Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-Q4DENPgyd7A4RnR8icOmZFU1zI.roa
File: 1-Q4DENPgyd7A4RnR8icOmZFU1zI.roa (raw, json)
Hash identifier: +k4gkobCDPHjnQ8K5RggMPt0BiXY+80nEBxT5BUtPws=
Subject key identifier: F9:0E:03:10:D3:E0:C9:DE:C0:E1:19:D1:F2:27:0E:99:91:54:D7:32
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01856D38754F47EB8C868195A0EFE7509154
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-Q4DENPgyd7A4RnR8icOmZFU1zI.roa
Signing time: Sun 01 Jan 2023 12:04:54 +0000
ROA not before: Sun 01 Jan 2023 12:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209917
IP address blocks: 77.72.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:75:4f:47:eb:8c:86:81:95:a0:ef:e7:50:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Jan 1 12:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f90e0310d3e0c9dec0e119d1f2270e999154d732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:16:26:bc:22:40:23:79:a0:cc:7c:d7:9c:
96:98:d0:26:64:50:b1:0a:4d:9f:72:6a:29:61:e3:
79:7c:b0:1e:64:64:23:61:11:f4:07:cd:d2:04:71:
83:bc:47:b3:7a:77:02:41:8c:5e:4a:ec:7b:bf:49:
53:02:63:d5:9c:21:9a:bb:af:00:55:35:57:78:c8:
b5:7e:c8:04:95:da:61:fe:a1:9a:1c:fa:79:71:0e:
18:55:56:8c:dc:99:1a:ce:28:54:56:38:8c:0b:88:
3b:67:f5:07:f7:1e:17:c7:98:ea:9b:67:a3:1f:90:
b5:14:c1:df:e7:c0:de:a5:8f:0e:2f:e5:ad:ab:f7:
8d:09:31:47:78:60:15:9a:56:d2:f8:03:56:43:87:
af:6d:5e:4f:ad:6d:50:5f:64:72:1c:da:c6:c1:1a:
b4:5d:f3:40:05:2e:ef:06:f8:9d:b2:96:8b:4d:56:
85:73:dd:ba:45:7b:56:72:b4:da:d6:fd:eb:12:40:
16:a8:a1:31:cd:3e:a1:fe:e1:c3:57:6d:41:2d:93:
d3:d7:71:dd:3f:f7:e7:96:7d:fe:6d:59:44:66:a2:
bf:0e:9c:5f:20:20:2b:6f:4b:67:ee:48:f8:73:e0:
36:4b:08:65:63:93:34:11:dc:7f:b9:23:be:9b:24:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:03:10:D3:E0:C9:DE:C0:E1:19:D1:F2:27:0E:99:91:54:D7:32
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/1-Q4DENPgyd7A4RnR8icOmZFU1zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.220.0/24
Signature Algorithm: sha256WithRSAEncryption
da:36:cb:43:a2:c5:c2:52:f9:13:d9:e0:21:9e:e2:93:1a:79:
72:a0:94:93:0b:4c:d4:62:df:04:f5:9d:8f:e5:44:ed:1c:ce:
a9:98:ad:f8:0a:1e:aa:b3:ab:c9:69:80:3b:c1:a6:f7:41:55:
71:72:2a:75:9c:c4:ca:4c:04:d3:30:25:ed:25:af:59:1c:36:
c6:2b:a3:df:8c:f9:39:9b:16:63:ac:dd:4c:01:66:d3:00:7e:
f4:63:5f:31:b2:e2:e3:e2:e1:33:58:2f:14:ad:45:85:ad:1b:
f5:73:1b:6e:12:1d:d8:8b:d2:db:c3:9d:be:f4:78:d2:de:14:
e4:79:ab:b8:62:b6:36:46:34:3e:bc:25:79:34:a2:fa:06:08:
97:3c:e0:bc:35:5f:1d:74:d0:e6:b2:0b:cc:20:9f:6f:9d:0b:
a9:80:c2:d6:8f:a3:29:b3:19:0f:da:25:41:43:5e:dd:df:a2:
c7:be:d2:a4:7d:d5:fc:97:0d:b6:a6:d0:10:cb:e8:eb:75:d8:
6f:2a:06:86:0c:07:e0:55:ff:6b:00:f4:ec:6d:ee:93:4a:ff:
7c:f7:91:96:f8:9e:ae:30:35:b0:5b:96:a0:03:a8:9a:a4:f9:
97:d4:79:d9:50:a3:4b:3a:53:cb:cf:8f:99:72:6a:6d:70:77:
a8:6d:db:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:28 2025 by rpki-client