Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/P0YBf3cnEqaJAK6wDSFPBy8iaa8.roa
File: P0YBf3cnEqaJAK6wDSFPBy8iaa8.roa (raw, json)
Hash identifier: glRB6WKyGCIS3lbBZLNPY93fgoXGg5CY7B0CsEocG9I=
Subject key identifier: 3F:46:01:7F:77:27:12:A6:89:00:AE:B0:0D:21:4F:07:2F:22:69:AF
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 066014AB
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/P0YBf3cnEqaJAK6wDSFPBy8iaa8.roa
Signing time: Wed 01 Jun 2022 15:42:14 +0000
ROA not before: Wed 01 Jun 2022 15:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42233
IP address blocks: 77.73.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106960043 (0x66014ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jun 1 15:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f46017f772712a68900aeb00d214f072f2269af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:86:13:c6:b6:f5:2a:7f:a0:1c:eb:66:96:
1a:0d:5d:0d:99:1e:02:0d:5b:99:de:c1:8b:04:5e:
00:d6:0b:51:48:5a:47:07:bd:43:85:90:b2:b6:5b:
a3:d2:7a:bd:6d:25:0c:86:db:e4:35:49:25:bc:79:
14:ee:2c:30:6a:50:7f:02:c3:b9:b4:3d:dc:01:72:
6c:5d:5c:54:09:eb:14:e8:f3:4e:ca:ee:ee:43:e6:
82:d7:98:f7:5c:1c:c3:d3:c4:80:a6:ee:23:34:6d:
63:e8:49:c7:96:b2:e1:ee:77:d6:79:a9:d7:ca:1f:
b1:b9:ce:30:91:98:82:47:d1:ca:31:48:73:c1:0c:
07:e6:8a:8a:4d:b7:26:62:04:4e:a6:9e:5a:e4:c0:
a8:7a:84:78:57:9a:cd:89:51:90:5b:6e:77:0b:74:
cb:ff:9c:39:be:d3:5f:a0:b2:3b:af:46:6a:81:67:
ae:03:96:96:94:27:ae:c6:a0:2f:23:07:fe:10:74:
c3:a6:f6:d7:7e:bb:d6:c5:6a:61:fa:05:13:8a:fb:
ef:7f:0f:24:f4:9d:e3:20:17:e3:e6:2e:9c:27:1a:
60:7b:ef:7d:c1:9d:52:bb:f3:f6:35:3b:0c:89:df:
f9:e2:a8:df:3a:b1:5c:42:1f:c4:01:4e:a7:a8:5c:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:46:01:7F:77:27:12:A6:89:00:AE:B0:0D:21:4F:07:2F:22:69:AF
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/P0YBf3cnEqaJAK6wDSFPBy8iaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/24
Signature Algorithm: sha256WithRSAEncryption
59:78:4e:15:0a:7d:51:36:36:93:d4:39:7c:54:49:6c:74:60:
54:ff:70:31:cb:29:fa:f7:96:80:01:5d:23:5d:85:c3:e1:f1:
d1:81:30:d9:25:21:77:27:f9:33:c2:31:71:db:e7:57:cf:30:
ac:ce:16:8d:02:00:5a:77:72:9d:4a:1a:a1:69:00:e6:8f:7c:
c5:82:bb:0b:ba:18:84:a7:5a:08:02:50:0c:66:24:02:20:a2:
e2:18:00:fd:78:57:a6:6d:13:8a:cb:44:f3:da:62:f0:e6:0b:
3f:29:7c:2e:df:78:44:3f:b0:10:99:b7:12:46:00:49:f0:da:
53:ab:3c:53:68:fc:99:7a:48:1d:35:68:12:c5:54:21:dd:c1:
0e:ec:9d:3a:65:43:f4:a4:b0:50:fc:b0:9e:1c:f7:6d:fc:9a:
b4:1f:73:d0:7f:d1:a6:50:18:3c:b9:7f:02:fd:5b:09:29:b2:
28:31:9a:98:07:d8:cd:41:50:7d:f4:a3:1d:de:e7:a8:a0:89:
8c:7c:a1:71:1a:bf:ef:ab:72:53:75:17:ac:c3:35:af:ec:58:
5a:08:f8:d7:cd:ee:e6:0a:ea:61:6d:8e:45:98:a6:9e:fb:52:
75:61:b6:5a:93:b3:75:db:18:f6:66:9e:42:b6:2b:a5:75:fd:
7a:7a:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:51 2025 by rpki-client