Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/bIBBzTLTOXUcTLQJG4gnL5Q7pHM.roa
File: bIBBzTLTOXUcTLQJG4gnL5Q7pHM.roa (raw, json)
Hash identifier: f0CaxTsGF10OQn6JAzAPG3vy8h2A4MUg0041HrmQjOg=
Subject key identifier: 6C:80:41:CD:32:D3:39:75:1C:4C:B4:09:1B:88:27:2F:94:3B:A4:73
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 0813EF26
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/bIBBzTLTOXUcTLQJG4gnL5Q7pHM.roa
Signing time: Sat 01 Jan 2022 07:56:23 +0000
ROA not before: Sat 01 Jan 2022 07:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 786
IP address blocks: 77.72.72.0/24 maxlen: 24
77.72.72.0/23 maxlen: 23
77.72.73.0/24 maxlen: 24
77.72.72.0/21 maxlen: 21
77.72.76.0/22 maxlen: 22
77.72.74.0/24 maxlen: 24
77.72.74.0/23 maxlen: 23
77.72.75.0/24 maxlen: 24
77.72.76.0/23 maxlen: 23
77.72.76.0/24 maxlen: 24
77.72.77.0/24 maxlen: 24
77.72.72.0/22 maxlen: 22
77.72.78.0/23 maxlen: 23
77.72.78.0/24 maxlen: 24
77.72.79.0/24 maxlen: 24
2a01:4b0:1::/48 maxlen: 48
2a01:4b0:2::/48 maxlen: 48
2a01:4b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135524134 (0x813ef26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Jan 1 07:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c8041cd32d339751c4cb4091b88272f943ba473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:0f:ef:6a:b1:cc:1f:a7:40:45:9a:69:71:
c5:04:58:90:88:44:95:5c:7b:98:26:11:2e:8f:29:
0a:8d:32:a5:c8:a0:aa:5b:c8:35:4f:01:b2:41:e8:
d0:84:22:a2:ea:b2:89:63:63:96:be:bd:e6:6b:22:
9c:c9:a7:3d:a1:68:87:dd:1b:96:6a:1a:78:5a:8f:
38:e2:e5:d8:a0:e6:92:4d:57:50:b4:b2:72:54:3b:
d4:67:a1:45:a3:14:45:f6:e6:f7:43:2f:ae:04:17:
dc:45:c6:c3:c9:81:9e:1f:38:6f:35:e8:b9:e8:d8:
0a:59:de:af:d4:fc:d3:88:8e:a5:96:84:3b:93:d5:
e9:e1:fe:b9:35:26:58:0f:80:ed:a0:2d:7b:ce:cb:
5c:53:73:63:f8:7c:4d:0e:2b:6f:55:30:d3:bd:2c:
f8:91:fd:7f:19:2a:56:57:f4:cb:61:3e:0a:60:0f:
cd:40:6a:0a:f5:8a:9b:0d:7c:65:5b:d4:e3:cc:c8:
20:ca:23:f1:40:7e:7f:ca:0f:7e:94:4f:06:c0:d0:
c4:39:83:67:64:da:f1:37:d0:46:77:f2:d5:f5:37:
a9:09:30:de:b1:b3:35:32:0c:5c:2d:37:d3:0c:82:
c8:ee:50:16:6d:f7:26:58:2c:b5:3c:c1:ac:7a:5d:
47:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:41:CD:32:D3:39:75:1C:4C:B4:09:1B:88:27:2F:94:3B:A4:73
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/bIBBzTLTOXUcTLQJG4gnL5Q7pHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.72.0/21
IPv6:
2a01:4b0::-2a01:4b0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
36:6a:45:20:03:29:07:ee:14:0e:ab:c3:42:06:df:75:92:8e:
f0:90:53:8b:2c:eb:1f:e0:57:bc:f8:03:b6:e4:ab:00:72:78:
b8:a6:8d:2c:d7:b5:f6:3c:f4:94:18:2a:7a:81:6f:a5:ab:b4:
68:7e:49:33:b7:d7:c3:c1:eb:0d:54:1a:f4:68:91:57:37:5f:
35:99:92:e3:fa:c3:9a:cd:22:1d:5e:ef:c3:ee:5a:64:da:f1:
c3:fe:e9:bb:3b:f8:9d:00:fa:0b:e6:0f:66:81:5c:3f:b4:74:
b2:bd:d1:04:b6:aa:c9:80:8a:4f:4e:a5:d5:5d:8f:6f:92:82:
f1:e5:de:62:83:bd:79:c1:70:af:06:1f:21:80:c5:6a:c5:c2:
a6:30:b1:e2:8a:85:16:c0:b1:17:2d:16:9b:96:ca:82:2e:67:
bb:76:b9:25:6e:09:8b:a5:4f:cd:c7:5f:0f:c0:c3:35:b6:fe:
85:fa:fb:20:9e:94:c0:3b:5d:63:a0:87:4f:a1:04:95:db:7d:
fc:78:5f:ee:ef:17:c6:2c:87:a5:84:ec:46:1c:92:f4:46:45:
91:07:9c:aa:aa:c8:96:00:f9:bc:02:b4:9b:6f:8e:c2:13:d1:
b3:3d:0d:b2:d9:1d:a7:bb:c3:0f:04:00:ce:db:55:ec:49:01:
6f:86:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:09 2024 by rpki-client on console-ams.rpki-client.org