Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/BNYmGvwf9yFhCloF6zjMYu8YWkU.roa
File: BNYmGvwf9yFhCloF6zjMYu8YWkU.roa (raw, json)
Hash identifier: Wp3LcL/Cu8ohtlh3wptEV3HZbSGy8CAcde54rIM7zjA=
Subject key identifier: 04:D6:26:1A:FC:1F:F7:21:61:0A:5A:05:EB:38:CC:62:EF:18:5A:45
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 010F1082
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/BNYmGvwf9yFhCloF6zjMYu8YWkU.roa
Signing time: Sun 17 Apr 2022 09:51:12 +0000
ROA not before: Sun 17 Apr 2022 09:51:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 178.20.215.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
77.243.91.0/24 maxlen: 24
77.243.89.0/24 maxlen: 24
77.243.88.0/24 maxlen: 24
185.101.21.0/24 maxlen: 24
185.101.20.0/24 maxlen: 24
178.20.213.0/24 maxlen: 24
178.20.212.0/24 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17764482 (0x10f1082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Apr 17 09:51:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04d6261afc1ff721610a5a05eb38cc62ef185a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:2d:bf:a3:7c:33:3c:96:d3:de:c2:78:3b:
69:34:38:45:56:32:9b:bd:73:54:d4:e6:ce:de:8c:
39:7f:64:79:64:14:e4:d7:ab:40:e5:bf:26:b3:c1:
5a:64:17:ab:e6:31:d0:fb:36:05:42:c8:76:53:66:
2b:91:b3:71:aa:51:d3:61:16:2f:fa:25:e3:6c:b7:
bb:8f:cc:bc:41:61:e9:ca:1a:4d:62:6b:fe:7f:91:
89:5c:7c:49:15:2c:06:cb:28:d4:29:7b:2d:3c:3c:
35:7e:b8:6e:56:23:77:b6:d0:db:1f:95:f5:9d:91:
2b:bd:96:95:b1:d2:a6:db:21:d2:82:31:fe:f4:d4:
e6:60:7e:de:0d:7d:c3:c5:aa:eb:03:ab:5a:b0:4e:
b7:69:4d:75:6c:f8:31:cd:4a:7f:1f:84:f8:51:6f:
20:60:c8:f4:37:9c:94:57:3f:15:27:1c:c5:b3:04:
84:09:76:d7:29:e4:da:08:16:90:37:56:a0:50:fc:
74:4b:42:c5:e9:67:83:61:09:e0:53:db:38:20:fa:
19:cb:b1:52:10:40:fb:d4:07:74:6e:5a:fe:31:62:
9b:c9:1a:af:45:b4:f2:64:51:1b:c9:07:4d:e8:3c:
b6:bb:c8:1a:d8:08:92:23:52:03:5d:91:5f:7b:24:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D6:26:1A:FC:1F:F7:21:61:0A:5A:05:EB:38:CC:62:EF:18:5A:45
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/BNYmGvwf9yFhCloF6zjMYu8YWkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/23
77.243.91.0/24
178.20.212.0/22
185.101.20.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:dd:9b:f7:96:f6:e9:27:1c:c4:94:7c:c7:2a:95:ad:35:06:
9a:70:44:75:6f:f9:c5:4e:41:ea:e7:e6:54:23:71:89:2b:6b:
49:2e:b3:97:ea:bd:c9:fb:b4:c5:a8:15:43:ea:5a:d0:bf:f5:
d1:29:ad:9d:da:0c:9f:a9:9f:e8:c5:25:f0:c4:72:da:57:bc:
27:8f:c1:eb:a5:8e:ae:3a:a0:a5:6b:15:a4:d0:5c:be:19:0c:
0e:b0:33:01:c5:bd:77:ae:e5:c3:e7:91:ad:36:1d:bd:e6:db:
ec:0b:af:81:bb:67:3f:cc:0a:c2:5c:d2:f8:e2:ca:dd:88:9d:
e0:27:81:cc:50:80:3f:74:3d:7c:43:68:c4:96:db:93:f3:de:
09:5e:29:d1:40:07:e3:a3:1b:8f:50:56:4b:56:e6:98:0c:bc:
64:0c:58:78:56:6c:02:0b:56:fa:41:15:19:ce:94:c0:7a:28:
c5:40:48:0d:38:c9:97:a2:7e:2b:11:51:bb:00:4a:3b:95:8b:
9d:b3:84:b5:e8:56:ae:f7:58:e5:2d:5d:e0:d0:92:ed:25:e8:
db:95:9e:88:91:e8:0d:4a:7e:fd:65:d5:c1:eb:ea:d9:a7:b8:
23:44:51:e6:a7:77:04:4c:0c:b7:27:a3:2d:8d:4d:c5:1e:fa:
2f:d0:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:41 2024 by rpki-client on console-fra.rpki-client.org