Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/ni1r6USQV6KHsnumqElazyF6TlE.roa
File: ni1r6USQV6KHsnumqElazyF6TlE.roa (raw, json)
Hash identifier: up+dXb+F2J9n7dBcrMb/3KhbTBGBtGnKISnK8AN+Tts=
Subject key identifier: 9E:2D:6B:E9:44:90:57:A2:87:B2:7B:A6:A8:49:5A:CF:21:7A:4E:51
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 052845BA
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/ni1r6USQV6KHsnumqElazyF6TlE.roa
Signing time: Sun 23 Jan 2022 19:07:18 +0000
ROA not before: Sun 23 Jan 2022 19:07:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50386
IP address blocks: 77.73.131.0/24 maxlen: 24
77.73.128.0/24 maxlen: 24
77.73.129.0/24 maxlen: 24
77.73.130.0/24 maxlen: 24
77.73.134.0/24 maxlen: 24
77.73.135.0/24 maxlen: 24
77.73.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86525370 (0x52845ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 23 19:07:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e2d6be9449057a287b27ba6a8495acf217a4e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:bc:d3:c3:b8:d2:9b:e9:37:e4:53:0c:27:
74:52:60:9e:a1:4e:34:96:a3:c0:cf:8e:e9:a5:fb:
32:25:c2:8d:28:db:1b:d8:69:be:2b:92:39:0c:53:
95:3c:19:d1:40:24:af:e6:8b:e7:d1:6e:82:9a:25:
b3:df:8a:d7:d0:75:12:1b:6b:ce:3b:97:b1:45:1e:
a3:ea:27:b5:d5:4b:88:96:0f:01:92:75:1d:0a:74:
71:88:65:5b:30:4c:65:15:1f:fc:a9:4b:8f:d3:93:
0e:ed:f4:7a:77:37:6d:13:6e:e5:39:e0:8c:fd:5e:
c5:6e:34:ae:4d:ad:48:94:69:d0:2c:c9:3e:b4:82:
3c:75:0f:8f:67:7a:b7:78:de:fc:31:81:aa:93:90:
29:8f:1e:9e:b5:6b:0c:67:14:f2:ed:7c:27:7c:5d:
65:49:5e:e3:f7:24:bb:2a:c0:e9:de:6d:79:89:e3:
3f:bd:cd:7c:6d:5e:c1:97:17:8f:6f:8c:35:2f:6f:
b0:15:78:70:48:ed:14:61:4a:db:b9:93:55:0b:87:
28:98:cd:91:88:38:25:ed:9b:5f:22:b1:65:60:40:
d9:44:aa:02:c1:55:3d:18:5d:c2:4b:21:b6:97:c8:
77:4a:d0:4f:87:cb:6d:93:f7:bf:2a:15:c5:d7:7f:
2f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:6B:E9:44:90:57:A2:87:B2:7B:A6:A8:49:5A:CF:21:7A:4E:51
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/ni1r6USQV6KHsnumqElazyF6TlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.128.0/22
77.73.133.0-77.73.135.255
Signature Algorithm: sha256WithRSAEncryption
7b:7d:bd:88:cf:bb:ca:58:cb:ad:ed:a7:7b:0b:49:55:3e:65:
c0:f0:a1:d9:83:46:95:b8:07:7b:30:ee:af:d9:b9:08:21:3a:
72:1b:13:56:25:2e:f7:61:a7:c1:6f:85:7b:28:f9:01:e2:a1:
6c:4c:f1:fa:3f:75:48:71:f2:1b:f8:fc:ef:ba:50:f7:58:51:
58:6f:f0:7b:f0:c6:8c:2e:34:f0:c6:11:5d:23:ae:dc:4e:93:
b1:25:04:df:c0:04:0e:dd:a5:b9:81:c4:3d:b3:9d:dc:37:68:
16:5b:bb:e3:8f:1e:74:4f:1e:8f:e5:23:f6:68:1d:e5:db:b4:
f4:ea:37:15:69:0f:2d:98:e1:d8:18:fc:b6:fa:f6:42:8f:b6:
b5:fc:17:03:76:70:f9:3d:a6:95:c0:34:55:cc:fd:d5:8f:25:
86:3d:15:00:d8:ce:eb:5a:c4:9b:08:2e:5b:a3:8a:c5:a7:4a:
da:c1:50:f5:45:fd:bd:04:51:f2:38:9a:b8:fe:26:a3:05:95:
b0:57:a5:f4:ee:a8:70:26:e2:aa:38:72:49:2e:9d:e8:b4:17:
95:7f:b0:5a:6c:5b:eb:ff:5e:29:4b:3b:89:73:c5:69:76:f4:
08:e5:6c:27:7e:d0:d0:e2:9a:78:95:be:a5:a2:4e:11:4b:b8:
86:7a:08:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org