Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/dkyuF0oFOEOZ4I52kQ0dfbiJ7JA.roa
File: dkyuF0oFOEOZ4I52kQ0dfbiJ7JA.roa (raw, json)
Hash identifier: NyQ8ZXT/Aa8SCSJlJdj1yD8pXNUl/R/dj+4arSOYiJM=
Subject key identifier: 76:4C:AE:17:4A:05:38:43:99:E0:8E:76:91:0D:1D:7D:B8:89:EC:90
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 0B2E466C
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/dkyuF0oFOEOZ4I52kQ0dfbiJ7JA.roa
Signing time: Sun 27 Mar 2022 21:38:52 +0000
ROA not before: Sun 27 Mar 2022 21:38:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43272
IP address blocks: 185.177.29.0/24 maxlen: 24
185.177.28.0/22 maxlen: 22
185.177.28.0/24 maxlen: 24
185.177.31.0/24 maxlen: 24
185.177.30.0/24 maxlen: 24
77.247.249.0/24 maxlen: 24
77.247.248.0/24 maxlen: 24
77.247.248.0/21 maxlen: 21
77.247.251.0/24 maxlen: 24
77.247.250.0/24 maxlen: 24
77.247.252.0/24 maxlen: 24
77.247.253.0/24 maxlen: 24
77.247.255.0/24 maxlen: 24
77.247.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187582060 (0xb2e466c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Mar 27 21:38:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=764cae174a05384399e08e76910d1d7db889ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:97:fc:9a:59:86:0d:a4:47:c2:16:d9:f7:
43:34:f7:71:61:c2:e8:f4:68:9f:75:99:9c:50:fc:
6a:cc:01:10:d8:66:4e:cf:be:5b:5e:51:40:bc:c8:
ca:74:1c:2f:f1:9a:3d:b2:c4:c9:71:ac:3a:7f:b5:
d9:5f:03:d3:62:e6:26:c6:d3:bb:2c:af:db:1b:fa:
68:e9:92:dc:6c:23:8b:00:86:5c:a1:da:41:8d:47:
e0:1a:e8:07:23:13:e7:51:d4:d8:cd:13:74:2a:0e:
d6:0e:28:76:3f:89:9d:3e:f5:6d:64:e1:57:20:de:
da:28:d8:e5:5a:00:5f:bc:67:ab:08:47:1d:af:3f:
2e:70:af:4b:41:a9:7a:8c:55:78:ce:a2:dd:4c:1a:
76:3a:e4:c3:2b:6e:ba:2a:9b:02:87:6d:70:f6:22:
09:d6:22:97:3b:82:c8:55:e7:63:6d:eb:8e:e5:e4:
3a:58:62:dc:3d:fd:ea:e6:42:d0:f6:7c:3b:a7:45:
fb:67:c2:85:ea:bc:12:39:8d:5a:fa:a2:3e:7f:71:
a1:d4:32:8a:90:e8:5b:9d:e6:b6:7a:bc:76:f2:f4:
6f:c6:55:84:cf:9a:9e:07:92:50:c1:af:2d:2f:57:
a1:28:ba:1a:61:cf:17:61:24:5f:8b:03:0d:7f:3a:
03:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:AE:17:4A:05:38:43:99:E0:8E:76:91:0D:1D:7D:B8:89:EC:90
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/dkyuF0oFOEOZ4I52kQ0dfbiJ7JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.248.0/21
185.177.28.0/22
Signature Algorithm: sha256WithRSAEncryption
82:95:dd:1d:de:fd:2c:28:87:bb:6f:5d:7a:1f:ca:24:bc:a6:
6b:b0:10:c7:27:47:be:31:2a:2a:a4:94:10:76:b5:2f:52:90:
47:b8:f0:39:4a:cb:ad:3e:8b:ce:7d:8f:9a:c6:88:96:54:33:
94:87:31:53:0e:df:cd:cb:52:d7:fa:b5:0b:fd:01:59:d8:07:
51:27:cb:a0:fd:dd:42:72:c9:e4:8e:50:64:b8:74:04:ce:34:
0d:1d:5e:be:41:ff:82:a0:9c:bf:21:ac:b4:10:5a:41:b1:91:
03:70:d7:53:e6:49:6d:ba:96:47:b3:2c:16:12:b7:77:82:8a:
53:ff:3b:3c:72:e5:4a:53:87:d3:d2:83:c7:31:ac:b1:84:af:
ec:74:04:38:ea:54:52:70:9e:45:76:a3:41:a7:17:bb:fd:62:
52:cf:8d:23:8d:d9:ed:7c:98:98:fd:69:9b:70:cd:fa:3b:c9:
af:91:9d:bc:28:22:e1:70:8d:a8:8a:36:22:2a:18:1f:9c:dd:
02:d6:02:d1:0d:42:4d:14:c5:58:e9:94:04:ca:a4:93:f4:6a:
8d:25:0a:cd:6a:0d:11:95:ba:e2:7c:6e:d1:99:b8:f0:3a:91:
a9:52:ab:6f:bc:9c:26:e1:e6:a7:b6:d6:98:b0:38:2c:b4:5c:
b8:9a:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:24 2024 by rpki-client on console-ams.rpki-client.org