Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dQQ69ZWbDaE6HJBIdsdTqeXKvf4.roa
File: dQQ69ZWbDaE6HJBIdsdTqeXKvf4.roa (raw, json)
Hash identifier: KhTukac8iErjZParFa1vIKUf/cqkPh4jPnTwbE2+Nzg=
Subject key identifier: 75:04:3A:F5:95:9B:0D:A1:3A:1C:90:48:76:C7:53:A9:E5:CA:BD:FE
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0182B143EF47CA36EAEFE99861AD9BF3A734
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dQQ69ZWbDaE6HJBIdsdTqeXKvf4.roa
Signing time: Thu 18 Aug 2022 14:03:15 +0000
ROA not before: Thu 18 Aug 2022 14:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.130.0/24 maxlen: 24
77.73.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:43:ef:47:ca:36:ea:ef:e9:98:61:ad:9b:f3:a7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Aug 18 14:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75043af5959b0da13a1c904876c753a9e5cabdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:87:c6:ad:72:c0:34:58:5b:5a:84:cc:38:
0a:a9:2e:a5:53:7e:0f:72:f1:e7:7d:d4:03:0b:c2:
35:13:a2:6a:3e:1a:64:b7:38:c4:04:7d:ef:05:6d:
dd:29:9d:6f:bd:32:70:83:81:fb:eb:17:8d:51:4c:
8f:56:57:4a:bf:73:31:7a:95:cd:98:e9:6a:ab:79:
94:2e:cc:07:05:b9:56:50:01:69:d6:64:89:6a:5e:
83:1e:47:23:fb:9a:00:6f:3a:f7:e7:d3:37:77:28:
6d:5f:20:8c:88:bd:16:36:86:4d:51:f3:af:80:c0:
ba:be:ff:3b:99:d5:24:dd:cd:5b:c4:fe:c8:96:df:
f0:ee:01:d5:e5:1b:43:29:e6:f3:90:ff:c6:97:bc:
64:29:e7:11:d5:42:91:49:bb:fd:0a:1a:d7:2c:b6:
ef:bf:b3:bb:04:ca:41:57:45:2d:ec:dc:1e:42:af:
b4:76:f3:a0:d1:6b:c0:0f:e0:56:2f:72:8b:a7:bf:
5c:d3:ac:88:82:f8:f6:d9:1a:46:4b:7e:fa:e8:b9:
3d:43:5b:a0:80:96:33:50:41:92:09:31:d6:39:6b:
81:2a:37:5f:3e:e7:01:18:ca:15:dd:fa:dd:f8:7e:
00:78:19:9e:55:be:a7:7b:46:bc:13:27:04:24:28:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:3A:F5:95:9B:0D:A1:3A:1C:90:48:76:C7:53:A9:E5:CA:BD:FE
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dQQ69ZWbDaE6HJBIdsdTqeXKvf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.130.0/24
77.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c0:2c:86:06:ad:e0:15:e2:fc:b2:e1:1c:39:4f:9f:34:f5:
1b:d6:69:a6:fe:49:26:9b:61:71:d0:f2:4d:09:3e:f3:7f:4b:
e0:64:85:8f:d5:48:d0:33:87:e0:70:58:71:38:a7:ca:37:e2:
d3:24:6e:02:9c:33:4d:aa:23:86:ae:5b:5b:a9:07:d5:9e:5c:
b1:87:01:fd:ff:24:31:54:e8:cc:0c:49:8a:e6:21:59:43:b2:
91:10:96:86:d1:8f:5d:3a:32:ad:d6:c0:db:b4:72:0b:b0:f7:
0e:b5:ae:df:5e:87:86:82:12:68:98:81:1d:f6:81:59:4e:95:
5d:ce:7c:83:19:07:88:43:88:8c:77:e9:7c:7e:47:0e:9f:ac:
71:14:c7:da:f1:0f:b7:3b:3c:30:71:ac:d3:1a:4a:58:b3:0c:
58:f3:96:65:f5:75:8f:75:e1:f8:fe:c8:7c:d0:82:28:52:33:
05:03:42:a0:e5:db:12:aa:4c:77:f5:bf:24:ba:a5:00:bb:a2:
6b:7c:73:3d:99:a7:d6:c2:ef:f3:34:3d:e5:c4:19:7a:16:68:
e3:61:ae:9f:13:0c:cb:ee:48:1b:79:9f:f2:d6:e7:f9:8b:b3:
e3:21:5d:71:fa:fa:bf:d8:54:c2:bb:f3:e8:34:e3:82:1d:87:
0e:e1:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:46 2025 by rpki-client