Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nw0dihKShpHFE6-DVm0Uf0Xy5FA.roa
File: nw0dihKShpHFE6-DVm0Uf0Xy5FA.roa (raw, json)
Hash identifier: DMRIgof2Lu7LveU8m953o5814JWh8pU0ggsK4s0L6iU=
Subject key identifier: 9F:0D:1D:8A:12:92:86:91:C5:13:AF:83:56:6D:14:7F:45:F2:E4:50
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FD529DDC800188D5CC849E71CC0A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nw0dihKShpHFE6-DVm0Uf0Xy5FA.roa
Signing time: Sun 01 Jan 2023 19:35:30 +0000
ROA not before: Sun 01 Jan 2023 19:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206850
IP address blocks: 77.74.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:fd:52:9d:dc:80:01:88:d5:cc:84:9e:71:cc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f0d1d8a12928691c513af83566d147f45f2e450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:17:97:8b:c0:92:ee:a5:58:35:7d:cf:94:
5a:6b:91:41:19:fa:a9:80:e5:04:5b:13:8f:9f:13:
e5:8a:41:4d:24:8e:b7:64:27:f3:46:f1:60:51:65:
ed:3c:0e:36:fd:72:8f:ed:e3:95:e6:07:22:45:34:
bb:bf:70:32:63:55:4e:93:d1:d4:bd:15:6c:d2:6b:
85:0a:c7:e4:01:98:49:c0:14:88:f5:94:3b:21:22:
c7:4b:a9:f3:2c:4b:a0:45:a9:96:71:b0:fc:06:4d:
3b:eb:e9:48:1a:8b:23:04:c7:26:d4:ab:5d:27:9d:
a6:c1:6f:8a:a5:61:06:af:bf:90:55:d1:94:22:db:
82:26:a8:eb:89:d6:cc:2e:f1:f5:82:8d:51:4d:77:
46:9d:e1:dc:e2:ad:57:5b:2f:1e:b6:89:d3:e4:e5:
28:bb:0d:64:cb:5d:a3:c9:f9:3d:9b:59:e3:ea:37:
98:8a:33:d9:f8:71:cf:3e:80:c0:f5:3c:e4:e1:c4:
ce:e8:35:21:73:bf:36:8f:02:4f:6b:7f:04:9e:b7:
b4:5b:95:2f:63:4c:e5:33:91:ae:27:66:ee:2e:f9:
84:8c:b2:e1:5b:16:11:17:74:d4:b4:36:97:72:cd:
0a:d8:8e:b0:48:c4:c6:88:0d:8f:85:09:74:5e:79:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:1D:8A:12:92:86:91:C5:13:AF:83:56:6D:14:7F:45:F2:E4:50
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nw0dihKShpHFE6-DVm0Uf0Xy5FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.76.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a6:61:01:9c:8b:80:30:e1:98:e7:03:7b:a5:3b:e8:34:81:
9a:ae:b1:78:00:94:cd:6f:92:89:85:5c:8e:01:39:ae:0c:c7:
90:bf:02:0b:42:f0:9a:16:3f:54:1d:21:f7:05:f3:6f:43:de:
15:5f:97:27:76:74:79:d6:85:0b:c0:c4:c1:a3:cb:63:00:e3:
51:d0:6b:a3:60:b6:bb:d4:a8:30:82:09:00:43:80:09:0f:df:
07:8b:3e:c0:bd:19:1e:36:cb:38:63:71:48:8e:bd:80:a6:7f:
76:ca:30:16:1f:30:19:6a:3b:c7:e9:99:1a:6f:58:09:e1:d3:
a6:d5:98:b8:83:73:04:84:17:89:8f:7e:24:b9:5b:ce:b9:0f:
b5:a9:51:3f:66:f4:08:d6:bc:61:c8:81:14:e2:cc:96:4d:77:
63:0e:b0:8a:42:9a:b5:c2:94:3d:7e:8a:50:78:3b:d5:ea:18:
77:42:a0:eb:89:65:1c:f8:45:e6:49:ea:83:e1:24:26:82:d1:
a3:20:16:71:e7:27:d3:26:f5:1e:3c:f8:84:a7:e1:49:00:af:
e0:99:e2:ff:cf:57:95:ef:de:e0:f2:3e:99:03:19:7a:1f:92:
7e:70:66:9b:2a:e7:4b:6b:3b:10:2f:88:45:11:c6:c2:1f:e1:
8f:59:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:11 2025 by rpki-client