Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/uu7pJZ6vJv2Q7alIWxQPI_c4t4k.roa
File: uu7pJZ6vJv2Q7alIWxQPI_c4t4k.roa (raw, json)
Hash identifier: cRYkHSWNz3EXQr//xjB0a8L91QBMhiS3lbMVphUvmu0=
Subject key identifier: BA:EE:E9:25:9E:AF:26:FD:90:ED:A9:48:5B:14:0F:23:F7:38:B7:89
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018205F3576B0F965AA7ABE8910F00F29FAF
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/uu7pJZ6vJv2Q7alIWxQPI_c4t4k.roa
Signing time: Sat 16 Jul 2022 07:40:09 +0000
ROA not before: Sat 16 Jul 2022 07:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.73.132.0/24 maxlen: 24
77.73.129.0/24 maxlen: 24
77.73.134.0/24 maxlen: 24
77.73.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:f3:57:6b:0f:96:5a:a7:ab:e8:91:0f:00:f2:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 16 07:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=baeee9259eaf26fd90eda9485b140f23f738b789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:db:6a:ea:c1:c5:00:38:2a:24:82:b3:94:eb:
eb:31:8f:24:42:33:24:13:73:82:4c:a8:2e:d9:c5:
9b:ba:ba:7b:3a:ac:dd:9a:00:02:c1:37:fc:b1:08:
76:09:9b:35:72:29:2e:8e:51:b7:69:cb:ae:7a:ca:
4c:55:64:67:88:09:4f:db:5b:01:c4:d5:8d:c5:4c:
89:ff:54:2b:3a:eb:9e:be:2c:e3:24:f3:dd:fa:5b:
be:c4:50:42:5e:4e:3c:69:28:58:30:2d:05:f9:af:
04:db:0d:cf:f5:5d:1e:ec:f0:8e:97:74:c7:c1:ef:
cc:d8:6b:7f:46:94:d6:67:62:2e:0d:d9:eb:69:b8:
97:a9:e0:c6:f6:05:83:4b:1e:bd:ff:ae:1e:a9:8a:
22:60:e8:8b:b9:12:d5:61:e4:f8:aa:9b:34:01:0c:
9a:da:9a:86:6b:fe:86:82:d1:03:6d:01:25:9e:aa:
6b:c2:6f:98:82:21:9e:8f:3f:fe:8f:8d:3d:a2:91:
b7:2e:d7:d4:cc:9a:db:25:8a:fc:84:b3:ac:b7:ab:
35:de:e8:f5:e3:3c:77:f8:6f:80:71:2f:d8:7c:78:
3b:44:38:cc:23:bb:1e:af:ee:a6:76:b9:60:d0:7a:
63:5c:87:70:47:07:b3:a0:56:5e:dc:66:f1:96:72:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:E9:25:9E:AF:26:FD:90:ED:A9:48:5B:14:0F:23:F7:38:B7:89
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/uu7pJZ6vJv2Q7alIWxQPI_c4t4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.129.0/24
77.73.132.0-77.73.134.255
Signature Algorithm: sha256WithRSAEncryption
51:3c:ab:81:5f:5a:ab:be:52:7b:42:96:e7:5f:43:54:86:17:
fc:47:94:90:66:66:00:c1:d9:d3:85:40:5b:a9:75:fc:40:dc:
fc:bd:aa:a8:cd:e0:8e:18:14:5e:84:0f:d2:bb:31:96:33:38:
9b:41:50:ef:28:21:39:b2:d9:d5:1a:37:84:ab:67:67:6e:5b:
74:7b:d3:fb:18:e4:10:19:85:4d:71:21:96:14:80:79:8f:58:
cc:22:de:63:c0:f8:13:8c:f4:cc:48:3a:e0:9f:7e:94:4b:18:
5a:de:64:1a:ca:c9:34:51:74:df:b1:b4:69:4c:92:20:61:1a:
6d:35:95:7c:9f:2b:f4:73:b2:63:c4:19:e4:90:ec:66:ba:72:
09:fa:d4:77:ca:f5:ba:e1:77:ea:77:24:3d:40:58:85:75:17:
2b:94:8e:d8:e6:10:18:45:db:35:19:8a:0d:14:9d:28:73:a7:
12:f8:a7:1e:4e:aa:2f:ac:43:64:2c:04:b5:e3:49:a3:0b:65:
1d:93:f2:4f:74:f8:eb:71:82:b3:1c:ff:bb:20:0d:44:e2:f4:
33:89:98:fb:b2:f3:3b:db:28:57:e2:ba:e7:b4:44:f0:d3:a0:
63:c8:d4:5c:af:2a:51:fc:c1:53:10:b8:85:3d:47:5b:f4:de:
52:a2:cc:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:51 2023 by rpki-client on console-fra.rpki-client.org