Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/OQXYiI4bbNheL_seEN6ZabP59oc.roa
File: OQXYiI4bbNheL_seEN6ZabP59oc.roa (raw, json)
Hash identifier: YkYvIlAJr7N+aoz3cUJyaTCcKL8Qjvsr+tK/SSHJDO8=
Subject key identifier: 39:05:D8:88:8E:1B:6C:D8:5E:2F:FB:1E:10:DE:99:69:B3:F9:F6:87
Certificate issuer: /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial: 03DF05F9
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/OQXYiI4bbNheL_seEN6ZabP59oc.roa
Signing time: Sat 01 Jan 2022 01:53:38 +0000
ROA not before: Sat 01 Jan 2022 01:53:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199276
IP address blocks: 77.247.94.0/24 maxlen: 24
77.247.92.0/24 maxlen: 24
77.247.95.0/24 maxlen: 24
77.247.93.0/24 maxlen: 24
77.247.90.0/24 maxlen: 24
77.247.91.0/24 maxlen: 24
77.247.88.0/24 maxlen: 24
77.247.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64947705 (0x3df05f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Validity
Not Before: Jan 1 01:53:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3905d8888e1b6cd85e2ffb1e10de9969b3f9f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:11:b1:0e:99:58:14:03:bf:4f:7d:73:5c:
69:dd:e5:44:a4:23:1e:82:24:b1:9f:f4:e2:df:ad:
04:c9:aa:2a:75:8e:87:50:d1:c0:19:e1:a6:99:62:
53:3f:d3:cb:28:64:1e:7d:4a:fc:83:5c:b3:fc:38:
bc:0c:96:83:31:94:44:09:ea:ba:0f:6b:a7:56:0f:
f7:4c:6f:8e:c5:ec:3b:6e:12:9a:a0:be:0f:e2:b8:
ac:6e:0c:e8:2c:cc:4e:e9:79:ec:cb:23:d0:58:53:
48:2d:d2:01:a1:b5:d7:07:8d:4f:76:0d:ff:3a:e3:
85:62:7f:fd:e2:bb:6f:fb:4b:83:ae:e0:a4:96:6c:
b8:26:a0:cf:68:96:0d:a6:a6:e6:34:76:6c:a7:3d:
37:ac:90:5d:56:61:1c:3d:68:58:5f:22:c3:ea:7e:
7b:af:28:4a:fd:ff:e6:58:a9:4e:2f:ef:cb:a3:d8:
90:8a:75:20:55:a1:fe:43:0c:9b:1f:53:48:3f:33:
4f:67:ff:ae:7b:6e:92:ec:4f:43:4b:f2:cd:cb:d9:
3d:50:5c:42:cc:f4:57:d6:35:98:b1:97:40:db:a1:
fb:84:09:7c:d2:cc:70:38:c8:e1:80:67:be:96:20:
b6:ed:a2:c0:82:82:a5:db:19:c3:c6:f3:f8:b3:6e:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:D8:88:8E:1B:6C:D8:5E:2F:FB:1E:10:DE:99:69:B3:F9:F6:87
X509v3 Authority Key Identifier:
keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/OQXYiI4bbNheL_seEN6ZabP59oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:a3:df:c3:29:9f:ae:e9:86:d8:4f:5f:f5:72:d0:31:c2:59:
25:f7:b4:0c:b4:22:9c:bc:bc:b1:b9:7e:76:39:9a:36:42:bd:
cc:d0:f4:8d:5f:ad:87:4f:a4:46:73:bf:5f:06:0a:ec:93:2d:
54:2a:8d:33:99:46:a4:43:dd:ca:60:b5:16:d2:c0:97:b8:4b:
8c:47:aa:df:4a:b3:1c:5b:af:12:ba:cd:c4:dd:04:9f:43:64:
2c:31:7c:40:4c:5d:34:8d:03:23:eb:8f:72:09:70:78:b3:34:
69:a0:26:c7:4f:58:0f:98:2a:fc:46:3d:ac:21:60:03:13:5a:
6e:0f:4c:af:ac:b8:82:b4:2b:1f:bc:33:5f:13:26:eb:81:8d:
84:77:32:95:7c:49:79:7d:6a:4d:5d:0d:b3:5e:3d:71:ff:30:
16:83:3d:1a:26:b6:12:07:9f:b4:24:48:eb:70:6e:75:95:36:
0d:63:c8:a2:75:0d:08:95:56:48:ad:99:cb:8f:6e:b4:b8:d8:
fa:3c:85:d3:e0:5f:f9:09:b1:14:8b:cf:d5:24:c4:22:35:8b:
4f:1c:f6:32:f5:c1:ba:ea:36:5c:aa:bc:c1:3a:fa:08:15:bf:
34:01:f5:30:f4:3e:e6:5d:9d:25:c0:5c:25:7d:82:85:a4:78:
86:40:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:02 2023 by rpki-client on console-ams.rpki-client.org