Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/1-36u4cYhPtKUgWkhAQpYvtJLQQ0.roa
File: 1-36u4cYhPtKUgWkhAQpYvtJLQQ0.roa (raw, json)
Hash identifier: tOYWqwLN/8pY2O4JDA5SRxe9MAdNwCmXJwlByAY96fA=
Subject key identifier: FB:7E:AE:E1:C6:21:3E:D2:94:81:69:21:01:0A:58:BE:D2:4B:41:0D
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 05FFE481
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/1-36u4cYhPtKUgWkhAQpYvtJLQQ0.roa
Signing time: Sun 27 Mar 2022 23:58:55 +0000
ROA not before: Sun 27 Mar 2022 23:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.81.80.0/23 maxlen: 24
188.214.232.0/23 maxlen: 24
188.214.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100656257 (0x5ffe481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Mar 27 23:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb7eaee1c6213ed294816921010a58bed24b410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:b5:15:81:3b:1f:ea:f3:2f:f8:87:fc:af:
d0:f5:6a:84:76:00:fd:e6:51:a8:cc:f2:bb:4c:d7:
8c:db:2c:b6:aa:61:71:1f:eb:02:ab:70:4d:e8:77:
0e:d4:45:79:a2:ce:e2:70:1e:b5:3f:1b:b8:ce:98:
f1:6d:95:e0:08:d7:dd:4b:09:6d:32:f7:80:38:d7:
bc:85:31:87:ab:95:0c:91:51:16:8f:97:27:0b:0b:
96:d4:69:90:94:e6:0b:48:d3:e5:c8:67:cd:ba:20:
79:a4:e9:b6:f8:f0:7a:f0:93:4b:08:57:94:1e:27:
60:30:a6:fa:f4:a1:90:d2:24:9b:69:9b:b3:1f:37:
22:31:23:3b:07:e9:8a:30:20:ce:e6:c2:eb:b5:9e:
ec:00:8e:35:a7:d5:b6:3d:15:14:af:9a:64:83:80:
a9:ba:8e:e5:f0:b0:63:0b:cc:4d:61:95:2d:9b:95:
1b:f3:13:cf:2e:d8:d3:22:f7:07:60:0e:e4:6f:32:
03:a4:91:08:42:1d:c3:f3:01:62:da:d1:80:9a:01:
41:b9:8c:5d:94:a7:45:e3:ae:c3:18:d1:46:36:af:
57:a8:0d:53:16:4a:77:e0:f3:d2:2b:1a:06:98:64:
ff:ce:44:30:a6:98:fc:9d:f6:03:2c:da:d3:66:00:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7E:AE:E1:C6:21:3E:D2:94:81:69:21:01:0A:58:BE:D2:4B:41:0D
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/1-36u4cYhPtKUgWkhAQpYvtJLQQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
188.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f0:e9:a0:7f:09:50:79:8e:6a:46:71:83:2b:79:7c:58:a3:
27:c5:a6:d5:04:e6:c0:30:97:dd:1e:a6:6c:86:bf:a5:80:6e:
46:67:50:91:c6:7c:50:15:83:f6:c7:0f:b9:84:98:cc:65:50:
1a:86:c0:e4:88:a9:85:c1:23:8a:6f:2f:04:72:01:c3:a2:63:
eb:d0:07:ef:a6:09:9d:96:0d:1b:fc:0e:d7:b6:9e:c6:1e:a9:
ab:6c:8e:21:13:5b:24:a5:18:41:58:f1:29:3c:03:fc:32:cb:
cc:81:cc:f1:0f:6d:02:74:61:3b:ac:4a:23:f0:58:dc:1d:e5:
b1:30:5f:a4:61:92:28:76:ff:d4:d0:d4:70:9b:91:ac:cb:e2:
c0:5c:81:68:ec:84:c0:19:22:15:40:94:a1:63:f1:b9:93:b4:
be:e4:9d:eb:29:6e:9f:9a:21:01:9e:fe:92:f8:f8:db:37:12:
ff:bc:71:fa:e7:98:a8:57:b4:49:87:26:75:19:1f:b3:e3:e7:
41:00:4c:7d:b9:73:ef:c7:20:2e:76:9c:d2:7b:e2:9d:ce:e4:
db:54:79:e3:3f:29:f8:0b:ff:fa:72:57:10:b4:0e:81:da:df:
56:1a:80:69:e3:df:43:9d:a8:b4:d1:2d:72:be:5d:10:b1:0f:
c8:b8:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org