Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/pt4hIDM_2NgZnxRlqFKaGGogjK0.roa
File: pt4hIDM_2NgZnxRlqFKaGGogjK0.roa (raw, json)
Hash identifier: JARvOMW0iR7SN0dQJPNpcUUZoKSuZdIyci/X7pf/nns=
Subject key identifier: A6:DE:21:20:33:3F:D8:D8:19:9F:14:65:A8:52:9A:18:6A:20:8C:AD
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 0184D32724A273F1AB2CD59531DCEF34D87E
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/pt4hIDM_2NgZnxRlqFKaGGogjK0.roa
Signing time: Fri 02 Dec 2022 14:04:28 +0000
ROA not before: Fri 02 Dec 2022 14:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202723
IP address blocks: 185.112.59.0/24 maxlen: 24
185.177.237.0/24 maxlen: 24
185.76.240.0/24 maxlen: 24
185.76.241.0/24 maxlen: 24
185.76.242.0/24 maxlen: 24
185.79.138.0/24 maxlen: 24
185.24.109.0/24 maxlen: 24
185.77.138.0/24 maxlen: 24
185.77.139.0/24 maxlen: 24
185.95.230.0/24 maxlen: 24
185.95.231.0/24 maxlen: 24
185.105.47.0/24 maxlen: 24
77.83.244.0/24 maxlen: 24
77.83.245.0/24 maxlen: 24
185.75.135.0/24 maxlen: 24
185.75.134.0/24 maxlen: 24
77.83.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:27:24:a2:73:f1:ab:2c:d5:95:31:dc:ef:34:d8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Dec 2 14:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6de2120333fd8d8199f1465a8529a186a208cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:f4:cd:13:c6:9e:77:c0:74:1e:7f:4e:b3:
df:60:c5:d8:59:22:81:6e:c4:db:71:de:a6:9c:dc:
e7:43:57:b3:51:1b:c4:47:fe:83:68:1b:bc:b1:48:
46:1f:3d:d8:4d:aa:c1:5b:ef:95:06:b9:6f:df:e1:
dd:93:a7:cd:58:a4:22:24:7a:da:49:e7:c5:f4:23:
9a:25:fe:c9:2c:d4:2f:f8:84:f3:10:73:a5:b1:16:
39:02:bb:5a:e1:d3:47:d9:83:6e:9d:56:d5:b3:83:
d6:39:26:64:1e:d1:03:d6:0c:8e:eb:c3:c8:84:20:
48:c7:81:f6:fd:80:78:0d:1f:4c:5b:a5:4c:48:ad:
b5:3b:78:be:97:cc:4c:45:8d:4d:f4:f4:74:59:7d:
b0:a0:49:13:e5:56:a0:26:90:de:0a:f3:7c:7c:ca:
dd:f5:df:87:7e:4f:2a:7b:c1:78:ea:83:4f:a3:93:
ae:5c:e6:9e:44:b2:d7:b9:10:cd:6e:d0:68:ab:5b:
22:ec:a9:ab:d2:77:34:68:21:96:3d:c2:b6:d2:24:
f1:3e:5e:ef:e1:fc:f3:9b:58:ce:99:8e:fb:86:19:
02:c9:f2:85:48:c4:f3:13:3a:7d:32:21:88:f1:6a:
c4:b1:0c:b7:05:06:bd:6c:80:88:2a:22:4c:e4:ea:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:21:20:33:3F:D8:D8:19:9F:14:65:A8:52:9A:18:6A:20:8C:AD
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/pt4hIDM_2NgZnxRlqFKaGGogjK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.244.0-77.83.246.255
185.24.109.0/24
185.75.134.0/23
185.76.240.0-185.76.242.255
185.77.138.0/23
185.79.138.0/24
185.95.230.0/23
185.105.47.0/24
185.112.59.0/24
185.177.237.0/24
Signature Algorithm: sha256WithRSAEncryption
32:2b:32:d9:f9:0e:da:9b:45:b3:73:9a:21:0b:ae:ac:88:35:
95:0a:05:d1:ec:28:0a:70:f2:84:13:e9:dc:ce:f5:8a:17:14:
f8:44:11:d6:9b:1e:ed:c7:4c:3d:7d:29:89:04:b2:75:b9:56:
eb:66:03:5d:69:78:1a:99:5b:c0:f3:5a:02:fe:52:11:f6:7a:
0e:48:05:1e:b3:ff:b9:8b:82:03:c0:b2:03:32:86:82:fa:74:
4f:02:c5:f4:78:15:83:4d:22:d3:52:94:06:f7:4d:5d:82:b1:
ff:78:05:70:c8:5f:f6:b2:5f:ad:6e:8b:5b:d0:9e:b5:c7:49:
30:4b:d7:95:82:01:e7:29:1f:f4:f2:34:10:a1:c1:4a:dd:3b:
75:b8:de:9d:99:ce:bf:45:e5:ed:6f:e4:a9:20:16:24:6e:d2:
ec:c9:59:ee:87:27:2c:04:01:aa:56:fa:86:a2:84:35:8d:fe:
98:c0:42:bd:e5:70:5a:b8:61:5f:22:84:b1:00:42:8f:7c:a9:
cc:84:1c:2f:91:75:27:d2:57:66:9a:1c:0d:30:e1:6f:bf:84:
e8:5f:d8:b1:57:30:da:45:da:5a:7d:fb:d5:26:dc:8b:98:86:
11:78:7a:44:4c:b4:f8:d8:5d:6e:9b:3a:0c:e0:41:c1:20:73:
30:93:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:17 2024 by rpki-client on console-ams.rpki-client.org