Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/1--nrAzCFg4GCoRUTzMzFCvc9nzk.roa
File: 1--nrAzCFg4GCoRUTzMzFCvc9nzk.roa (raw, json)
Hash identifier: dcy1dAZr9aD3K+HiUGecr23XMFuVBwcpa9g1l5UZeEI=
Subject key identifier: FB:E9:EB:03:30:85:83:81:82:A1:15:13:CC:CC:C5:0A:F7:3D:9F:39
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 02C18760
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/1--nrAzCFg4GCoRUTzMzFCvc9nzk.roa
Signing time: Sat 01 Jan 2022 14:58:55 +0000
ROA not before: Sat 01 Jan 2022 14:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205718
IP address blocks: 77.83.144.0/22 maxlen: 22
2a09:fcc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46237536 (0x2c18760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Jan 1 14:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbe9eb033085838182a11513ccccc50af73d9f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:a3:7a:c4:82:7c:0e:74:b7:dc:13:5c:71:
65:eb:ab:f0:72:67:1a:ee:62:ce:f2:76:7b:cb:14:
ac:ad:cc:e9:5f:16:3a:f9:92:b4:7f:58:27:f5:97:
bb:63:12:42:0d:10:16:35:3f:5c:1a:bd:fa:ee:fa:
ae:65:2a:0e:54:b2:bb:95:47:b7:b1:b0:7a:41:5a:
d5:7f:81:40:e7:30:23:6e:7b:9f:12:6f:e2:7a:8f:
a0:be:85:7c:41:cb:b9:9e:8e:61:90:90:a6:bc:3d:
bd:42:ae:9e:d7:51:ae:20:08:41:8b:a4:cb:15:4a:
dc:85:4f:1e:5a:04:3a:e7:77:dc:36:40:9d:ef:b7:
8c:db:af:47:21:6a:69:87:fc:1d:17:67:91:9e:e2:
1b:65:83:31:57:ae:2f:0d:8e:a3:d3:bc:0f:b1:25:
a4:3e:23:0f:f1:90:a6:a0:63:b5:53:6f:97:3c:f4:
ad:e8:d0:fa:fa:e1:92:5c:e0:d3:79:07:52:fa:5a:
d2:06:2e:a1:11:ad:ee:4a:d3:8d:48:e1:53:b9:d6:
f6:25:9c:03:30:bc:fb:c6:13:4b:fb:e3:aa:ce:1b:
f5:b9:ca:ae:4e:d3:f7:45:a7:c2:71:cc:ae:db:1b:
d1:21:99:d1:4b:77:09:60:d9:5f:af:ba:50:dd:f6:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E9:EB:03:30:85:83:81:82:A1:15:13:CC:CC:C5:0A:F7:3D:9F:39
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/1--nrAzCFg4GCoRUTzMzFCvc9nzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.144.0/22
IPv6:
2a09:fcc0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:a5:61:db:28:9c:7e:a3:40:0c:fc:4e:6d:62:9a:b0:86:e4:
f0:f5:56:84:0f:c4:5d:a4:5a:39:cd:a4:6d:b3:b4:2f:12:4a:
f9:ae:ca:ed:fd:11:1a:1c:a4:1c:38:3e:22:22:54:eb:65:06:
98:73:c1:6f:37:3a:cd:b4:ca:08:a7:40:92:73:73:0f:5b:d7:
85:2f:28:64:44:c5:e1:d1:dc:ee:dc:74:c0:e6:5b:bc:78:ae:
98:57:39:f1:1b:8a:dc:ff:b5:38:0f:d9:67:c1:95:ef:b2:c2:
54:03:34:9e:50:3c:d5:58:71:1e:8d:36:e7:2b:b9:50:ab:fc:
5a:32:85:20:c2:fc:66:15:92:e8:ea:64:45:7b:6c:39:2b:19:
fb:c4:3f:18:42:09:3d:46:dc:31:aa:a0:f6:7a:d2:84:e1:2a:
94:2e:d2:19:3d:05:89:c2:78:f9:8c:40:b4:21:46:5e:0b:79:
cd:be:b6:ff:d4:50:a0:0a:22:0f:79:f7:88:fb:57:57:ae:b5:
d6:d1:a0:67:d1:0c:07:48:8f:94:4a:cf:7d:4c:79:cb:12:a3:
42:10:6d:5d:a3:96:8e:b4:2f:40:7a:cd:79:0c:9a:89:3a:09:
4d:db:37:6d:91:53:7e:39:ce:a5:cc:ff:09:2c:2c:0b:41:ea:
ad:af:a5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:46 2025 by rpki-client