Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/2ZNRlyYQy796cJGCRdeNdGdkfZ0.roa
File: 2ZNRlyYQy796cJGCRdeNdGdkfZ0.roa (raw, json)
Hash identifier: uYdd97X7N7zO6BqErXqXIPwv0+N3sTt6bkzQ8x7NFUg=
Subject key identifier: D9:93:51:97:26:10:CB:BF:7A:70:91:82:45:D7:8D:74:67:64:7D:9D
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 35022D20
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/2ZNRlyYQy796cJGCRdeNdGdkfZ0.roa
Signing time: Wed 26 Jan 2022 14:20:31 +0000
ROA not before: Wed 26 Jan 2022 14:20:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42697
IP address blocks: 109.200.64.0/20 maxlen: 20
185.29.78.0/23 maxlen: 23
185.29.76.0/24 maxlen: 24
185.29.77.0/24 maxlen: 24
185.29.76.0/22 maxlen: 22
77.243.48.0/20 maxlen: 20
2a03:dc80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889335072 (0x35022d20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jan 26 14:20:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d99351972610cbbf7a70918245d78d7467647d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:75:92:48:3a:7a:0b:16:d8:8c:76:d9:11:
e3:f4:65:c0:45:5e:1e:dd:95:3d:56:0a:56:7d:78:
4d:cd:2f:07:7f:f9:5a:18:2c:33:6e:ff:74:c2:67:
4d:ea:88:f6:c5:23:5b:78:fa:05:bb:af:25:a3:e4:
88:b2:fb:8b:92:c0:6b:a1:2c:7a:12:4c:4a:c0:93:
79:d1:77:9f:db:4b:59:25:82:de:2d:89:8d:d6:fc:
ed:9e:6e:69:ff:29:0d:24:9e:2d:55:13:6d:c3:61:
fe:15:36:70:b1:9b:80:27:a5:11:bb:e2:8b:2c:ce:
de:03:08:76:13:36:2b:96:c0:1f:ec:d6:25:34:55:
26:f4:c4:b2:d9:af:7e:f0:08:08:57:1f:1d:ff:1a:
7e:0c:b4:aa:8d:20:4b:d4:82:25:c5:75:1a:cf:e9:
40:6e:a2:37:93:cd:20:55:72:e1:f7:9e:37:f6:c6:
4d:6c:15:fb:b3:35:35:41:fe:9a:70:c8:f2:91:8b:
5f:60:f9:a3:ec:ee:6d:3f:ed:73:a8:3a:b3:74:e3:
6a:19:b4:66:dc:85:3c:0e:f0:d9:e1:23:b3:95:fd:
0b:87:a0:75:4a:0f:05:a7:9e:9d:8f:c3:9f:3b:7a:
83:72:a1:0d:17:ce:bf:42:ca:8a:27:9a:3b:7f:14:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:51:97:26:10:CB:BF:7A:70:91:82:45:D7:8D:74:67:64:7D:9D
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/2ZNRlyYQy796cJGCRdeNdGdkfZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.48.0/20
109.200.64.0/20
185.29.76.0/22
IPv6:
2a03:dc80::/32
Signature Algorithm: sha256WithRSAEncryption
60:8f:53:29:1d:7a:8d:ce:43:b9:35:76:79:87:e2:05:67:2c:
f5:72:58:d3:cd:93:0e:ba:7b:85:54:15:3b:6d:7d:6f:62:f8:
c8:15:00:60:05:86:c6:de:55:4d:6f:ed:0f:93:e0:10:3c:fe:
de:e6:a8:0f:e8:cc:5e:20:2d:d6:b1:6b:c8:cd:8c:4f:b9:da:
7f:58:e9:b3:c1:9e:32:19:ea:25:e0:17:99:2b:e6:58:74:06:
a2:c2:ab:a0:2f:55:4b:1f:02:1b:c1:e0:c1:34:be:ee:09:bb:
3a:4b:4a:94:0c:1b:9b:30:69:7a:fb:e5:0d:b0:3e:4c:27:0b:
4a:73:a4:44:f5:86:a8:0c:f7:bb:20:ac:e8:d5:f9:2c:ba:f9:
41:f7:4b:35:41:7b:43:31:f6:05:7a:de:80:d8:34:98:47:d7:
92:9e:7d:50:60:77:ba:67:66:d7:c1:9a:13:7e:77:85:da:5b:
be:c5:f0:f5:4e:81:78:d0:5c:cb:0b:77:b8:6f:ce:28:d8:fd:
17:5a:97:3a:f3:ae:42:4b:ca:9f:8c:45:d8:79:89:79:dd:29:
ec:fb:d4:d0:64:15:b4:ca:58:ff:e2:72:58:b3:08:98:34:4e:
01:d8:15:f3:be:73:e5:7b:ba:eb:10:a6:95:23:5e:e0:26:1e:
34:e4:70:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:59 2023 by rpki-client on console-ams.rpki-client.org