Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x-F5dJ3TY8o6HHYGhvT9V5b70n0.roa
File: x-F5dJ3TY8o6HHYGhvT9V5b70n0.roa (raw, json)
Hash identifier: JcyFb5/3qOimCoJpUwHBVlAh3asiXHt1rwJ5iIWdPAc=
Subject key identifier: C7:E1:79:74:9D:D3:63:CA:3A:1C:76:06:86:F4:FD:57:96:FB:D2:7D
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 098FD2F2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x-F5dJ3TY8o6HHYGhvT9V5b70n0.roa
Signing time: Wed 15 Jun 2022 10:10:45 +0000
ROA not before: Wed 15 Jun 2022 10:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160420594 (0x98fd2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 15 10:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e179749dd363ca3a1c760686f4fd5796fbd27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:e5:f9:31:29:7c:80:f3:91:c0:36:54:79:
46:99:33:eb:28:1e:13:f2:56:3a:87:7d:73:1e:c8:
7b:d0:7f:ae:e7:db:d0:bc:02:59:5c:37:b6:f9:e1:
a7:02:9b:76:fd:61:e8:9d:9e:13:81:c5:13:a4:61:
7e:6c:06:13:d8:bd:77:57:97:6b:c3:43:b8:a2:b0:
2a:90:d8:81:2b:b2:6e:52:e3:90:64:85:ed:1e:83:
70:3b:0a:2f:28:32:0e:01:d4:3d:69:a0:46:42:47:
92:55:52:ab:21:ec:0e:f1:06:96:9c:2a:40:e6:1c:
4d:75:40:c4:b0:00:8a:75:f3:31:d1:f0:6b:69:52:
64:a9:29:3e:fa:21:1b:81:96:c5:b0:b5:c7:07:45:
4d:a8:27:21:7a:36:9c:a9:bc:36:f4:f7:e1:e7:52:
00:6e:a6:eb:a2:9f:a7:90:55:5f:d0:2a:da:5f:db:
87:09:7b:0f:6c:ea:e4:f1:f4:3c:09:49:21:a1:1b:
02:42:13:8f:78:b7:4f:e9:4d:2c:27:36:cf:41:06:
ea:e8:1a:ff:7e:a0:38:df:b3:bb:af:00:1d:66:16:
c6:39:a5:c2:b0:99:f3:d2:0c:13:30:b5:75:c2:3e:
10:9c:8f:e6:1f:26:ed:cb:09:e5:25:6b:30:4d:c0:
5a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:79:74:9D:D3:63:CA:3A:1C:76:06:86:F4:FD:57:96:FB:D2:7D
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/x-F5dJ3TY8o6HHYGhvT9V5b70n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.32.0/24
109.121.34.0/24
109.121.38.0/24
109.121.43.0-109.121.44.255
109.121.46.0/24
Signature Algorithm: sha256WithRSAEncryption
98:28:59:21:8d:47:c2:31:22:e1:2b:50:3a:f1:ff:e9:36:25:
0d:2d:1f:97:bb:78:eb:c9:e9:c2:c2:f5:1d:b4:ec:18:b7:e7:
84:a1:86:e7:d4:bb:66:b3:27:e6:31:b7:18:54:f7:ce:e3:b5:
55:27:13:20:3c:f6:6c:f3:55:d3:40:dc:14:70:eb:77:97:9c:
e4:fd:db:96:60:14:f2:a9:db:b1:7b:3c:a3:5d:c2:fa:13:e7:
20:a8:e8:27:3c:69:bb:b7:47:4a:c7:8c:82:dd:7e:92:68:ad:
6c:de:d5:4d:e3:ee:81:54:f5:76:2c:a4:9b:06:3f:5c:80:d2:
60:c3:c7:0a:29:bc:df:e6:44:1c:40:f2:de:b9:d4:95:70:74:
64:be:d2:f2:1e:e9:52:59:27:e7:8f:b4:0b:99:b4:78:c9:5f:
ef:cc:80:fe:85:49:cc:60:15:d9:50:de:fa:62:ef:e2:8a:01:
75:9a:c4:3c:83:42:94:db:d1:75:c2:23:83:a5:ac:cb:36:1f:
d9:7e:9c:9b:dd:e9:f7:1e:96:80:19:5a:58:ea:fe:e2:2f:03:
c8:15:c4:16:27:99:19:14:c6:c0:68:e5:6c:e9:ed:2c:41:a8:
bc:37:6c:bc:ff:92:39:ec:08:8f:ab:39:26:63:b7:41:2e:90:
a0:4a:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org