Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/pB1rNkvegVoz_8b56H77HpPhIVw.roa
File: pB1rNkvegVoz_8b56H77HpPhIVw.roa (raw, json)
Hash identifier: uJhpDq4+NZUG8PyarYwOuwnq8uovbhMngBF/89iNKZs=
Subject key identifier: A4:1D:6B:36:4B:DE:81:5A:33:FF:C6:F9:E8:7E:FB:1E:93:E1:21:5C
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018399465B4AD9555705E6B6528767C7043D
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/pB1rNkvegVoz_8b56H77HpPhIVw.roa
Signing time: Sun 02 Oct 2022 15:17:48 +0000
ROA not before: Sun 02 Oct 2022 15:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.81.80.0/23 maxlen: 24
188.214.232.0/23 maxlen: 23
188.214.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:46:5b:4a:d9:55:57:05:e6:b6:52:87:67:c7:04:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Oct 2 15:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41d6b364bde815a33ffc6f9e87efb1e93e1215c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:f1:7e:2d:45:22:45:e1:54:3d:02:81:af:
9d:df:2f:42:08:6f:17:f0:e9:a5:b1:09:6e:b7:45:
46:2f:14:12:06:91:d4:8a:57:14:a4:6f:34:e8:d8:
49:fd:be:c6:3e:9a:cd:cb:57:6e:7f:82:fd:fc:a6:
c2:2f:18:4a:77:df:85:0b:0d:19:52:66:95:83:c9:
e6:bb:02:26:a5:79:36:66:bd:e5:17:e4:6f:1b:65:
76:57:2d:a7:83:77:f0:e5:31:0e:ce:a3:7a:40:01:
94:9a:61:d6:c9:0f:66:e4:ad:c0:c5:e6:4c:ca:0a:
38:bd:0c:53:f6:8a:c6:a5:95:12:ed:b4:72:a5:78:
9c:91:49:82:6e:0d:36:fe:93:f9:cd:77:e1:e3:5d:
3c:a0:9f:7f:70:58:78:61:b5:ac:df:5e:26:f0:b2:
28:5a:29:07:45:cc:85:d4:66:5f:c7:fe:59:52:3c:
d8:25:bc:f5:4a:6d:9f:cc:93:80:9f:98:d0:1c:61:
11:ab:2d:cc:d8:5d:e6:fe:09:97:7c:c6:23:6c:a9:
0b:3c:3e:e2:ff:62:09:3a:64:07:54:9a:b5:f4:ef:
f1:e9:4d:28:a2:c3:ec:0f:20:eb:83:11:97:88:ea:
be:f3:96:08:6f:45:4e:91:b7:a3:fe:cd:01:dc:99:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:6B:36:4B:DE:81:5A:33:FF:C6:F9:E8:7E:FB:1E:93:E1:21:5C
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/pB1rNkvegVoz_8b56H77HpPhIVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
188.214.232.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:10:d7:a8:02:5a:ea:c4:11:e5:41:a4:85:2e:f7:48:77:c7:
40:cd:79:0a:a5:e2:7e:15:dc:91:ce:9a:93:1f:b1:84:9e:1c:
ef:93:4f:99:11:9a:6d:23:b9:bb:0e:ab:ef:4b:70:7d:6a:af:
4f:d6:89:3c:7e:ca:d7:3b:5f:58:fe:21:9e:ea:ad:35:22:01:
e0:db:58:51:b5:72:04:f7:0d:33:83:39:e5:4b:5f:63:a0:f5:
24:9a:f5:25:3d:6b:ee:1a:5f:a4:2b:57:b8:bb:de:32:15:26:
88:d9:6b:0d:ff:7e:af:b1:0a:50:c5:d8:ce:e9:78:4c:91:86:
b1:39:c0:bf:38:97:1e:f4:d7:86:2f:aa:61:f3:4e:f8:b9:36:
dc:0e:47:f8:f3:22:1a:3a:53:2d:77:a3:2b:58:77:6c:69:0e:
58:b1:40:f7:7a:52:2a:7f:30:f8:74:5b:c5:45:c8:5f:0b:85:
8a:2d:10:13:93:09:35:3a:fc:61:ff:c3:74:5e:b5:b3:5e:d8:
a8:fb:3d:fb:24:5a:96:10:fc:ab:f3:f0:14:e8:28:e9:d7:30:
be:79:1d:4a:49:80:0c:32:7f:fb:38:4a:9f:93:5d:ae:b8:50:
d7:b5:90:22:fe:e9:f1:60:38:d4:8a:31:f3:2d:94:46:96:61:
da:d9:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org