Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/FUrQHi6YYnUz-CvrjbAgiv-S35I.roa
File: FUrQHi6YYnUz-CvrjbAgiv-S35I.roa (raw, json)
Hash identifier: bvryDD0sZbtLsLxH/z8MfPd/76WaY9MrZrJ8LE6Hw2Q=
Subject key identifier: 15:4A:D0:1E:2E:98:62:75:33:F8:2B:EB:8D:B0:20:8A:FF:92:DF:92
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 028126C7
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/FUrQHi6YYnUz-CvrjbAgiv-S35I.roa
Signing time: Sat 01 Jan 2022 08:01:31 +0000
ROA not before: Sat 01 Jan 2022 08:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42421
IP address blocks: 77.72.186.0/24 maxlen: 24
77.72.185.0/24 maxlen: 24
77.72.184.0/24 maxlen: 24
77.72.187.0/24 maxlen: 24
77.72.189.0/24 maxlen: 24
77.72.188.0/24 maxlen: 24
2a03:c6c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42018503 (0x28126c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jan 1 08:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=154ad01e2e98627533f82beb8db0208aff92df92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:e6:44:7f:07:e9:0e:5f:eb:8c:76:75:34:
15:3b:5f:38:f1:4f:21:01:06:32:8b:2f:ba:f8:3c:
78:76:64:35:c2:e4:0d:74:21:99:f4:79:ef:97:ba:
59:ac:96:75:55:04:b9:23:16:40:c9:14:ab:65:1f:
51:fd:ff:28:56:47:60:77:a3:ef:5b:db:01:c3:03:
d6:5f:c6:3f:23:db:3a:b5:14:c4:7f:bf:e9:f3:cc:
5d:ee:81:73:e8:d6:60:fb:22:4c:fc:4b:7a:17:ff:
97:b9:14:51:a3:39:1d:8b:ab:e5:15:38:01:bc:e2:
85:a6:ce:e1:8d:d8:b7:7d:c4:a4:10:b2:ff:7e:ff:
49:7c:ff:87:db:0f:21:ea:6f:c6:24:23:23:32:89:
ed:15:56:b8:51:ed:6c:08:e4:22:53:81:3f:49:fd:
37:32:42:b3:8c:87:b0:39:ee:3f:1f:5c:57:d6:1e:
2c:db:5b:d2:81:39:58:29:64:ff:50:70:15:76:58:
46:e5:96:23:c3:9b:af:21:36:9e:10:40:6a:7c:3d:
89:97:63:ee:9a:d2:db:4e:f5:0e:a2:de:e2:87:e7:
4b:a7:96:6e:3a:77:04:fb:7d:36:c6:5c:08:03:64:
34:7a:f7:47:d9:28:35:4b:f3:2b:08:84:ff:89:15:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:D0:1E:2E:98:62:75:33:F8:2B:EB:8D:B0:20:8A:FF:92:DF:92
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/FUrQHi6YYnUz-CvrjbAgiv-S35I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.184.0-77.72.189.255
IPv6:
2a03:c6c0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:81:d6:51:43:97:3e:f2:6d:80:87:29:1a:13:72:4b:97:90:
b5:0a:a5:b5:3b:f8:ad:56:a8:af:c2:41:2e:18:ea:ec:99:33:
69:b6:13:23:c1:69:24:77:ff:fa:f8:1a:b5:80:18:89:68:61:
a6:88:13:06:af:60:5b:ce:db:f7:39:5a:09:7f:79:bf:cf:4e:
7b:66:77:f7:e6:61:7f:51:09:95:58:b4:9c:36:83:21:2f:6a:
db:3a:d3:19:ed:1d:8c:eb:02:b0:d6:cf:d4:12:40:e9:ef:b6:
c9:fd:41:a8:e5:f0:c1:5c:b2:ce:84:54:79:8f:5c:d5:04:16:
44:a0:4c:9d:28:ce:df:6a:0a:fd:17:2f:9b:a9:c2:30:74:1a:
1b:d3:a2:6e:e1:22:9b:d1:20:6b:11:86:42:7e:f2:e6:2a:85:
37:76:83:03:78:83:75:ad:a4:fe:ec:32:0b:66:d1:13:77:7f:
3f:50:34:bb:b5:f5:37:e8:cf:77:6d:09:44:47:e6:fc:d9:9a:
06:2e:f8:9f:bb:20:d3:ac:38:a3:16:3d:de:d4:d4:72:a0:9e:
4d:41:c2:d6:54:3a:14:3b:c8:be:d4:05:2a:b6:9a:f2:b4:7b:
b3:16:c3:81:62:a3:a6:44:a9:c1:f2:ea:c7:a7:40:de:9c:f8:
dc:7a:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org