Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/wX9tb3ua2OPeQmv3EC5b6VJMyYg.roa
File: wX9tb3ua2OPeQmv3EC5b6VJMyYg.roa (raw, json)
Hash identifier: VUAQzbTBSTSB7iZJHOB91hugykE6Dg0Lp2bISvHEkWI=
Subject key identifier: C1:7F:6D:6F:7B:9A:D8:E3:DE:42:6B:F7:10:2E:5B:E9:52:4C:C9:88
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0A7D04B2
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/wX9tb3ua2OPeQmv3EC5b6VJMyYg.roa
Signing time: Sat 01 Jan 2022 04:55:02 +0000
ROA not before: Sat 01 Jan 2022 04:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200077
IP address blocks: 77.111.208.0/22 maxlen: 24
185.37.220.0/22 maxlen: 24
2a00:fa60::/32 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175965362 (0xa7d04b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jan 1 04:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c17f6d6f7b9ad8e3de426bf7102e5be9524cc988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:1d:95:d0:17:6c:10:ac:81:59:26:28:ef:
12:cd:74:09:82:27:f7:e6:ae:5c:21:8f:76:69:92:
b8:55:7b:01:8f:03:ee:f5:31:c1:d4:80:7c:8a:49:
be:3b:32:ac:b2:92:8e:5c:fe:c5:36:67:81:5f:5c:
fc:35:eb:c1:7f:3a:e5:f2:7f:5b:de:5d:7c:57:23:
10:06:b7:e6:c1:cd:ee:40:85:39:bb:c9:19:2b:a9:
b7:fe:b5:44:89:54:e5:07:4a:e1:00:e3:a9:d6:8d:
cb:16:68:b8:c2:3b:f0:81:e8:ad:5a:64:6f:8f:4f:
00:01:eb:87:9f:a4:d0:1a:9d:31:6c:5b:e8:ff:02:
be:23:11:50:47:34:67:7e:de:5b:ad:20:73:56:3c:
9d:15:76:3a:43:2d:d9:7c:e7:e7:0e:fd:03:ee:d9:
c9:25:0c:79:23:ba:9a:0e:46:cd:9d:11:a4:43:98:
bc:81:4f:77:08:0c:c8:ec:5b:26:ba:d2:99:11:d5:
d5:64:93:fd:0d:74:bd:f9:fb:b1:f6:9c:cf:8e:e8:
95:ac:cf:44:ce:a0:94:2a:ae:45:89:c2:31:f3:32:
c7:fa:b6:b2:e8:62:d4:23:c7:75:81:11:17:f3:a8:
95:db:38:9f:b5:3d:0e:39:08:13:dd:6e:5b:ea:a5:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7F:6D:6F:7B:9A:D8:E3:DE:42:6B:F7:10:2E:5B:E9:52:4C:C9:88
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/wX9tb3ua2OPeQmv3EC5b6VJMyYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.208.0/22
185.37.220.0/22
IPv6:
2a00:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
98:b0:a1:a6:ba:91:e7:1c:92:e3:6e:4e:89:43:02:2b:3e:4d:
20:50:57:6a:ab:ab:24:af:c8:b1:be:a5:ab:3a:ff:05:d8:f2:
11:d8:d8:44:e0:a6:29:f5:2d:32:59:ba:10:28:b1:6d:7d:5b:
16:51:b9:9b:96:a3:30:ae:6f:ce:d6:4f:c3:75:1f:b7:5e:6b:
3f:d5:77:40:a4:13:bf:e4:a9:3c:bd:f2:b6:8b:98:41:78:fc:
e8:75:8c:46:94:2c:97:74:86:d2:c6:f8:44:0d:88:0f:b3:6d:
87:74:e2:ba:22:8d:85:11:4c:73:67:d1:db:73:b5:5d:be:6c:
3b:ac:de:55:02:0e:a1:27:15:72:a4:11:3d:dd:ba:eb:9b:52:
ae:0d:b1:a8:93:ac:52:d4:b5:02:7e:ae:7b:39:db:15:9d:08:
65:f0:c5:d9:18:a9:c8:6b:6b:12:f7:3d:0c:e4:0d:8f:fb:d7:
9a:d6:5a:0f:87:5e:99:e9:29:35:f5:5a:37:11:0b:4b:74:5d:
12:de:06:a6:cd:54:8a:5c:aa:d0:fd:4c:09:cf:9c:ca:e4:93:
c5:8b:d4:d8:9d:97:7c:90:5c:3c:a3:a2:ba:c3:0a:ec:21:21:
de:b3:39:ee:bf:d7:11:66:60:6e:c1:2d:06:a4:68:d9:2c:f3:
62:c4:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:36 2023 by rpki-client on console-fra.rpki-client.org