Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HbC5IBTOw69h2dfqM6REj-I2ZSk.roa
File: HbC5IBTOw69h2dfqM6REj-I2ZSk.roa (raw, json)
Hash identifier: vKlKAELcOboWI4Fn2yEbIm8bbeYVQ38AzB/+qCKtc0Q=
Subject key identifier: 1D:B0:B9:20:14:CE:C3:AF:61:D9:D7:EA:33:A4:44:8F:E2:36:65:29
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 062FFCC0
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HbC5IBTOw69h2dfqM6REj-I2ZSk.roa
Signing time: Wed 11 May 2022 10:52:03 +0000
ROA not before: Wed 11 May 2022 10:52:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.131.0/24 maxlen: 24
77.73.130.0/24 maxlen: 24
77.73.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103808192 (0x62ffcc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: May 11 10:52:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db0b92014cec3af61d9d7ea33a4448fe2366529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:2f:fd:22:33:4a:a6:2f:e8:92:1c:53:36:
0c:da:b4:e5:92:b8:7c:0f:53:a8:03:9b:96:28:c9:
30:70:7f:65:36:05:8e:db:82:5b:77:9a:37:26:d2:
04:2d:d6:a0:df:56:ce:45:9f:3b:82:4f:bc:63:b6:
09:f1:63:e8:97:d6:40:1d:2d:6b:a1:8b:9f:9c:d9:
9f:8b:65:fd:b3:95:39:5c:1e:b3:9f:43:1a:5d:cf:
c9:4a:3a:6f:78:af:01:2e:41:15:e4:56:7c:9e:7f:
9c:b3:b7:f6:03:76:4f:43:24:a4:01:c2:20:a8:2b:
de:e1:6d:85:0e:97:d2:96:9f:58:a5:d4:cc:45:fd:
b6:f0:e2:cc:77:db:a8:70:4f:e2:a8:6a:13:ca:fa:
44:ec:b4:ae:58:e1:f8:8a:07:14:26:7d:a8:30:44:
dc:0a:0f:98:14:1e:8b:6c:64:87:3f:cc:10:0e:dc:
d2:e9:f1:8e:94:ab:03:e6:59:f8:c7:4c:8b:4f:1c:
63:6b:fb:5a:6e:ad:c1:4d:9b:63:4c:72:93:42:e8:
d4:90:a5:6d:6c:5a:5e:76:aa:19:58:67:c9:01:15:
b4:91:43:60:89:97:48:22:a4:c9:9e:58:0c:22:a9:
1b:4d:ba:d6:fd:40:63:e9:f4:30:d8:ff:05:87:0c:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:B9:20:14:CE:C3:AF:61:D9:D7:EA:33:A4:44:8F:E2:36:65:29
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/HbC5IBTOw69h2dfqM6REj-I2ZSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.130.0/23
77.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ff:13:19:73:74:43:6b:14:ba:ff:5d:5b:c7:4a:73:ec:16:
6f:24:54:57:0c:4a:ee:6e:f4:b0:ca:b8:cd:25:b3:2b:60:07:
5e:71:6e:4e:74:b5:ed:72:46:91:0a:79:a7:20:aa:a1:4c:bb:
0c:d9:73:fb:29:30:48:8b:3f:a1:de:77:51:09:4c:83:af:14:
87:c7:a6:fa:52:d0:ad:cb:9b:cb:44:63:63:ef:6a:c7:65:0f:
b2:4f:40:1b:41:84:97:99:a3:89:b8:aa:8c:56:c9:54:e4:19:
66:a1:95:db:60:c7:85:0d:01:fc:4e:c6:93:82:59:32:56:f5:
f3:a8:7b:8d:18:c7:42:87:f3:05:1a:5c:23:fe:b8:b0:dc:58:
b8:b2:46:21:e5:3e:7b:de:91:11:12:80:81:2e:f7:89:4a:d2:
0b:75:99:7b:8f:19:3a:87:9f:96:3d:19:52:d9:e6:2f:da:c3:
05:2e:f7:36:8a:17:71:83:db:04:d6:3b:e1:58:9a:12:17:81:
b6:03:d9:9e:34:a4:bc:91:f3:c2:8e:cb:6b:f5:6b:7a:66:9f:
e9:a1:9a:b7:f6:89:f3:9e:f8:71:52:9f:1f:9d:88:7c:48:32:
75:1c:4f:17:6f:ae:fa:6b:d0:70:4a:be:b8:6d:d0:ae:e6:c5:
97:03:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:55 2025 by rpki-client