Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/i428c4RcZTuEU2DH0TVr0sb3is8.roa
File: i428c4RcZTuEU2DH0TVr0sb3is8.roa (raw, json)
Hash identifier: XvXV5vs1D1hjkGM2CfKaKwOSOBeBGw4yMkweFd0qPac=
Subject key identifier: 8B:8D:BC:73:84:5C:65:3B:84:53:60:C7:D1:35:6B:D2:C6:F7:8A:CF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 04B95A7D
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/i428c4RcZTuEU2DH0TVr0sb3is8.roa
Signing time: Sat 01 Jan 2022 15:55:53 +0000
ROA not before: Sat 01 Jan 2022 15:55:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34002
IP address blocks: 209.222.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79256189 (0x4b95a7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jan 1 15:55:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b8dbc73845c653b845360c7d1356bd2c6f78acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:fa:e0:05:31:04:79:10:74:3d:96:04:e2:
19:ac:3f:bd:8d:fd:83:4a:6e:28:24:b9:db:fa:8f:
95:c5:3b:8c:40:2c:ed:0d:33:a3:8e:99:9b:2c:84:
a1:66:27:5e:01:e0:bc:ea:cb:6d:b0:a7:01:8b:ea:
d8:c2:c3:48:87:39:36:64:22:18:69:1b:7b:41:b3:
e4:5e:1d:21:f8:e8:df:66:43:21:e1:a4:a2:42:41:
8b:4f:8a:e6:2c:3b:de:30:45:f0:64:1a:9c:e5:2e:
55:d9:ea:02:9c:0b:e6:cf:7d:e0:40:d4:6e:ab:d5:
52:ed:3f:15:9a:58:53:8e:b0:fe:5e:69:c4:28:8b:
d3:7d:77:ca:30:ec:82:b0:4d:10:be:8c:1a:91:89:
f4:a4:65:50:ee:98:cc:42:b0:ff:a1:65:4f:5a:02:
2b:bb:80:9f:0b:32:7b:ea:0b:6f:32:48:31:ca:94:
ad:5d:89:0e:df:e2:d0:f7:4b:86:55:25:86:1a:43:
c9:a0:e6:10:cd:d0:52:0b:ee:6d:12:78:13:e4:96:
c1:29:83:52:77:68:30:a4:c9:59:74:d8:4f:c4:ec:
6e:36:e3:fa:1d:98:e1:85:bd:30:d2:c3:96:e4:26:
42:34:27:f0:bd:12:e0:d5:81:b3:96:bd:f3:40:f3:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8D:BC:73:84:5C:65:3B:84:53:60:C7:D1:35:6B:D2:C6:F7:8A:CF
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/i428c4RcZTuEU2DH0TVr0sb3is8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.222.77.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c0:48:df:fb:09:26:f3:b3:2f:47:47:b8:d9:8b:7d:ad:d9:
a1:49:eb:43:61:66:58:37:5d:a5:0b:62:4d:fb:d2:42:d0:ac:
06:0d:27:52:01:80:1c:04:e9:59:ef:4a:85:9b:9e:11:f2:f0:
b2:ab:ba:b1:fc:a8:5f:90:12:ad:90:eb:0d:9e:d5:3b:53:b8:
78:b2:9b:df:f1:c7:a0:a6:05:18:fc:f2:86:ed:24:f3:05:4c:
5d:79:0b:79:8a:fc:71:db:52:d5:23:7c:6e:b6:a4:a5:fa:18:
ce:82:90:e6:3b:e8:54:c8:ee:fe:6b:01:b3:95:f6:7e:7d:e7:
b4:70:b6:59:30:be:41:80:3a:9f:fe:5b:44:c1:60:3b:28:2b:
a9:bd:40:ae:cd:7e:e7:15:34:c2:ba:ec:11:4e:af:e7:28:6e:
b0:88:74:fd:67:a1:4c:24:c4:5e:57:39:89:45:0b:22:79:11:
f7:cc:1c:a4:3c:17:c7:16:64:78:58:bd:4a:87:79:4d:75:32:
15:9a:e7:6d:14:2c:e7:b3:b8:17:cb:a3:8d:8b:35:5b:56:9c:
21:3d:dd:31:9a:5d:59:7f:d2:0c:d0:c3:74:a1:2d:c3:1a:db:
6d:37:24:00:f7:b8:3e:4f:7f:fa:55:20:a0:42:36:73:14:d1:
02:09:00:b7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBLlafTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDkxNDU2ZWRhNTlmYjBmZDJkMTczZjk1NDEyYmUzNWY2Y2ZiZmFmMB4XDTIyMDEw
MTE1NTU1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGI4ZGJjNzM4NDVj
NjUzYjg0NTM2MGM3ZDEzNTZiZDJjNmY3OGFjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtQ+uAFMQR5EHQ9lgTiGaw/vY39g0puKCS52/qPlcU7jEAs
7Q0zo46ZmyyEoWYnXgHgvOrLbbCnAYvq2MLDSIc5NmQiGGkbe0Gz5F4dIfjo32ZD
IeGkokJBi0+K5iw73jBF8GQanOUuVdnqApwL5s994EDUbqvVUu0/FZpYU46w/l5p
xCiL0313yjDsgrBNEL6MGpGJ9KRlUO6YzEKw/6FlT1oCK7uAnwsye+oLbzJIMcqU
rV2JDt/i0PdLhlUlhhpDyaDmEM3QUgvubRJ4E+SWwSmDUndoMKTJWXTYT8Tsbjbj
+h2Y4YW9MNLDluQmQjQn8L0S4NWBs5a980DzGpMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSLjbxzhFxlO4RTYMfRNWvSxveKzzAfBgNVHSMEGDAWgBTEkUVu2ln7D9LR
c/lUEr419s+/rzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hKRkZidHBaLXdfUzBYUDVWQkstTmZiUHY2OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTYvNGY0MDhkLWJkYTUtNGE5NC1iODNhLWE3MzBjY2ZkYWRjNS8x
L2k0MjhjNFJjWlR1RVUyREgwVFZyMHNiM2lzOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYv
NGY0MDhkLWJkYTUtNGE5NC1iODNhLWE3MzBjY2ZkYWRjNS8xL3hKRkZidHBaLXdf
UzBYUDVWQkstTmZiUHY2OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHeTTANBgkqhkiG9w0BAQsFAAOC
AQEAQcBI3/sJJvOzL0dHuNmLfa3ZoUnrQ2FmWDddpQtiTfvSQtCsBg0nUgGAHATp
We9KhZueEfLwsqu6sfyoX5ASrZDrDZ7VO1O4eLKb3/HHoKYFGPzyhu0k8wVMXXkL
eYr8cdtS1SN8brakpfoYzoKQ5jvoVMju/msBs5X2fn3ntHC2WTC+QYA6n/5bRMFg
Oygrqb1Ars1+5xU0wrrsEU6v5yhusIh0/WehTCTEXlc5iUULInkR98wcpDwXxxZk
eFi9Sod5TXUyFZrnbRQs57O4F8ujjYs1W1acIT3dMZpdWX/SDNDDdKEtwxrbbTck
APe4Pk9/+lUgoEI2cxTRAgkAtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org