Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/mayRvPajOZ16U1MNEJxVqJRpZ8A.roa
File: mayRvPajOZ16U1MNEJxVqJRpZ8A.roa (raw, json)
Hash identifier: EU5DDjceqDO3pUvepBQYj6WWm3d/qozAQSfDZUSKXjM=
Subject key identifier: 99:AC:91:BC:F6:A3:39:9D:7A:53:53:0D:10:9C:55:A8:94:69:67:C0
Certificate issuer: /CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Certificate serial: 0647021B
Authority key identifier: C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/mayRvPajOZ16U1MNEJxVqJRpZ8A.roa
Signing time: Sat 01 Jan 2022 07:02:32 +0000
ROA not before: Sat 01 Jan 2022 07:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202909
IP address blocks: 77.220.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105316891 (0x647021b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c441738baab988b1d68693bb05e29bfbb4f0f671
Validity
Not Before: Jan 1 07:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99ac91bcf6a3399d7a53530d109c55a8946967c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:cc:42:ed:19:a4:0d:8c:fe:b2:22:9e:6c:
6f:bf:18:4d:a1:a6:8c:f0:fb:12:b1:9b:e7:4d:a5:
d8:93:63:56:03:88:4b:ee:b6:66:0d:8d:c8:79:12:
32:40:2e:d7:c2:3d:44:f3:11:c7:cd:ff:fa:cb:ca:
96:cd:a2:99:7e:ba:17:10:2d:7b:b1:07:6e:aa:3d:
71:85:a8:40:ad:69:41:ff:4b:5c:df:f6:08:ec:9b:
b6:03:0e:0c:42:af:1b:69:5f:62:0d:ba:c0:e1:39:
7c:d3:ae:14:d9:f5:11:bc:ef:2b:b8:a7:34:d7:12:
d8:63:bf:8e:10:5c:a3:e3:b4:8d:51:0f:c0:04:54:
46:9b:de:95:e1:20:00:90:e1:f5:e5:a1:7d:37:ce:
f8:f1:56:73:13:8f:66:37:37:a5:ec:bd:6a:74:41:
73:43:83:27:6e:9e:c7:7e:75:e7:e0:79:01:03:40:
54:de:61:2b:00:8d:10:66:e0:3f:3e:14:93:dc:0c:
ff:60:d8:2a:1e:16:d7:57:f6:45:4a:ec:76:cd:0e:
1c:98:23:62:3d:51:47:62:50:92:28:46:e5:65:55:
82:8d:38:b9:cd:e9:0c:f4:24:5b:85:20:8e:cd:61:
6a:13:86:b9:e0:d3:1f:c4:ad:c6:8b:72:a7:9f:82:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AC:91:BC:F6:A3:39:9D:7A:53:53:0D:10:9C:55:A8:94:69:67:C0
X509v3 Authority Key Identifier:
keyid:C4:41:73:8B:AA:B9:88:B1:D6:86:93:BB:05:E2:9B:FB:B4:F0:F6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/mayRvPajOZ16U1MNEJxVqJRpZ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f8314e-a3bc-45e9-a9f5-4c98d9a51405/1/xEFzi6q5iLHWhpO7BeKb-7Tw9nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.220.109.0/24
Signature Algorithm: sha256WithRSAEncryption
57:49:15:61:4b:5a:fa:d9:74:1a:36:aa:04:3c:a7:37:22:5f:
02:8e:1b:7c:4e:d6:3f:90:ab:78:49:5e:67:df:7f:18:e4:31:
5c:63:b9:ad:f3:46:d7:b6:bb:79:2d:7a:1e:9d:65:aa:c0:ca:
f2:30:7f:f8:3c:e3:cb:cb:50:8e:66:75:6c:db:05:5c:07:a5:
a8:a1:d0:16:44:de:54:6b:c7:95:a3:1c:aa:ca:16:74:3a:c2:
c5:81:a7:41:22:7f:60:99:3f:e5:e0:35:69:88:d3:52:b6:ae:
4b:5c:7d:f0:2b:4d:17:bc:51:00:c6:6c:a5:9e:93:79:8d:96:
2e:cd:f0:c0:3b:b3:b4:9a:88:e5:16:df:cc:ee:79:25:93:1d:
11:61:39:b5:d6:4c:92:e7:ba:ba:7b:a5:67:2c:f8:8f:82:60:
f0:1e:a6:a8:17:17:85:86:08:0d:82:5c:6b:c2:47:bb:72:5b:
41:ce:a7:e4:3e:0e:4a:49:fd:52:b0:02:8c:b8:47:03:b4:5a:
3d:bc:bd:a5:9e:20:5b:29:4f:be:8f:01:d2:5c:de:09:53:fb:
a8:3a:53:ca:83:de:3e:05:2e:2d:29:13:fa:16:7d:6a:1f:05:
87:89:e6:04:7b:03:14:84:33:b9:e3:31:45:55:91:83:42:6f:
57:4a:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:21 2024 by rpki-client on console-ams.rpki-client.org