Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ykV3gBXe_KWRTjNafjOxQMytq0Q.roa
File: ykV3gBXe_KWRTjNafjOxQMytq0Q.roa (raw, json)
Hash identifier: 7tWIFOpckRrnAbMThwTKbOwXPI7Bcq1HdWtpf2lrNwA=
Subject key identifier: CA:45:77:80:15:DE:FC:A5:91:4E:33:5A:7E:33:B1:40:CC:AD:AB:44
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018438BBEBA8A18AC233E7F31E90D79F225E
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ykV3gBXe_KWRTjNafjOxQMytq0Q.roa
Signing time: Wed 02 Nov 2022 14:25:50 +0000
ROA not before: Wed 02 Nov 2022 14:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8795
IP address blocks: 77.85.175.0/24 maxlen: 24
212.5.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:bb:eb:a8:a1:8a:c2:33:e7:f3:1e:90:d7:9f:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Nov 2 14:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca45778015defca5914e335a7e33b140ccadab44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:67:29:76:81:af:f5:77:4a:0b:71:46:05:
63:e3:0f:76:b2:e9:fe:c1:aa:4a:e5:ab:91:30:0a:
b2:74:f2:c1:61:a4:28:60:40:2d:ff:af:22:cd:d4:
7f:fe:c4:dc:fa:0a:8e:23:79:ed:1e:ae:0e:4b:c0:
11:c0:6d:18:ce:b9:40:ac:f1:14:cb:17:54:6a:f1:
4c:a5:1f:01:5f:9f:f7:42:ec:46:2a:86:83:db:30:
be:f4:29:f6:e8:69:62:e5:c5:38:37:0a:94:7f:4d:
1a:63:1f:0d:20:93:df:15:c0:7a:e0:4c:e1:71:dc:
40:c2:c4:28:88:ca:d4:70:89:1e:47:63:85:bd:3a:
21:44:5b:2c:3c:f7:62:07:3d:48:27:5c:3d:cf:ac:
c5:2f:53:d2:74:bf:be:e3:a6:52:c8:9c:b3:cd:1c:
fe:3d:ba:77:2d:6b:3a:4f:72:2f:38:b0:92:d5:f0:
03:a6:32:aa:c6:98:f3:20:34:56:81:b5:1b:14:25:
79:73:d9:11:a9:0e:77:c2:62:0b:22:ec:30:5a:82:
7f:b9:7b:01:cf:6a:20:61:59:31:32:5d:88:65:95:
a9:d3:df:3a:ac:c5:02:74:cd:76:2b:e8:8c:00:6d:
1e:b6:d6:33:b9:af:e8:04:fa:56:7a:3d:a4:d4:2b:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:77:80:15:DE:FC:A5:91:4E:33:5A:7E:33:B1:40:CC:AD:AB:44
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ykV3gBXe_KWRTjNafjOxQMytq0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.85.175.0/24
212.5.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:59:10:0f:42:d5:9e:65:61:10:1d:23:24:50:13:42:ea:a9:
d0:b2:bc:48:63:6b:78:70:68:d8:61:ca:67:6b:85:e0:63:0b:
2a:b3:8b:a0:6b:fc:24:3e:07:47:ea:93:ff:02:4e:77:a6:e5:
82:bb:37:58:bd:bd:59:2f:ca:36:62:45:6f:87:57:80:f6:35:
e1:c9:a1:b2:0c:63:39:28:d2:7b:55:6d:63:94:63:c8:90:83:
f2:a1:98:5e:58:6a:6b:8f:1a:7d:15:32:00:cb:ca:ea:62:6f:
1f:7c:b5:64:51:06:37:a6:b1:c0:c5:22:55:b1:8c:92:d3:69:
ad:d1:2c:b8:71:64:de:43:2e:59:d7:55:9f:cb:0e:09:62:d4:
cf:03:74:49:9d:d4:86:d7:f1:82:de:34:38:67:5d:d6:a0:71:
bd:17:92:25:30:3c:0d:df:69:9d:20:14:80:49:3a:8b:0a:01:
1a:61:76:08:a0:e1:94:dc:9f:4e:2e:08:03:e8:a2:3f:b3:0b:
d6:d5:39:f4:00:fa:b8:73:1f:98:34:3b:e2:74:7d:70:af:95:
b9:d4:db:af:91:d0:86:35:1b:4f:eb:80:99:ad:69:b0:ea:73:
99:e4:ba:fa:b3:01:3d:94:60:32:bb:8b:a3:ec:cd:cc:cc:cd:
42:ec:23:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQ4u+uooYrCM+fzHpDXnyJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjIxMTAyMTQyNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ1Nzc4MDE1ZGVmY2E1OTE0ZTMzNWE3ZTMzYjE0MGNjYWRhYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNpnKXaBr/V3SgtxRgVj4w92sun+
wapK5auRMAqydPLBYaQoYEAt/68izdR//sTc+gqOI3ntHq4OS8ARwG0YzrlArPEU
yxdUavFMpR8BX5/3QuxGKoaD2zC+9Cn26Gli5cU4NwqUf00aYx8NIJPfFcB64Ezh
cdxAwsQoiMrUcIkeR2OFvTohRFssPPdiBz1IJ1w9z6zFL1PSdL++46ZSyJyzzRz+
Pbp3LWs6T3IvOLCS1fADpjKqxpjzIDRWgbUbFCV5c9kRqQ53wmILIuwwWoJ/uXsB
z2ogYVkxMl2IZZWp0986rMUCdM12K+iMAG0ettYzua/oBPpWej2k1Cv/IQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMpFd4AV3vylkU4zWn4zsUDMratEMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEveWtWM2dCWGVfS1dSVGpOYWZqT3hRTXl0cTBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVWvAwQA
1AWFMA0GCSqGSIb3DQEBCwUAA4IBAQCOWRAPQtWeZWEQHSMkUBNC6qnQsrxIY2t4
cGjYYcpna4XgYwsqs4uga/wkPgdH6pP/Ak53puWCuzdYvb1ZL8o2YkVvh1eA9jXh
yaGyDGM5KNJ7VW1jlGPIkIPyoZheWGprjxp9FTIAy8rqYm8ffLVkUQY3prHAxSJV
sYyS02mt0Sy4cWTeQy5Z11Wfyw4JYtTPA3RJndSG1/GC3jQ4Z13WoHG9F5IlMDwN
32mdIBSASTqLCgEaYXYIoOGU3J9OLggD6KI/swvW1Tn0APq4cx+YNDvidH1wr5W5
1NuvkdCGNRtP64CZrWmw6nOZ5Lr6swE9lGAyu4uj7M3MzM1C7CPa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org