Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/1X2y9td258gvIJ0v9DrWK5mXcRU.roa
File: 1X2y9td258gvIJ0v9DrWK5mXcRU.roa (raw, json)
Hash identifier: 19tZdRF5iUrBRtvjdMJkgVZARvpNSZRql4G+OOTlmhk=
Subject key identifier: D5:7D:B2:F6:D7:76:E7:C8:2F:20:9D:2F:F4:3A:D6:2B:99:97:71:15
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 03AB1BA3
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/1X2y9td258gvIJ0v9DrWK5mXcRU.roa
Signing time: Sat 01 Jan 2022 06:01:39 +0000
ROA not before: Sat 01 Jan 2022 06:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41931
IP address blocks: 77.46.32.0/19 maxlen: 19
77.46.64.0/20 maxlen: 20
77.46.64.0/18 maxlen: 18
77.46.80.0/20 maxlen: 20
77.46.96.0/20 maxlen: 20
195.177.196.0/23 maxlen: 23
77.46.4.0/22 maxlen: 22
77.46.8.0/21 maxlen: 21
77.46.112.0/20 maxlen: 20
77.46.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61545379 (0x3ab1ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jan 1 06:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d57db2f6d776e7c82f209d2ff43ad62b99977115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:b6:3d:af:b4:f1:9b:0d:f0:97:88:ba:b9:
cb:5d:e4:6a:f6:9c:3b:db:54:16:68:2d:b2:76:32:
e0:c9:ce:28:9c:73:39:8e:91:8d:11:4e:04:54:7e:
29:81:b5:0d:8f:63:f8:fa:47:91:9c:cd:33:2a:a5:
34:09:06:f8:e5:f4:f1:84:e7:41:ee:ca:5a:8d:9b:
c6:3d:56:7f:99:76:08:60:26:09:a0:c3:c9:81:c3:
00:db:8c:67:ea:06:ab:0d:bf:72:5a:55:20:df:c0:
83:8b:1b:99:75:ed:99:be:08:9a:e1:19:7d:b1:f8:
ac:6b:1b:f2:4a:ef:8a:58:41:5e:1a:b5:f9:b0:59:
d8:b1:14:71:e5:8d:47:e8:cf:2f:8f:87:ac:88:34:
26:06:d8:b6:2e:50:98:a0:14:0d:23:c4:62:ac:7b:
7b:9c:84:c6:48:cc:fe:1f:15:6d:61:be:a6:88:58:
38:50:d0:12:82:45:19:ce:02:e6:7f:db:93:70:92:
6f:d6:15:07:17:3e:91:08:7d:bc:26:6c:e7:f9:16:
36:28:60:5c:04:4d:a2:76:7b:65:4e:7f:82:52:68:
bd:a1:34:72:e3:c7:7b:0b:5b:68:17:b9:49:e1:af:
46:91:f7:cb:15:42:8e:ff:b4:a6:fd:e9:c4:99:01:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:B2:F6:D7:76:E7:C8:2F:20:9D:2F:F4:3A:D6:2B:99:97:71:15
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/1X2y9td258gvIJ0v9DrWK5mXcRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.4.0-77.46.127.255
195.177.196.0/23
Signature Algorithm: sha256WithRSAEncryption
45:ab:4d:e7:da:32:a0:fc:d3:76:58:92:db:41:93:91:e8:4a:
ba:da:d5:a4:39:30:8f:fd:40:12:97:1e:b5:1b:2e:53:68:f6:
e8:de:d4:5f:36:15:41:32:91:15:fe:c1:f4:bf:59:2d:7a:83:
a8:69:5c:d9:ce:9e:7f:ed:47:68:50:25:b9:49:be:09:ea:95:
be:77:14:f1:a0:4a:86:c9:49:b1:90:39:0d:c3:d8:c8:2a:63:
6a:9e:7d:3a:74:11:22:d8:dd:02:ad:cc:8a:40:3c:5f:a3:62:
50:59:71:c4:7c:82:54:be:cf:ce:db:d9:cf:0c:6a:f7:fa:f8:
4e:4e:e3:4e:c2:0b:2c:a1:5c:c3:98:03:e7:a6:fa:d1:d4:e7:
98:eb:48:1a:26:14:6d:ed:55:94:3d:ab:54:fc:e0:27:c7:d4:
10:86:5a:05:cd:3f:f3:b7:52:ca:07:ee:f4:18:0a:c5:dd:26:
a7:1a:ea:fe:4b:b9:11:74:cc:18:3a:16:48:ba:80:85:d8:dc:
4a:96:e6:c0:20:b5:ba:8f:21:6f:7f:d1:73:b7:fc:1e:c2:5f:
71:b3:f8:33:0f:cf:9d:08:2e:35:24:ce:40:f5:33:b3:7a:d6:
42:32:af:23:ee:4c:e7:f6:88:0e:38:0e:0b:13:64:45:96:9c:
42:1c:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org