Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/zI7itVrrtjLz0hQ-46FFermCU34.roa
File: zI7itVrrtjLz0hQ-46FFermCU34.roa (raw, json)
Hash identifier: nsYUMyv3KDpNEgWauzzZgYYhnW9nBBjIoURxWD4521Q=
Subject key identifier: CC:8E:E2:B5:5A:EB:B6:32:F3:D2:14:3E:E3:A1:45:7A:B9:82:53:7E
Certificate issuer: /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial: F1ED
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/zI7itVrrtjLz0hQ-46FFermCU34.roa
Signing time: Fri 06 May 2022 13:39:40 +0000
ROA not before: Fri 06 May 2022 13:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210938
IP address blocks: 185.211.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61933 (0xf1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Validity
Not Before: May 6 13:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc8ee2b55aebb632f3d2143ee3a1457ab982537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:aa:b1:cf:7f:d8:2c:8f:9e:7a:41:2b:74:
41:68:9a:c1:c8:0b:80:ee:f8:cf:42:db:f3:07:5c:
0e:35:98:31:4d:1a:05:c7:15:7a:c4:b1:9b:d3:51:
9b:ee:7d:c8:33:02:9c:ee:3b:74:c2:c7:d7:4e:ae:
a5:2c:3b:88:99:f6:48:44:12:c2:58:e5:b7:80:aa:
40:56:bf:4e:1e:b2:8a:2a:bf:b6:89:2b:89:5e:81:
1d:31:02:81:d6:3e:42:82:d1:25:6d:3b:92:3f:a0:
ab:b8:a3:b5:d7:21:b2:e5:41:ba:8d:96:98:48:2a:
40:62:48:6e:07:b0:5c:3e:cb:5e:1f:5e:09:8d:d0:
1b:6d:38:4a:59:60:13:72:78:4a:9b:67:3b:50:3b:
92:70:c3:40:dd:37:52:25:49:62:9c:34:dc:c8:12:
08:9a:26:23:a5:34:7b:ab:8e:f9:6b:79:cc:7e:60:
b9:b6:83:36:71:c9:1d:8c:82:27:72:80:f5:56:74:
02:0a:fe:4a:38:01:ee:6a:90:b0:df:6a:12:6d:90:
39:94:28:a5:ea:b3:13:aa:d2:d9:f0:54:55:db:07:
a3:d6:07:a9:8e:71:34:0c:df:20:71:0c:f8:13:00:
ea:b2:d8:68:26:78:f3:6d:4e:35:7f:ad:89:0b:18:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8E:E2:B5:5A:EB:B6:32:F3:D2:14:3E:E3:A1:45:7A:B9:82:53:7E
X509v3 Authority Key Identifier:
keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/zI7itVrrtjLz0hQ-46FFermCU34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ad:c4:cf:d7:e2:ba:60:67:67:60:d7:34:b8:1f:5b:fa:14:
af:65:90:c9:16:4f:ea:5b:1e:e8:8d:0b:54:ba:c6:9b:85:c2:
f4:b7:6a:f8:2b:14:8f:78:6f:78:ef:3f:75:cb:c2:32:19:05:
02:fd:e9:b9:7c:71:2b:16:d0:13:96:b3:c4:5e:21:04:f5:9d:
7a:59:9e:b5:0a:a7:d9:39:4b:5d:d5:16:85:f5:3a:c6:98:5d:
ff:d6:da:06:bd:0a:8b:0f:2c:8a:77:9c:f0:5f:88:c6:ca:6d:
ef:90:6a:14:f5:25:8c:d5:5f:3a:30:e3:6e:9c:b4:af:71:5c:
4d:ed:ad:ef:22:4f:2c:49:88:3c:03:77:24:3a:c6:a5:bb:04:
a1:c9:87:5c:ee:51:85:fd:ea:86:c4:e0:bf:a2:a7:7b:29:e6:
f7:f1:24:dd:3d:85:ba:85:ff:f4:ff:20:0c:bd:12:2b:23:f4:
f2:18:35:70:bc:e2:67:f8:db:3c:7b:57:ee:a0:b5:3c:8f:40:
d6:76:82:a5:23:94:56:b5:f0:1c:df:3c:19:58:92:26:13:e3:
8b:f3:91:08:59:55:9e:39:05:26:4b:d5:50:9b:a0:60:7d:01:
e9:83:f6:73:a2:84:c5:ff:cf:04:3c:ef:42:bf:e7:76:a1:42:
d3:8a:0b:57
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAPHtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
MzliOWE4OTQ2ZDI2YmUyZDhmZmZlNmMxZTNjMjJjYjkzZTA0ODYwHhcNMjIwNTA2
MTMzOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjYzhlZTJiNTVhZWJi
NjMyZjNkMjE0M2VlM2ExNDU3YWI5ODI1MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr2Wqsc9/2CyPnnpBK3RBaJrByAuA7vjPQtvzB1wONZgxTRoF
xxV6xLGb01Gb7n3IMwKc7jt0wsfXTq6lLDuImfZIRBLCWOW3gKpAVr9OHrKKKr+2
iSuJXoEdMQKB1j5CgtElbTuSP6CruKO11yGy5UG6jZaYSCpAYkhuB7BcPsteH14J
jdAbbThKWWATcnhKm2c7UDuScMNA3TdSJUlinDTcyBIImiYjpTR7q475a3nMfmC5
toM2cckdjIIncoD1VnQCCv5KOAHuapCw32oSbZA5lCil6rMTqtLZ8FRV2wej1gep
jnE0DN8gcQz4EwDqsthoJnjzbU41f62JCxhSNQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMyO4rVa67Yy89IUPuOhRXq5glN+MB8GA1UdIwQYMBaAFBM5uaiUbSa+LY//
5sHjwiy5PgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82Yy84YzdjYzktYzA5NS00MmY1LTliYjYtOTQ2YzBmN2U4Zjc4LzEv
ekk3aXRWcnJ0akx6MGhRLTQ2RkZlcm1DVTM0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84
YzdjYzktYzA5NS00MmY1LTliYjYtOTQ2YzBmN2U4Zjc4LzEvRXptNXFKUnRKcjR0
al9fbXdlUENMTGstQklZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudNNMA0GCSqGSIb3DQEBCwUAA4IB
AQBbrcTP1+K6YGdnYNc0uB9b+hSvZZDJFk/qWx7ojQtUusabhcL0t2r4KxSPeG94
7z91y8IyGQUC/em5fHErFtATlrPEXiEE9Z16WZ61CqfZOUtd1RaF9TrGmF3/1toG
vQqLDyyKd5zwX4jGym3vkGoU9SWM1V86MONunLSvcVxN7a3vIk8sSYg8A3ckOsal
uwShyYdc7lGF/eqGxOC/oqd7Keb38STdPYW6hf/0/yAMvRIrI/TyGDVwvOJn+Ns8
e1fuoLU8j0DWdoKlI5RWtfAc3zwZWJImE+OL85EIWVWeOQUmS9VQm6BgfQHpg/Zz
ooTF/88EPO9Cv+d2oULTigtX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:32 2024 by rpki-client on console-ams.rpki-client.org