Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/q2NTGid5l_fIzLmdDw6Gs85jwO8.roa
File: q2NTGid5l_fIzLmdDw6Gs85jwO8.roa (raw, json)
Hash identifier: q+3ZlEx9fcsUUcWhRc6tAaWFsSGMa//OQJBmibHFDR8=
Subject key identifier: AB:63:53:1A:27:79:97:F7:C8:CC:B9:9D:0F:0E:86:B3:CE:63:C0:EF
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 01848769B92BDFF95244E301D40F137E765D
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/q2NTGid5l_fIzLmdDw6Gs85jwO8.roa
Signing time: Thu 17 Nov 2022 21:06:03 +0000
ROA not before: Thu 17 Nov 2022 21:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59835
IP address blocks: 77.80.128.0/17 maxlen: 17
77.80.253.0/24 maxlen: 24
77.80.254.0/24 maxlen: 24
77.80.255.0/24 maxlen: 24
185.69.168.0/24 maxlen: 24
2a05:2240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:69:b9:2b:df:f9:52:44:e3:01:d4:0f:13:7e:76:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Nov 17 21:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab63531a277997f7c8ccb99d0f0e86b3ce63c0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:8c:f2:31:69:33:d0:32:34:f3:ec:51:22:
ba:df:04:6a:33:ce:f4:2d:4b:8e:f5:07:f7:aa:59:
4e:41:0a:ed:1d:af:b8:aa:f6:c5:98:85:db:21:8a:
d5:ce:ad:33:05:96:7c:a0:33:d1:0c:7c:7c:f2:f1:
11:9e:cb:ed:c0:4d:10:81:89:a6:17:a5:de:d3:30:
b8:66:74:0d:bd:8d:6d:6a:75:e1:6a:7b:5e:f5:66:
0b:05:2f:28:b4:a6:6f:ec:cd:a1:be:d0:05:5c:e2:
19:0a:a6:15:b9:03:1d:4a:bb:24:e2:81:09:38:69:
19:8f:d1:38:9c:da:9a:07:5d:21:80:59:13:07:ec:
c5:c4:26:f6:84:35:d9:ab:95:d0:fc:1b:26:c9:0a:
ed:8a:fa:c0:4b:c5:e1:7e:21:86:a3:d8:57:6b:8f:
4f:6c:7b:59:21:fe:f6:b4:09:78:5a:00:ee:2e:2c:
1b:ce:72:61:e9:9e:56:f7:4c:09:88:33:f3:80:16:
96:61:fd:5f:89:a4:a2:46:8b:dc:e1:b6:16:42:db:
c7:c9:43:bf:85:c1:a4:1c:c8:c7:96:ef:17:18:a7:
67:cd:5f:cc:e7:27:8c:d5:c2:28:fd:c6:d7:34:7c:
1c:96:e2:a4:8d:08:9d:08:13:5e:f1:7c:51:6f:01:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:53:1A:27:79:97:F7:C8:CC:B9:9D:0F:0E:86:B3:CE:63:C0:EF
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/q2NTGid5l_fIzLmdDw6Gs85jwO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
185.69.168.0/24
IPv6:
2a05:2240::/32
Signature Algorithm: sha256WithRSAEncryption
b7:d1:4b:e0:fa:46:f9:34:6f:67:aa:ed:29:74:22:a6:5e:b8:
17:3f:c2:bc:7f:dc:4d:ec:0f:d5:33:9f:ac:76:08:85:e8:cf:
f4:6f:05:43:27:11:6a:46:fe:80:c5:65:61:b0:78:3b:1d:ac:
c7:87:45:cd:61:38:0f:cd:1f:c0:90:fa:8b:94:0b:9d:a3:03:
a2:3d:5c:f5:9e:5c:05:e6:86:80:41:4b:dd:10:b1:c1:de:32:
1c:5d:da:ad:0b:08:70:a5:b7:89:41:d8:a5:cd:98:39:97:18:
da:87:02:f4:f1:c8:dc:b0:a8:c3:a5:73:c2:42:3d:58:d0:07:
fc:f9:11:1f:e4:25:6b:f1:62:18:39:aa:ff:10:74:4f:51:fc:
82:a8:34:20:95:7a:66:47:5a:d0:5e:60:87:9b:15:db:74:77:
61:d0:2e:6c:23:4b:08:a5:78:20:e6:72:4a:59:10:ae:1a:87:
8e:e6:35:e7:cf:e1:3f:ba:e2:74:30:64:07:d9:f9:67:a9:71:
c9:47:a2:b2:3c:67:90:05:7e:e3:98:75:73:66:d0:4e:32:40:
f1:6f:99:0e:ea:43:0f:d1:f9:68:34:42:6a:60:86:3c:23:52:
3d:5a:f5:13:06:53:a4:4a:93:d6:55:60:91:af:b5:c1:71:05:
28:cf:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:46 2023 by rpki-client on console-ams.rpki-client.org