Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dw_Pcc_JiiQxg9DRxD-GXgXX2gg.roa
File: dw_Pcc_JiiQxg9DRxD-GXgXX2gg.roa (raw, json)
Hash identifier: r7jrJcbcB6gok/sE+TY2ga/v9XKlFCeIMm0Uu7JnmIQ=
Subject key identifier: 77:0F:CF:71:CF:C9:8A:24:31:83:D0:D1:C4:3F:86:5E:05:D7:DA:08
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0184437B132CDBDBA6FD919034BA0FADF63E
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dw_Pcc_JiiQxg9DRxD-GXgXX2gg.roa
Signing time: Fri 04 Nov 2022 16:30:50 +0000
ROA not before: Fri 04 Nov 2022 16:30:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.73.132.0/24 maxlen: 24
77.73.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:7b:13:2c:db:db:a6:fd:91:90:34:ba:0f:ad:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Nov 4 16:30:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=770fcf71cfc98a243183d0d1c43f865e05d7da08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:77:7c:3d:1a:3b:27:1e:77:35:67:76:d4:
cd:b9:82:eb:41:7d:fa:e0:c8:4c:f4:17:9c:d4:9a:
6e:b9:08:19:21:7e:ad:60:de:74:e5:39:f5:74:3e:
e4:37:7d:17:03:18:94:49:81:8e:ff:08:74:90:29:
39:c6:04:bd:6c:a6:93:e4:49:fb:56:34:1c:4c:69:
5b:59:15:39:83:0e:67:bb:c5:bc:43:09:f6:7a:42:
85:17:de:80:3f:b7:da:20:a8:8c:3d:89:cc:b6:7e:
e0:26:e0:a6:74:eb:60:d9:40:4e:f3:e0:b7:94:c3:
7f:67:3f:86:54:d5:e7:0e:9b:5d:41:91:fa:37:23:
34:3e:05:e3:b7:10:11:13:6a:38:83:a5:06:e3:4f:
af:f2:ea:07:5a:3d:67:be:fb:69:29:05:2c:42:07:
38:f7:f5:70:85:aa:50:33:c7:ec:1b:3d:8f:bb:7b:
ae:1e:1e:f0:2a:a7:a3:ee:25:f6:ec:21:f7:d7:e1:
2a:c6:c7:7b:68:06:ae:72:b1:c3:de:1c:0d:e2:ce:
59:f2:2e:ba:7e:a1:24:9f:f7:4b:96:f8:c6:6b:4a:
ba:7b:19:3d:23:26:17:21:3b:96:2d:0f:8d:0a:a7:
76:01:4d:d5:15:2d:f1:bc:41:8e:e4:48:44:6a:c3:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0F:CF:71:CF:C9:8A:24:31:83:D0:D1:C4:3F:86:5E:05:D7:DA:08
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/dw_Pcc_JiiQxg9DRxD-GXgXX2gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.129.0/24
77.73.132.0/24
Signature Algorithm: sha256WithRSAEncryption
95:54:8a:2e:68:19:a4:c6:14:fa:80:a8:f1:39:e5:99:5b:51:
df:8d:b9:fb:08:ce:1c:45:94:4d:34:14:ce:dd:83:5e:e8:72:
4e:8f:c5:e2:30:06:b4:14:7c:75:3a:b2:16:64:c9:ce:15:f9:
52:8b:38:83:64:dd:2e:95:51:a5:f9:de:13:fa:c4:29:9f:c6:
05:39:96:37:da:fd:6d:ae:de:61:5f:c6:3a:91:af:7c:50:46:
c5:38:d1:c9:ce:3e:6f:63:ea:1e:29:50:98:94:34:22:4c:29:
58:1a:77:53:a5:2f:df:fc:26:3a:76:8f:e6:f4:b4:e1:8d:98:
04:eb:14:13:9c:83:91:9b:18:ce:4a:48:94:e2:21:b7:c6:79:
c4:c7:3a:ac:5a:a5:ba:1f:f2:1a:ad:0b:5e:c6:e1:41:e8:07:
13:ad:64:ed:33:ac:85:89:36:00:42:df:ab:42:22:3d:f6:98:
16:a1:77:01:5f:71:aa:9d:44:9e:08:1b:b3:be:a2:93:ec:2d:
b1:a1:c1:89:6c:20:d7:d3:82:6b:e7:39:c8:72:b0:7b:d8:64:
f8:5a:c7:31:5c:36:62:f9:3d:c5:20:8b:08:bc:6c:6e:bd:2b:
52:64:3e:f1:a8:40:66:4d:d9:79:35:4a:e9:9e:44:65:45:e6:
e7:fb:87:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-ams.rpki-client.org