Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/7NhCLRdK-WbasWDL7gNwvKCM_KY.roa
File: 7NhCLRdK-WbasWDL7gNwvKCM_KY.roa (raw, json)
Hash identifier: MUGAImMcz+Oc8MgopzBY3q4uxEZfB9aPqwRWhzP/ctE=
Subject key identifier: EC:D8:42:2D:17:4A:F9:66:DA:B1:60:CB:EE:03:70:BC:A0:8C:FC:A6
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0A73A4C8
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/7NhCLRdK-WbasWDL7gNwvKCM_KY.roa
Signing time: Sat 01 Jan 2022 08:01:25 +0000
ROA not before: Sat 01 Jan 2022 08:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39724
IP address blocks: 185.55.157.0/24 maxlen: 24
185.55.158.0/24 maxlen: 24
185.55.158.0/23 maxlen: 23
185.55.156.0/23 maxlen: 23
185.55.156.0/24 maxlen: 24
185.55.156.0/22 maxlen: 22
185.55.159.0/24 maxlen: 24
77.247.101.0/24 maxlen: 24
77.247.102.0/24 maxlen: 24
77.247.102.0/23 maxlen: 23
77.247.100.0/22 maxlen: 22
77.247.100.0/23 maxlen: 23
77.247.100.0/24 maxlen: 24
77.247.103.0/24 maxlen: 24
2a0d:a6c2::/32 maxlen: 32
2a0d:a6c6::/32 maxlen: 32
2a0d:a6c7::/32 maxlen: 32
2a0d:a6c1::/32 maxlen: 32
2a0d:a6c4::/32 maxlen: 32
2a0d:a6c0::/32 maxlen: 32
2a0d:a6c5::/32 maxlen: 32
2a0d:a6c3::/32 maxlen: 32
2a0d:a6c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175350984 (0xa73a4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jan 1 08:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecd8422d174af966dab160cbee0370bca08cfca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:0b:56:2c:cc:21:cf:a6:38:1d:15:ef:59:
c2:e1:8f:4a:0a:d5:46:c2:99:a7:68:8c:dc:54:64:
15:c9:16:0e:85:43:e2:62:bc:4b:82:90:89:d0:1e:
e8:60:34:00:a3:2b:c5:4e:c9:34:4e:69:df:5e:19:
e6:e4:b0:57:bf:ec:d1:26:64:82:31:f2:18:4e:e2:
25:c1:78:89:3a:fc:1a:b7:cf:9c:3a:d0:c6:a6:e3:
4e:a9:4f:84:b0:e3:48:7d:f0:e9:a4:5c:e2:d8:63:
fa:19:57:52:c8:4f:f8:e0:8d:c4:82:3e:d7:ea:29:
ef:0d:00:0b:33:c9:02:af:2e:cc:35:d2:ef:de:e3:
72:c8:dd:d2:34:bc:23:69:c7:cb:0e:10:a6:ba:e6:
fb:a4:62:83:d3:3b:43:9b:a2:49:b0:68:6e:27:8b:
23:03:6c:1b:bc:85:15:68:f7:5c:95:85:20:99:87:
83:e5:d7:c7:1e:38:cc:c2:07:e1:cf:ff:ce:dd:74:
c7:eb:80:ac:ef:30:ca:67:d7:9f:6a:9a:04:89:41:
9d:ef:ce:f6:5d:03:a2:7f:bc:91:aa:15:73:6e:f2:
6a:cd:e9:f8:f9:91:ec:6c:f5:61:c5:2e:a9:29:a0:
eb:3d:eb:31:0e:8b:c5:4d:89:c4:a2:f8:29:ea:3e:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D8:42:2D:17:4A:F9:66:DA:B1:60:CB:EE:03:70:BC:A0:8C:FC:A6
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/7NhCLRdK-WbasWDL7gNwvKCM_KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.100.0/22
185.55.156.0/22
IPv6:
2a0d:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:ba:55:8a:a6:47:06:a4:eb:d9:df:91:69:70:4a:a2:b0:90:
83:ce:88:b4:42:25:ff:49:60:01:4c:b8:b2:1c:17:0c:e6:db:
cd:3e:ec:4d:de:1b:74:9e:ab:dc:d7:b8:cd:b5:54:b6:f7:f0:
0d:7d:8e:ef:d6:df:08:5f:f7:b2:57:55:1d:e0:bb:a5:67:66:
7e:62:28:ad:e5:7f:a7:64:db:2a:76:c2:5d:ca:45:76:f4:13:
96:e8:7f:5a:b7:a1:34:6f:cb:55:78:f5:7d:6b:63:b3:69:ec:
7e:61:bb:66:17:32:ec:65:e2:6a:f9:d6:4c:85:f2:42:6d:ff:
75:b3:32:e6:85:90:88:5b:f1:d8:c0:6c:89:34:6f:2f:ed:17:
2e:05:e0:17:97:12:8a:b9:45:b4:5d:35:0d:e1:2a:6e:52:a8:
81:1a:d7:ba:77:53:8b:8c:2c:61:12:a2:3f:20:49:58:ac:dc:
db:6a:cc:50:6f:fe:98:ed:4b:bb:ad:4b:d3:40:5c:e3:74:c7:
b4:88:61:3f:7d:dd:8b:86:de:fe:ac:3b:eb:da:43:c7:6c:2c:
d8:a1:1e:aa:1e:08:ff:0b:ef:c3:d4:93:f4:5a:02:d9:f5:0e:
02:76:6d:62:11:49:fe:e3:3d:ca:2b:0e:62:06:4b:95:59:a3:
5a:8f:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org