Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/aLfDNAvyYtjW2zg9b14l96JG-cc.roa
File: aLfDNAvyYtjW2zg9b14l96JG-cc.roa (raw, json)
Hash identifier: PWsSiwXmJkeJRHyeeGlpzpFOi2Z9rgKJ+IDpSQza5wM=
Subject key identifier: 68:B7:C3:34:0B:F2:62:D8:D6:DB:38:3D:6F:5E:25:F7:A2:46:F9:C7
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 0814E2ED
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/aLfDNAvyYtjW2zg9b14l96JG-cc.roa
Signing time: Sat 01 Jan 2022 07:56:24 +0000
ROA not before: Sat 01 Jan 2022 07:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42310
IP address blocks: 77.72.72.0/21 maxlen: 21
77.72.72.0/22 maxlen: 22
77.72.73.0/24 maxlen: 24
77.72.72.0/24 maxlen: 24
77.72.72.0/23 maxlen: 23
77.72.74.0/23 maxlen: 23
77.72.74.0/24 maxlen: 24
77.72.76.0/23 maxlen: 23
77.72.75.0/24 maxlen: 24
77.72.76.0/22 maxlen: 22
77.72.78.0/23 maxlen: 23
77.72.78.0/24 maxlen: 24
77.72.79.0/24 maxlen: 24
2a01:4b0:1::/48 maxlen: 48
2a01:4b0:2::/48 maxlen: 48
2a01:4b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135586541 (0x814e2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jan 1 07:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68b7c3340bf262d8d6db383d6f5e25f7a246f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:0a:94:90:c1:01:e7:ed:03:79:82:0f:43:
07:0f:ba:d3:e1:88:a9:b8:3e:f9:b7:f6:39:b9:22:
fe:cc:29:c4:68:4d:6c:50:bc:ec:95:bb:6b:ce:2f:
a1:68:40:55:cb:18:7f:f8:46:68:e4:f6:13:e1:55:
f6:3c:6e:0d:90:01:4e:59:e9:c0:1c:46:2c:95:b3:
f4:95:05:07:84:8e:7d:31:5a:81:b3:bb:56:3c:b1:
a8:a3:01:bd:f1:df:6a:e5:a3:12:1e:41:d0:c5:fe:
2b:96:8a:66:a1:f9:e3:7e:9c:c6:00:82:b7:dd:d3:
6c:77:90:e6:1f:e4:8f:6b:03:a7:2f:02:30:de:53:
f4:02:b4:bd:94:48:19:90:fd:27:b7:a2:fb:62:15:
39:1b:41:f0:e5:6d:35:7f:69:d2:fd:f3:cd:18:f6:
50:52:a5:43:94:3e:77:8f:d3:3e:30:a3:4f:ec:04:
b4:ba:07:d0:88:03:58:4a:53:49:ea:50:05:05:f7:
42:02:95:23:5d:dd:35:6f:fc:15:e3:67:1a:49:70:
b5:c8:e1:67:b5:56:57:0e:69:bd:1c:a0:94:6c:39:
55:e7:27:95:74:7c:90:63:86:96:dc:8e:6d:a2:94:
03:3e:15:a2:80:d1:b1:2a:9d:57:a4:4d:53:cf:71:
ef:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B7:C3:34:0B:F2:62:D8:D6:DB:38:3D:6F:5E:25:F7:A2:46:F9:C7
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/aLfDNAvyYtjW2zg9b14l96JG-cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.72.0/21
IPv6:
2a01:4b0::-2a01:4b0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:86:e2:7d:86:51:f1:4f:0d:93:82:16:34:23:f1:50:44:8c:
57:e4:04:c3:b9:8a:93:95:4d:ad:60:cf:91:b3:cb:8c:94:12:
64:c5:79:9b:57:04:0f:56:4b:96:76:6c:71:61:90:23:26:e2:
9e:50:a8:fa:1f:a9:0f:5e:a4:ff:c7:11:f5:ba:dc:4f:ff:bd:
71:b3:1a:1d:22:ee:2c:a3:ae:15:1f:d5:46:9f:29:58:f5:c6:
32:0e:e5:4f:1d:ae:d6:f5:0c:de:da:e5:24:40:62:41:9b:ec:
97:00:9d:17:22:6c:2a:62:db:be:4b:25:75:66:ed:80:30:9c:
ed:c5:c5:e0:37:f6:7c:b7:ed:09:d4:50:fe:0a:06:0a:58:06:
35:eb:80:22:aa:a8:55:af:33:ac:37:55:55:c5:e6:e1:e3:21:
19:45:6a:1c:4c:eb:27:f5:c8:73:f1:3f:f0:61:3d:e1:3b:9e:
6a:93:b7:1d:a6:78:07:e2:b2:e5:42:02:6e:41:48:cd:4d:92:
be:f5:a5:e7:6c:f1:f8:76:dd:62:51:13:f1:cf:e5:23:81:79:
ba:c3:80:2e:da:4c:f1:db:d7:31:e8:ec:03:d0:d0:4c:92:13:
0d:f4:a4:9c:34:07:08:55:17:d2:cf:0f:92:aa:76:56:4d:62:
34:a9:07:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:29 2024 by rpki-client on console-fra.rpki-client.org