Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/w9q9P35HBtSD1EmZDASfBKU52v0.roa
File: w9q9P35HBtSD1EmZDASfBKU52v0.roa (raw, json)
Hash identifier: ml3W5uLqsl8Lp8EoY0uIHFazCSK7r1biRHESYvh/q/M=
Subject key identifier: C3:DA:BD:3F:7E:47:06:D4:83:D4:49:99:0C:04:9F:04:A5:39:DA:FD
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 305EDFFC
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/w9q9P35HBtSD1EmZDASfBKU52v0.roa
Signing time: Sat 01 Jan 2022 08:04:29 +0000
ROA not before: Sat 01 Jan 2022 08:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43905
IP address blocks: 80.77.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 811524092 (0x305edffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 1 08:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3dabd3f7e4706d483d449990c049f04a539dafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:50:74:dd:a8:0b:84:ce:cf:35:7c:e2:24:
de:14:10:9e:ad:0d:d2:fe:4b:7b:95:bd:24:73:3e:
9b:0e:dc:7f:5d:06:34:0b:35:85:5a:33:84:6d:28:
84:ef:68:de:11:5c:cb:ea:66:73:8b:f2:42:08:55:
fe:77:0e:be:15:c0:1f:75:bb:1c:52:2f:af:42:f2:
3e:61:c5:a9:56:c3:24:88:d9:b9:6d:dd:6a:47:97:
49:c9:bf:ee:7f:d6:f2:b1:0d:5f:12:15:7c:a5:53:
ba:8a:b4:93:f8:1d:34:8e:f1:d5:cd:99:7d:eb:32:
3b:d6:fd:0f:b6:d8:6b:cb:12:68:94:bb:64:50:4c:
01:db:77:27:e4:ea:38:af:ef:ad:ca:45:71:f3:37:
31:6a:90:0f:cb:64:74:e1:4f:06:fb:33:6c:72:8b:
16:b7:51:a7:70:dc:3d:18:f0:5e:00:07:0e:27:e1:
90:38:2b:1d:f8:2c:68:d7:1f:0d:54:f0:23:1d:03:
74:f6:f2:f5:ce:2f:d3:1a:67:fe:aa:f3:5a:0d:83:
9d:ca:22:30:e6:6f:da:a1:1b:ca:fc:4e:85:26:88:
e7:a5:c1:73:f6:ea:dd:2e:97:3f:13:a1:86:bc:f1:
f2:4f:62:98:f7:c8:d1:4d:55:dd:2f:cf:a0:d2:0f:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:BD:3F:7E:47:06:D4:83:D4:49:99:0C:04:9F:04:A5:39:DA:FD
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/w9q9P35HBtSD1EmZDASfBKU52v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.184.0/24
Signature Algorithm: sha256WithRSAEncryption
46:12:f0:05:20:6b:d5:23:dd:c4:bc:51:7d:f1:09:b0:0e:a3:
3d:5d:1a:6a:cc:89:93:ad:d6:5b:36:b4:2a:9e:e8:88:7a:90:
0d:d8:bf:0c:78:da:ad:eb:22:78:61:4b:46:e5:bf:ac:6a:1c:
c7:9e:46:f5:e7:b4:c3:d7:38:da:c8:b6:ff:b8:4e:97:29:20:
86:a5:3d:c7:38:43:59:77:c3:86:63:7f:a6:f6:8b:26:97:4b:
2c:53:7f:5d:99:88:a0:70:8d:91:a5:1a:54:4a:c4:68:c7:74:
38:2a:c0:a9:7e:02:e2:97:c6:8a:9e:cf:e8:bb:61:de:ce:d1:
7f:82:cf:5b:e8:8b:63:5f:15:01:b7:92:b9:ed:d7:1e:28:2a:
3e:7e:3e:56:c1:fb:4d:25:f4:f6:71:12:0d:0d:59:90:b6:5d:
99:6e:c6:9f:41:3b:0a:2a:6b:54:c7:9b:9d:c1:f0:6c:d8:19:
83:3f:a8:55:bf:5e:83:bd:04:18:df:a4:3b:c5:46:01:20:9b:
e1:7b:e7:21:4d:95:0d:62:a5:83:8d:a9:f2:08:f1:b6:a2:5b:
92:7c:66:5e:72:1d:68:34:75:c5:b7:07:dd:0d:8a:3b:fa:4f:
1f:99:58:38:9a:bb:ee:df:d5:7f:e1:09:d1:67:79:7c:7d:83:
5f:83:e0:88
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMF7f/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzNlODMxNDZhNDM4NjlmNjU3NDUxZTc2ZDBhMzA1ZjE1YTdhZWU5MB4XDTIyMDEw
MTA4MDQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNkYWJkM2Y3ZTQ3
MDZkNDgzZDQ0OTk5MGMwNDlmMDRhNTM5ZGFmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMLvUHTdqAuEzs81fOIk3hQQnq0N0v5Le5W9JHM+mw7cf10G
NAs1hVozhG0ohO9o3hFcy+pmc4vyQghV/ncOvhXAH3W7HFIvr0LyPmHFqVbDJIjZ
uW3dakeXScm/7n/W8rENXxIVfKVTuoq0k/gdNI7x1c2ZfesyO9b9D7bYa8sSaJS7
ZFBMAdt3J+TqOK/vrcpFcfM3MWqQD8tkdOFPBvszbHKLFrdRp3DcPRjwXgAHDifh
kDgrHfgsaNcfDVTwIx0DdPby9c4v0xpn/qrzWg2DncoiMOZv2qEbyvxOhSaI56XB
c/bq3S6XPxOhhrzx8k9imPfI0U1V3S/PoNIPvrsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTD2r0/fkcG1IPUSZkMBJ8EpTna/TAfBgNVHSMEGDAWgBTXPoMUakOGn2V0
UedtCjBfFaeu6TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzF6NkRGR3BEaHA5bGRGSG5iUW93WHhXbnJ1ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzEvMGY2NDcwLWU3ZjQtNDE1MS04YWQ5LWQzYjI3YTAyMjViMC8x
L3c5cTlQMzVIQnRTRDFFbVpEQVNmQktVNTJ2MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEv
MGY2NDcwLWU3ZjQtNDE1MS04YWQ5LWQzYjI3YTAyMjViMC8xLzF6NkRGR3BEaHA5
bGRGSG5iUW93WHhXbnJ1ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBNuDANBgkqhkiG9w0BAQsFAAOC
AQEARhLwBSBr1SPdxLxRffEJsA6jPV0aasyJk63WWza0Kp7oiHqQDdi/DHjaresi
eGFLRuW/rGocx55G9ee0w9c42si2/7hOlykghqU9xzhDWXfDhmN/pvaLJpdLLFN/
XZmIoHCNkaUaVErEaMd0OCrAqX4C4pfGip7P6Lth3s7Rf4LPW+iLY18VAbeSue3X
HigqPn4+VsH7TSX09nESDQ1ZkLZdmW7Gn0E7CiprVMebncHwbNgZgz+oVb9eg70E
GN+kO8VGASCb4XvnIU2VDWKlg42p8gjxtqJbknxmXnIdaDR1xbcH3Q2KO/pPH5lY
OJq77t/Vf+EJ0Wd5fH2DX4PgiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org