Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ZVHdqYy9BYr2QZno3Khiei1BN28.roa
File: ZVHdqYy9BYr2QZno3Khiei1BN28.roa (raw, json)
Hash identifier: qxGYOcsJd+Gc/bNXee+LoqWqLhgqm/EzezNAGwc+xu4=
Subject key identifier: 65:51:DD:A9:8C:BD:05:8A:F6:41:99:E8:DC:A8:62:7A:2D:41:37:6F
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 0A17D996
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ZVHdqYy9BYr2QZno3Khiei1BN28.roa
Signing time: Wed 29 Jun 2022 08:21:01 +0000
ROA not before: Wed 29 Jun 2022 08:21:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213363
IP address blocks: 77.83.122.0/24 maxlen: 24
77.83.120.0/24 maxlen: 24
77.83.123.0/24 maxlen: 24
77.83.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169335190 (0xa17d996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Jun 29 08:21:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6551dda98cbd058af64199e8dca8627a2d41376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:ed:9f:b4:aa:7b:07:8d:f5:9a:22:2d:71:
d6:a7:7f:98:ae:40:53:cf:13:84:c9:99:1b:ad:72:
bc:26:01:33:66:03:da:e3:ed:19:47:98:d5:28:4e:
ee:ac:18:46:d2:61:f9:db:c6:55:bf:81:b8:bd:51:
2a:1f:84:f9:f1:06:6f:16:8a:13:76:d2:4e:3f:ab:
82:ab:18:47:34:cc:b1:64:5b:d7:c5:b2:b1:75:12:
c2:36:cb:bb:f2:92:20:50:fb:9c:4b:ac:d3:cb:a7:
63:6d:a0:1f:c2:7c:ec:d2:02:45:8a:1e:54:8a:ff:
a2:96:b0:0d:e7:6b:ec:f1:58:38:f7:d5:2d:1d:b5:
1b:5c:9b:8d:a0:c9:3f:70:91:3f:99:3c:62:39:f0:
78:12:63:74:f3:bc:d0:16:1d:c5:0d:2c:44:e0:d2:
0e:85:c2:42:f2:40:f1:92:b6:46:03:61:85:c4:a5:
1c:f6:56:ed:41:28:11:87:e5:64:34:6a:a5:c0:3c:
b4:7c:3a:fc:4b:b8:a0:46:a4:e3:08:6e:ca:e4:9b:
c4:76:db:a8:cb:db:25:ad:f9:a8:65:a0:fa:06:b8:
1c:9d:52:aa:be:df:43:15:fb:92:d7:64:8d:ff:f7:
3c:f9:7b:ec:33:fa:47:a2:d7:37:57:86:92:f9:9b:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:DD:A9:8C:BD:05:8A:F6:41:99:E8:DC:A8:62:7A:2D:41:37:6F
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/ZVHdqYy9BYr2QZno3Khiei1BN28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:e6:b8:03:50:4a:69:64:e9:a0:af:da:3a:9a:55:13:80:c7:
14:b6:44:e9:b3:4d:17:25:cd:e6:de:7e:7a:02:d3:d5:eb:42:
84:23:0b:39:dd:d3:2a:a9:38:d9:3b:27:07:26:49:4e:2f:49:
ec:d0:0b:7f:da:b8:db:4c:7b:20:0e:fc:b3:c3:9d:e0:c7:05:
c7:7d:35:62:02:5f:73:13:5d:a2:f2:64:00:60:c3:04:c0:88:
c6:72:e0:2e:90:88:5d:10:b1:77:10:65:ca:41:13:82:ce:ef:
47:93:02:b4:09:bb:c8:29:9d:29:4c:33:f1:ac:56:0a:46:9d:
72:63:57:a6:17:e6:2a:0c:0f:b9:57:21:53:7f:79:e8:c9:11:
fa:08:b8:cb:94:03:d3:9d:56:3b:26:8d:1a:d8:49:a2:f0:1f:
e4:82:72:60:5b:cd:95:14:b8:37:09:c0:bf:3f:cd:26:7d:4e:
40:23:04:cc:31:57:ac:d1:66:42:a4:27:a6:e8:ca:ce:fb:05:
9e:5a:c2:c7:b8:ac:09:f4:c9:31:29:4d:4d:be:ab:5c:58:a2:
8b:22:b3:05:c3:e4:2f:b2:2d:dc:75:8b:e2:86:b7:55:38:8f:
92:f6:93:f0:55:7d:7f:3e:6d:7a:07:86:9a:ec:22:90:0a:8e:
19:51:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:31 2025 by rpki-client