Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/OoZS8HWNnaF2raUdRQqgfhtl2gY.roa
File: OoZS8HWNnaF2raUdRQqgfhtl2gY.roa (raw, json)
Hash identifier: hUcY9NM5XW6fkfURE4C73YsWO1JnWS4ASJa85b+25lY=
Subject key identifier: 3A:86:52:F0:75:8D:9D:A1:76:AD:A5:1D:45:0A:A0:7E:1B:65:DA:06
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 06510E6C
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/OoZS8HWNnaF2raUdRQqgfhtl2gY.roa
Signing time: Sat 01 Jan 2022 02:59:06 +0000
ROA not before: Sat 01 Jan 2022 02:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 77.83.236.0/22 maxlen: 22
2a09:9280::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105975404 (0x6510e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Jan 1 02:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a8652f0758d9da176ada51d450aa07e1b65da06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:06:25:2b:b4:ed:cd:47:dd:02:c7:cc:3b:
74:97:3d:25:a7:02:75:3e:d1:58:ea:a1:4f:b9:30:
d6:7b:14:5c:4e:6f:47:c5:d1:bb:48:2d:3a:7d:93:
b6:b1:0f:66:0c:1f:fa:60:44:26:fb:6d:27:d1:c8:
38:ad:2f:2d:01:82:ab:bc:a5:40:af:ed:08:ce:e3:
30:f4:20:15:e4:5f:6d:b5:24:79:64:6b:21:cc:73:
08:a6:4a:16:a7:bf:57:95:53:de:06:e0:d0:d7:61:
3b:8b:a6:81:3e:21:4b:fa:60:0e:23:07:de:10:3f:
4a:86:90:e3:db:9d:26:0d:f2:5f:5f:34:cb:09:62:
fb:a5:7a:fb:bf:46:d7:62:1d:6d:8a:eb:1b:96:95:
ad:75:f4:69:70:7d:94:ff:5b:2f:ea:f9:0b:d5:ad:
44:0c:67:81:63:df:a3:78:c1:f1:17:1a:c1:9d:2e:
ed:1f:4f:7b:17:99:7b:3d:27:67:d0:29:c1:a7:c0:
3b:a3:27:26:6d:06:f1:1f:dd:42:de:7e:ee:24:d7:
ab:32:ba:e0:1d:6c:a8:15:05:0c:d4:45:dd:78:56:
0f:ac:e3:b5:46:cc:e5:d7:ad:ef:c9:13:88:b0:7c:
7d:09:b1:9a:56:9a:35:ee:25:b1:a0:0d:62:1a:da:
30:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:52:F0:75:8D:9D:A1:76:AD:A5:1D:45:0A:A0:7E:1B:65:DA:06
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/OoZS8HWNnaF2raUdRQqgfhtl2gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.236.0/22
IPv6:
2a09:9280::/29
Signature Algorithm: sha256WithRSAEncryption
70:6e:4e:07:13:e4:07:06:58:d9:ca:7c:06:a7:b3:ae:ff:d6:
e5:0d:b2:d1:7c:e5:4d:62:27:7c:ba:63:ca:0e:cc:cf:87:7d:
8c:02:ee:77:51:08:96:b6:2a:50:85:be:1f:a4:1d:11:98:23:
0f:f7:39:9d:79:9c:50:ec:06:75:1d:0d:5a:14:54:6e:6a:d7:
e3:28:9c:4a:1b:a2:5e:a8:ea:57:54:33:ce:71:dc:b3:2d:e2:
a6:1a:da:80:92:e6:cb:3b:4f:71:ef:f4:ce:55:47:e3:6d:e3:
61:10:af:f4:70:2e:97:9b:e7:a2:a4:15:87:9d:3d:33:e1:07:
7f:aa:82:30:d0:6b:02:f5:af:20:c2:82:7a:67:1f:b2:14:0f:
f3:bb:0b:06:6a:18:a0:d7:55:1d:1e:79:a6:39:7d:f0:b7:c0:
78:96:62:db:c3:45:6b:f4:85:14:2e:db:3b:2c:88:08:5a:ce:
be:c8:a9:b8:bc:65:c5:52:7b:b4:33:04:c9:37:be:77:6e:3f:
63:b4:99:ad:d3:38:92:b0:4b:90:99:a2:52:78:b5:c3:51:30:
a9:97:2c:98:3f:fc:2c:a6:53:7f:c7:c7:35:e2:09:7b:0f:c6:
d7:3a:84:f9:38:ec:ae:f1:68:0b:a6:45:9d:c5:b8:0f:43:85:
26:9e:81:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:12 2024 by rpki-client on console-ams.rpki-client.org