Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/8wqZfTWtAcyveKg1wGUunXWyR2c.roa
File: 8wqZfTWtAcyveKg1wGUunXWyR2c.roa (raw, json)
Hash identifier: ITy8VXJwKzHzF5Y9n1MfRmvZ9nZz5of7QCFsy5Zc6I0=
Subject key identifier: F3:0A:99:7D:35:AD:01:CC:AF:78:A8:35:C0:65:2E:9D:75:B2:47:67
Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial: 018571555F5C379AED57AC63705E4501283C
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/8wqZfTWtAcyveKg1wGUunXWyR2c.roa
Signing time: Mon 02 Jan 2023 07:14:58 +0000
ROA not before: Mon 02 Jan 2023 07:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42346
IP address blocks: 77.75.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:5f:5c:37:9a:ed:57:ac:63:70:5e:45:01:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
Validity
Not Before: Jan 2 07:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30a997d35ad01ccaf78a835c0652e9d75b24767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:97:8b:1c:3a:d4:b3:db:da:2d:fc:c5:54:
bd:db:8a:c4:c2:ff:f5:4e:45:fd:7e:fa:48:f3:c8:
c0:bc:36:c6:19:67:68:32:75:9a:a9:e0:70:2c:76:
67:a0:70:bd:98:58:6b:63:ed:b7:4b:b7:cd:b6:fa:
1a:7b:e0:44:7a:37:63:5d:c9:0c:96:5c:39:ed:78:
aa:33:38:21:6e:77:7d:1d:3b:dd:56:ed:8b:47:cc:
a5:06:c2:7d:37:4c:df:f7:f7:d5:9f:96:0e:04:66:
72:1f:06:1b:d0:12:47:43:b0:b7:03:75:82:f2:3f:
90:0f:6a:58:24:0b:42:fb:07:73:bd:0c:a0:5d:92:
e7:fe:0b:46:84:b1:d2:ed:43:31:f5:4d:98:27:44:
0e:bc:50:07:a7:17:08:27:4e:c5:f8:4b:b1:e6:7c:
6b:ce:c9:84:81:dd:17:73:a5:4b:a9:cf:f2:24:48:
71:74:b7:51:d7:5b:6e:ec:6d:a9:96:a7:01:82:2c:
9c:c0:16:4e:eb:d4:26:0f:cf:57:fd:a2:26:b3:1d:
e9:63:e4:6a:93:c3:76:3f:36:ac:49:fe:d4:1a:ca:
73:3f:30:e1:71:87:02:1f:66:9b:ab:4f:96:cd:72:
21:e1:4a:0d:5d:6a:b0:82:64:a8:90:93:0b:f0:9b:
20:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:99:7D:35:AD:01:CC:AF:78:A8:35:C0:65:2E:9D:75:B2:47:67
X509v3 Authority Key Identifier:
keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/8wqZfTWtAcyveKg1wGUunXWyR2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
Signature Algorithm: sha256WithRSAEncryption
62:99:5a:a5:72:7b:a7:d6:04:0f:43:fb:d6:9f:c5:31:fb:69:
0f:57:2d:07:77:ce:04:28:41:e5:c9:bb:32:66:b5:ab:e4:50:
60:fc:da:0d:b2:ed:f9:2c:62:15:73:c7:84:d8:af:0d:06:84:
80:d1:53:e7:ba:3e:1d:03:a9:d5:ab:f6:ba:4f:45:14:ec:04:
ac:2d:96:cd:4e:37:63:f0:06:7c:a0:5c:c9:3e:e6:b9:bb:7f:
d5:71:3f:bc:c2:9a:d6:c4:36:72:89:6f:0c:00:b0:3f:9d:c6:
20:39:39:2a:15:d2:ce:f8:02:11:50:87:79:d7:47:d3:53:6e:
03:c2:43:cb:8d:e7:43:f7:1e:13:cf:51:4c:5f:59:ab:47:45:
d3:0a:3e:e3:61:ad:b5:5f:38:77:c5:55:1a:44:79:66:72:fd:
df:5b:88:c7:57:af:23:d6:7e:29:99:af:57:e5:23:e7:20:4e:
3c:e8:4d:f9:9a:7d:3a:30:f5:ee:6f:32:1c:74:4e:4c:21:98:
67:2a:2f:9b:b2:4f:c8:f7:ba:01:e9:7e:17:dd:3b:87:e9:09:
9c:2e:d9:d8:d6:67:d7:03:d3:19:67:50:05:bb:07:d1:c1:27:
97:d3:77:9c:6b:9b:27:f5:85:42:d5:7e:b8:04:3d:b6:6e:c1:
3f:18:50:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:38 2025 by rpki-client