Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/6TDmVZ4mgiwvoHwW0CPtqtB4N9c.roa
File: 6TDmVZ4mgiwvoHwW0CPtqtB4N9c.roa (raw, json)
Hash identifier: rvAT1uVSPqp9FDXJoc4vK1lD1ziKZJWffCBTksAXvw8=
Subject key identifier: E9:30:E6:55:9E:26:82:2C:2F:A0:7C:16:D0:23:ED:AA:D0:78:37:D7
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01881133D50D6BA16EDCDE5C82705C87A6FB
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/6TDmVZ4mgiwvoHwW0CPtqtB4N9c.roa
Signing time: Fri 12 May 2023 18:23:09 +0000
ROA not before: Fri 12 May 2023 18:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 77.105.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:33:d5:0d:6b:a1:6e:dc:de:5c:82:70:5c:87:a6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: May 12 18:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e930e6559e26822c2fa07c16d023edaad07837d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:8a:13:9f:42:5d:93:4f:3f:4e:04:65:1b:
d9:8f:22:72:a9:f4:e9:b3:e4:cb:1b:b8:6f:e5:74:
d0:e3:ec:18:e9:cb:ad:6f:39:0b:b1:7a:b2:43:50:
e5:92:59:01:26:6c:f9:d5:f6:56:58:a2:54:01:8e:
2d:74:4e:bb:70:9e:9e:de:b9:18:65:80:36:69:74:
b4:0c:fc:50:8e:d4:34:fa:5d:e5:2c:40:49:d9:ec:
a0:5f:50:12:c8:37:f0:da:09:2e:fe:a5:4c:a2:f4:
1e:3d:27:55:47:ce:f9:ef:67:4d:d5:47:b2:b0:ae:
0f:0f:df:a9:36:ff:89:83:5a:3b:c7:db:69:26:d5:
52:fe:7e:f3:ab:d2:ed:e7:be:89:e6:b7:6a:e4:83:
c9:e9:b2:56:0e:dd:bb:0d:fb:73:ca:62:6c:f7:cd:
63:70:15:41:92:09:46:ef:c6:96:50:f8:29:fc:8e:
fd:11:32:d8:fb:d3:99:16:16:73:8b:10:2e:cd:f7:
a3:f3:9b:a4:40:cd:8d:39:63:52:b8:17:2a:55:49:
ef:da:af:26:d4:bd:86:b8:fb:4b:8f:32:62:e7:9f:
68:aa:4d:55:c7:b9:19:20:b6:2b:0b:e3:0d:29:ef:
23:05:8a:a9:90:4a:02:74:ee:4c:f4:3d:33:70:3e:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:30:E6:55:9E:26:82:2C:2F:A0:7C:16:D0:23:ED:AA:D0:78:37:D7
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/6TDmVZ4mgiwvoHwW0CPtqtB4N9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.166.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d4:19:3f:1f:55:6f:cb:af:00:0a:b3:90:79:1f:e5:a7:fa:
ba:8b:f9:76:37:28:b0:4b:2c:61:7a:cd:eb:08:2c:1e:81:66:
c2:8b:53:fc:95:e7:21:5a:f0:d7:aa:ea:62:68:ef:d4:27:6c:
05:b3:b2:4d:f2:7a:68:fe:5f:e3:a8:e7:b9:20:3d:6f:9e:65:
2b:86:41:39:c4:8e:71:f4:02:e2:f9:13:83:9d:2c:08:c4:37:
d9:c2:5f:be:56:e1:54:e5:94:40:91:4e:2d:ef:45:9c:39:2e:
92:32:80:50:25:c5:1d:6a:0f:b2:c4:dc:b8:da:c9:ca:d5:e3:
18:39:55:81:9c:24:ef:ff:c8:cf:72:0c:5f:77:df:d6:53:eb:
40:d0:9c:be:fa:ba:50:28:ea:2f:12:d5:06:b3:73:1e:53:56:
8b:b7:e9:5d:2d:b8:a4:b1:14:35:1d:14:97:ce:a4:f7:ac:52:
53:bf:d9:3d:b2:c4:a0:74:fe:21:28:45:63:0d:9a:85:ca:29:
3f:35:76:7d:46:78:f0:59:3d:53:fa:a6:09:23:6e:1b:a9:cb:
f1:57:30:f7:00:a1:cc:b5:2e:58:d6:24:81:9a:b9:aa:50:d9:
9c:e4:0d:81:c5:48:1e:ce:84:ec:db:e6:e1:48:2a:a8:ee:09:
f8:92:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:50:13 2025 by rpki-client