Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/l7preOllAc0j0ItgfDF1QwLfgmo.roa
File: l7preOllAc0j0ItgfDF1QwLfgmo.roa (raw, json)
Hash identifier: iYr3NONG296AZ9E9Y3Tyj8gFQdSqioSrMuHGQO01Ubk=
Subject key identifier: 97:BA:6B:78:E9:65:01:CD:23:D0:8B:60:7C:31:75:43:02:DF:82:6A
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01844613BF4A9F3F14D7DA4CC4CC9463BC35
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/l7preOllAc0j0ItgfDF1QwLfgmo.roa
Signing time: Sat 05 Nov 2022 04:36:49 +0000
ROA not before: Sat 05 Nov 2022 04:36:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:46:13:bf:4a:9f:3f:14:d7:da:4c:c4:cc:94:63:bc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Nov 5 04:36:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97ba6b78e96501cd23d08b607c31754302df826a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:a3:a8:09:0a:fa:74:4e:2e:20:0a:e9:46:
6c:8b:c2:55:72:c2:b9:01:d3:b9:8f:a7:76:5f:52:
4c:a5:15:84:19:06:05:e1:46:80:f7:c8:24:94:92:
cf:20:a5:ca:fd:a4:fd:f8:3e:bd:7a:2f:83:4e:80:
ad:bf:01:b8:4a:79:3f:07:67:60:7c:ba:0f:93:76:
f4:4a:95:05:2a:8e:57:62:7c:e7:32:09:d7:af:32:
6c:71:14:45:c8:f6:44:06:c7:67:88:bf:8c:b2:ac:
6e:74:72:55:a9:b1:15:50:56:ca:75:ba:a7:50:77:
97:3b:fd:71:08:e4:aa:1c:1f:52:d7:02:69:2b:9d:
e0:27:3f:5b:9a:25:1d:ab:59:3c:62:78:50:f5:6d:
91:2e:13:c6:e5:0e:65:9a:6a:81:17:6d:28:dd:ca:
92:64:77:da:d9:49:91:75:27:7b:07:ca:15:6c:49:
d6:8d:73:d1:ad:8c:d3:cd:02:d3:68:4b:35:fe:30:
7c:9c:ae:1f:ea:d5:e8:ee:7d:9f:05:8f:e8:79:6f:
e3:95:07:70:e2:45:bc:2c:7f:06:42:43:5c:3c:b6:
36:74:34:0a:d3:71:1d:5c:a5:3b:62:1f:8c:f7:e9:
ae:aa:61:95:57:ef:1c:5e:ba:74:58:81:29:07:07:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:6B:78:E9:65:01:CD:23:D0:8B:60:7C:31:75:43:02:DF:82:6A
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/l7preOllAc0j0ItgfDF1QwLfgmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
39:20:ca:10:48:ce:83:db:27:aa:92:2d:8f:32:e8:46:d2:e1:
12:96:b7:bc:eb:65:06:6d:a0:03:47:8b:4e:81:27:9f:2b:e1:
89:ad:3e:a2:36:16:a7:fb:68:3a:b8:4f:99:76:19:39:92:5d:
25:96:21:15:aa:c6:e3:df:12:87:21:3a:24:01:b2:cd:14:9c:
fe:5a:21:ac:ec:94:42:a1:1b:89:99:fc:d3:69:4b:18:ad:54:
2f:5f:09:8a:50:59:e2:9d:e4:17:fd:07:37:0e:96:c0:11:b8:
95:78:c2:d1:60:85:e7:79:d7:cf:88:6b:99:cd:fe:23:d6:86:
e1:23:e5:15:49:f3:60:79:e7:04:a8:6d:ac:ee:98:2f:27:4c:
1a:2a:a1:6b:63:a5:1b:14:6c:fb:41:a8:2d:fe:fe:23:47:ed:
80:2a:90:93:5f:ef:67:d8:8e:2f:53:3b:c5:d8:ec:78:21:7c:
89:e9:5e:0e:3e:64:e0:69:13:b2:77:e8:27:22:83:35:72:1e:
0a:70:cf:1e:e7:a2:88:b2:01:f6:87:86:6b:ba:49:38:7d:ea:
02:8f:fe:6a:ab:0e:da:92:0b:99:2e:ae:49:99:3a:4e:5d:ef:
93:0f:06:ff:3c:2d:62:e6:95:ed:40:b3:ef:32:a7:26:4c:63:
7f:71:93:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org