Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa
File: b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa (raw, json)
Hash identifier: XsFPcaj6AECGNOkGwEqp/UcPkgJBWzD/OYfvI7lfyxM=
Subject key identifier: 6F:AB:29:43:8B:8B:5F:C3:44:85:2C:CE:3E:3A:BA:68:10:1E:22:26
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 01856F0B747525B69CBDF63B18D4A92107C6
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa
Signing time: Sun 01 Jan 2023 20:34:59 +0000
ROA not before: Sun 01 Jan 2023 20:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199837
IP address blocks: 77.83.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:74:75:25:b6:9c:bd:f6:3b:18:d4:a9:21:07:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: Jan 1 20:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fab29438b8b5fc344852cce3e3aba68101e2226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:64:41:5d:a9:a0:a3:d1:82:2a:7a:8b:5c:63:
d2:c8:36:0e:96:54:b9:8e:03:00:7c:e1:40:6f:41:
71:f4:da:65:cb:b3:39:ea:62:5d:9a:72:bd:ba:c8:
4a:06:03:f0:3a:c5:cb:92:cd:39:32:b8:fa:20:95:
23:5e:cc:c0:8d:bc:16:f9:bf:fa:3f:80:4b:94:0f:
c9:65:01:25:26:cc:79:a4:6a:1c:9e:c2:a4:ca:a2:
12:4c:74:c7:f7:3c:40:e3:eb:d3:ed:c6:a7:94:8e:
66:2f:77:16:dc:e1:13:27:75:9d:6b:c5:78:8b:f0:
82:47:d0:e0:f1:0b:ea:be:45:3e:6a:b7:e1:54:07:
7a:8e:44:54:7f:cc:bf:50:52:05:a7:86:c7:44:32:
2e:7e:1b:ba:3f:79:bd:e7:95:8f:87:22:d2:28:9f:
dc:7f:d4:b5:16:b9:2e:40:ae:50:65:b5:f5:09:4d:
ca:ea:a7:33:c4:19:20:17:a0:04:3c:90:0a:00:ff:
41:32:a4:bd:4f:62:39:18:c2:1e:1d:24:73:90:32:
5f:c6:f8:dd:b7:3d:56:81:53:5a:41:d0:11:7f:06:
26:c0:85:58:81:d4:c6:e2:42:f8:e2:df:0c:aa:6f:
28:b6:4b:56:e1:67:62:31:63:3d:c4:d5:a1:a8:26:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:29:43:8B:8B:5F:C3:44:85:2C:CE:3E:3A:BA:68:10:1E:22:26
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/b6spQ4uLX8NEhSzOPjq6aBAeIiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:7c:2f:38:ef:7c:8f:70:fa:af:4f:84:1a:cd:1c:7d:eb:71:
96:4d:eb:2d:64:5f:21:a7:ea:06:e5:76:41:38:10:c7:74:00:
9b:ec:96:98:5a:87:8e:ae:44:19:65:9f:b2:0c:ef:3f:3d:b4:
38:6c:a0:33:43:58:ed:9b:9f:35:6c:0b:a8:99:65:83:ee:94:
15:c6:53:b0:5d:37:fe:d7:30:c5:5d:98:9b:30:6f:ed:01:71:
b8:c1:27:a8:1b:b7:7c:bd:c8:5d:f9:2e:c5:f1:b4:b0:b4:76:
3e:a7:da:89:6a:4c:bc:7e:7b:3b:4e:f1:e6:c7:5e:2d:c6:42:
b9:2a:08:a1:d2:79:62:55:7a:92:53:75:1e:7a:c8:e2:ac:bd:
3d:7e:8c:f8:de:ba:89:1a:1b:26:e6:3f:d4:08:1d:3f:92:ce:
db:bc:0f:05:92:0b:33:0b:c9:6c:24:93:52:84:8b:b6:4c:b7:
e0:5f:c4:81:51:66:3e:c7:bc:bb:f3:06:5f:aa:70:5c:8b:c2:
a8:01:f9:80:4f:b2:54:7e:2c:21:30:5f:f5:ae:c0:cf:11:71:
f7:19:0e:36:c1:93:d6:23:a1:b7:3c:bd:94:da:0d:f8:7a:24:
7e:a6:95:fa:2e:3f:c0:dd:93:94:20:53:83:bb:e0:9c:50:9f:
5f:e5:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:21 2025 by rpki-client