Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/gLFYlvGw5II_wYFOEgmS5k__wYY.roa
File: gLFYlvGw5II_wYFOEgmS5k__wYY.roa (raw, json)
Hash identifier: Akapwkf9XWcsO5PvmTpS4ImxDhNq4zCQcipN3j5e/MM=
Subject key identifier: 80:B1:58:96:F1:B0:E4:82:3F:C1:81:4E:12:09:92:E6:4F:FF:C1:86
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0184A3AB8271AB2720CE468EEE70E5978EDD
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/gLFYlvGw5II_wYFOEgmS5k__wYY.roa
Signing time: Wed 23 Nov 2022 08:47:17 +0000
ROA not before: Wed 23 Nov 2022 08:47:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 77.73.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:ab:82:71:ab:27:20:ce:46:8e:ee:70:e5:97:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Nov 23 08:47:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80b15896f1b0e4823fc1814e120992e64fffc186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d5:17:e6:98:b8:83:aa:17:8d:b4:df:52:81:
56:15:75:30:39:3b:33:46:ad:4f:57:00:20:b0:0b:
03:62:a6:2f:61:25:57:b7:7d:aa:ed:75:4b:25:70:
01:e3:61:fe:1f:12:eb:7b:92:8f:6c:32:86:38:73:
eb:f4:70:1c:8c:0f:50:93:34:94:68:70:75:45:1b:
24:cc:53:0c:ac:4d:cb:69:de:72:a1:9e:ce:80:d7:
0b:68:a0:60:7d:81:c9:c5:45:8a:6c:50:33:3c:95:
89:cd:cb:14:03:30:77:fa:9b:a3:6d:59:88:97:0d:
65:bb:00:a4:54:8c:2a:4b:b7:fd:17:8c:0c:7f:6e:
16:d0:c6:96:27:bb:69:8f:56:c6:2d:c8:4b:bf:7c:
0a:39:fe:d1:85:78:71:a7:98:82:ba:22:47:80:b8:
b9:3a:93:57:98:37:f0:0b:8f:1b:a2:da:8d:ef:5a:
15:f9:3d:b9:ea:9c:27:ff:a9:df:18:8b:00:17:5e:
e3:6a:81:92:27:64:cc:09:9f:9a:8b:3a:1b:ff:5f:
65:36:a8:78:45:b4:70:a9:2c:14:d0:be:4a:2b:1f:
12:8f:9f:00:77:3e:3e:42:eb:28:d3:54:a7:19:0c:
8e:15:07:b4:27:dc:ad:c4:8c:df:da:b8:80:c5:27:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:58:96:F1:B0:E4:82:3F:C1:81:4E:12:09:92:E6:4F:FF:C1:86
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/gLFYlvGw5II_wYFOEgmS5k__wYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2f:10:83:f1:42:cd:31:29:8a:fc:c1:26:2e:0a:6f:94:61:
44:40:2b:c6:f3:30:7b:f9:ce:0a:5b:05:39:e3:56:49:3a:17:
7c:22:32:96:3a:c0:da:4d:6f:99:9f:34:f0:a9:07:d7:97:e2:
49:69:5c:20:c7:42:69:16:d0:3b:46:d7:cb:ff:cb:94:f5:3a:
d0:4e:a4:5d:22:1c:e7:4c:e3:04:f3:86:56:9a:50:4f:1d:da:
ce:b0:b0:52:46:15:27:2f:32:12:22:05:69:aa:b7:d4:77:be:
5d:a1:67:d1:07:1f:ad:82:72:29:97:ba:6c:8d:e3:9d:7a:90:
12:36:1c:aa:e1:8a:61:aa:42:83:5a:2c:91:94:cd:53:0b:0a:
5a:d6:d0:d5:5f:d8:ef:3e:1d:c2:6c:f1:12:95:d1:b7:9a:0d:
ba:2a:86:1e:9d:3b:cd:e4:31:62:a9:f0:12:be:e9:92:ca:5e:
eb:42:e7:89:ea:eb:70:78:6e:ba:a9:36:81:37:01:ad:ef:68:
8d:13:c1:78:ae:8a:ee:a4:8a:3a:19:bf:45:12:38:6a:3e:f1:
9f:3b:26:c7:44:c0:66:23:46:cc:53:69:52:a6:a3:f1:f1:8c:
da:4f:aa:b0:fe:47:75:b4:6e:1d:25:35:e0:e6:1c:15:d7:c9:
63:85:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:49 2025 by rpki-client