Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/dCVXcwFV5caf3BLBPv5ZfQaF7f0.roa
File: dCVXcwFV5caf3BLBPv5ZfQaF7f0.roa (raw, json)
Hash identifier: 0YaCBHeyUomFhB2os5QQfYfR+0jE7Dkfl1izpGgubEQ=
Subject key identifier: 74:25:57:73:01:55:E5:C6:9F:DC:12:C1:3E:FE:59:7D:06:85:ED:FD
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 018ABC776A8888BE518ED6C3BAC19C59C642
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/dCVXcwFV5caf3BLBPv5ZfQaF7f0.roa
Signing time: Fri 22 Sep 2023 10:37:37 +0000
ROA not before: Fri 22 Sep 2023 10:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 77.236.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:77:6a:88:88:be:51:8e:d6:c3:ba:c1:9c:59:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Sep 22 10:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=742557730155e5c69fdc12c13efe597d0685edfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9d:85:3c:49:b6:14:a3:34:21:53:5a:be:6e:
c1:40:be:0a:df:b4:a8:c5:bf:49:ce:0d:51:26:60:
9e:be:5e:d5:91:fc:72:97:33:e3:cb:16:8b:86:08:
fd:44:7c:b2:2b:ee:32:16:a3:70:66:40:78:55:fb:
db:89:ed:d1:a7:a7:bf:74:46:86:67:f7:e3:11:3f:
f2:2c:dd:5b:26:01:2e:a9:ac:9d:9b:b4:28:62:c3:
ad:87:1b:5d:4f:a1:30:25:cb:34:10:4b:86:03:94:
97:ea:78:e1:6e:c9:5b:33:0f:02:12:4f:6f:7d:b8:
3e:d4:84:8a:38:99:82:33:4e:92:6c:7b:09:19:a5:
de:f1:b7:2f:8f:b4:ef:62:71:53:5b:88:06:1d:59:
14:c8:1b:8b:ba:a7:ca:8c:30:a4:40:6f:c1:ad:da:
56:bf:d4:b7:6d:24:7b:74:29:89:6c:01:9c:d4:dd:
0b:60:f3:54:13:ba:01:57:c9:9f:72:c6:40:6f:0e:
43:59:0a:66:e8:37:72:0a:d9:9d:29:da:d2:73:d9:
ca:52:61:37:32:e6:9c:3c:5d:c6:d0:f2:83:d6:36:
f9:4e:26:1c:ff:ef:78:e3:b4:df:f2:c5:ef:86:b3:
a6:57:29:24:9a:37:d0:ad:f5:1b:97:c4:20:04:7b:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:25:57:73:01:55:E5:C6:9F:DC:12:C1:3E:FE:59:7D:06:85:ED:FD
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/dCVXcwFV5caf3BLBPv5ZfQaF7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.236.103.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ef:1b:b0:c2:1c:e0:8f:c4:21:d4:1b:03:01:aa:e8:1d:50:
9f:36:e0:1c:45:c8:a9:9d:6a:24:60:da:87:c1:ef:ff:37:34:
a1:bc:b9:c8:5f:7e:8a:25:6c:40:9f:dc:cf:dd:2a:e1:2f:a7:
ca:50:82:4e:a8:d1:98:9d:2e:66:e8:20:78:0f:08:15:5b:62:
0d:cf:87:02:90:fd:ae:4b:f9:4a:a5:51:67:3c:4c:40:27:f6:
50:e8:88:8e:ea:46:27:79:a4:be:80:7e:3a:dd:7b:6c:44:b3:
a3:89:33:df:99:d8:4f:a8:94:33:9d:3f:1a:89:f8:9f:88:87:
ba:13:5c:e9:38:02:ef:eb:e5:6d:a1:43:1b:bc:f2:64:f8:94:
8f:a2:9b:05:a0:ba:d1:c6:52:0a:12:b7:47:2c:b7:ed:80:a9:
d2:20:f3:ce:65:ce:7f:f7:84:2d:a3:36:b4:9a:bc:31:b1:e2:
50:2d:d0:32:d2:0d:84:b3:c5:8a:b6:d7:21:56:c8:50:95:73:
a8:29:5e:31:9e:6e:6d:38:5b:4c:ea:7a:32:6b:52:af:5a:12:
f7:f0:d2:45:ba:99:cf:4c:e6:83:0c:39:1a:ee:bf:ba:d2:b7:
2c:bd:40:4c:f5:3e:77:31:a0:2d:43:e5:5d:ff:56:ca:c6:ea:
67:7f:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:46 2025 by rpki-client