ca:9a:a6:de:69:95:f4:78:11:0d:44:02:42:23:
d8:29:d3:5b:02:ba:67:8b:77:b1:bb:b8:f5:ba:10:7e:da:85:
2d:31:75:da:b5:82:00:e3:e8:d3:da:21:e4:b3:6d:48:c3:d0:
da:46:fb:05:16:3a:1f:6d:0e:fd:b8:e4:af:f3:5f:33:a1:8a:
57:87:89:59:b5:18:eb:bb:01:9c:e0:1c:d3:2b:d0:6f:a8:a1:
f8:dd:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:20 2023 by rpki-client on console-ams.rpki-client.org