Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/71C3ll9hfgNtWUVBMkbowwoTFg8.roa
File: 71C3ll9hfgNtWUVBMkbowwoTFg8.roa (raw, json)
Hash identifier: fIU3Vl2y/yoWEaexfwUYqxhhZPl8SlxY7XOouy8CEvk=
Subject key identifier: EF:50:B7:96:5F:61:7E:03:6D:59:45:41:32:46:E8:C3:0A:13:16:0F
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0185299C4FBBFF6087484E742AF0CA2EDF2B
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/71C3ll9hfgNtWUVBMkbowwoTFg8.roa
Signing time: Mon 19 Dec 2022 08:59:47 +0000
ROA not before: Mon 19 Dec 2022 08:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:9c:4f:bb:ff:60:87:48:4e:74:2a:f0:ca:2e:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Dec 19 08:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef50b7965f617e036d5945413246e8c30a13160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:f5:40:b9:e9:5a:4b:5e:b0:7a:70:5b:71:
90:6d:11:bd:59:a0:1e:c5:6b:de:d0:23:d2:46:72:
c5:4e:ef:fc:44:1f:0d:13:0b:d5:8d:71:a7:50:e2:
5e:50:67:7f:98:a7:98:52:46:5d:a6:d7:43:ad:bc:
56:d6:1a:ff:a0:2e:81:8c:45:47:c1:3a:0c:0f:74:
04:c1:aa:4e:64:6c:7d:77:1e:01:30:05:95:18:60:
59:02:5c:68:f6:a3:72:68:b7:f3:90:07:70:f1:3e:
1a:ad:21:68:cb:ef:ba:44:54:b9:93:3f:6c:7b:8c:
b3:ba:f3:9a:15:2a:e7:7f:ad:94:dd:aa:a4:f2:3a:
9e:b1:10:9a:bc:75:05:f2:25:89:1b:1d:4a:a4:cb:
3c:bc:f7:57:35:50:be:c0:fd:a7:9b:d6:18:37:d2:
68:ea:a9:26:77:ae:b3:e4:11:fe:46:4a:5a:58:e7:
05:06:0b:00:9f:a7:7a:b3:c9:9e:a9:39:a5:3c:a0:
6b:14:03:0e:fa:3b:34:20:de:c8:be:d5:9b:27:7e:
c0:78:97:3c:51:f1:c0:5e:37:04:8f:24:07:c3:2b:
9f:9e:25:f8:a4:95:a0:b9:e2:52:f6:11:2a:f2:01:
2b:31:59:57:44:f7:f4:5a:f0:65:b0:e4:94:db:cb:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:B7:96:5F:61:7E:03:6D:59:45:41:32:46:E8:C3:0A:13:16:0F
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/71C3ll9hfgNtWUVBMkbowwoTFg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
56:c6:11:59:ff:86:62:55:ad:c0:ee:d1:3e:6a:0f:a2:b7:c9:
3a:17:84:f9:16:df:1c:e5:ad:6c:32:f8:35:37:a9:92:1c:8c:
74:2d:e2:aa:a1:9f:1b:fd:76:89:ee:d9:c8:a2:37:58:3e:af:
76:f4:34:d4:52:9d:16:d4:32:fd:a6:07:88:ab:06:44:8b:f5:
e0:23:58:4c:e1:73:0f:35:7f:90:14:ac:72:f2:39:94:cd:d5:
93:51:91:aa:0a:31:2c:55:38:c1:d6:d0:5a:21:cb:f6:3c:f7:
0f:cf:9e:42:59:b5:33:82:be:26:0b:63:b2:7d:d2:2e:9d:7d:
83:96:b4:f9:d8:49:eb:a0:11:aa:ce:5f:a0:5b:79:57:b7:76:
8e:30:d9:3c:16:8f:ae:bb:2f:e2:cf:89:1e:84:08:0b:b2:4e:
28:f7:8b:8e:d2:0a:9a:52:a9:03:eb:3e:be:da:69:ce:0f:aa:
72:49:12:68:85:47:82:a7:97:70:99:5f:94:0e:ce:9f:53:74:
2a:be:01:bd:be:83:fc:55:6b:05:a6:9e:1c:1e:c9:33:85:90:
b4:2a:0b:a5:90:b8:f7:27:ef:4d:a8:30:b3:eb:22:43:1b:8a:
75:d0:b8:03:93:fe:ce:85:25:27:b1:e2:b1:64:cb:d4:3b:2b:
75:76:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:25 2023 by rpki-client on console-ams.rpki-client.org