Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b1QTbOsnq4WmECqAcHrXP7pn9I8.roa
File: b1QTbOsnq4WmECqAcHrXP7pn9I8.roa (raw, json)
Hash identifier: t9us3VjpswnzVeaCQQRYh5Nsqj7yA75tKw4XZtMx22U=
Subject key identifier: 6F:54:13:6C:EB:27:AB:85:A6:10:2A:80:70:7A:D7:3F:BA:67:F4:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0184C0D6EBD78BD4D4B367BC4BE753660008
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b1QTbOsnq4WmECqAcHrXP7pn9I8.roa
Signing time: Tue 29 Nov 2022 00:43:41 +0000
ROA not before: Tue 29 Nov 2022 00:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35077
IP address blocks: 79.110.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c0:d6:eb:d7:8b:d4:d4:b3:67:bc:4b:e7:53:66:00:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 00:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f54136ceb27ab85a6102a80707ad73fba67f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:f9:23:e5:5f:58:a7:24:0d:ca:f2:dd:d2:
65:f2:85:c1:81:3c:12:a6:59:da:d7:f8:8d:94:99:
d1:f5:b6:86:98:c6:d1:a3:8e:96:1f:2e:04:67:fa:
21:e5:7b:25:a9:16:68:03:c8:7b:6e:31:7a:33:38:
19:33:da:1d:c9:ac:a3:12:92:29:62:fe:39:8e:1b:
78:1d:9f:59:84:6a:25:50:a4:3f:07:a8:9b:93:54:
ed:b1:f6:8f:3b:cf:21:10:e5:30:45:85:56:0b:a8:
6c:38:26:91:a8:92:9e:72:75:36:77:af:4d:8c:4f:
a6:b6:ac:17:ec:39:dc:44:3d:a9:09:49:ac:5d:07:
97:ac:bc:77:9d:86:e9:56:75:e6:fc:80:5d:c8:f9:
58:f2:65:60:a0:3e:48:80:90:98:85:24:9c:cb:37:
6b:ec:da:da:cb:22:ab:05:8e:ce:ae:f8:e7:4d:49:
06:52:88:44:aa:36:55:ce:18:d7:fc:ab:48:d1:51:
e2:b9:6c:b5:a2:1d:2b:f6:d1:d9:15:fc:72:8b:6c:
38:fb:df:24:99:7e:d9:2c:58:2d:47:58:f5:77:07:
44:1f:57:87:9a:20:ce:fd:76:1e:a5:77:05:eb:db:
fe:d4:18:53:f0:c9:0a:b4:d3:29:05:9f:46:02:9f:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:54:13:6C:EB:27:AB:85:A6:10:2A:80:70:7A:D7:3F:BA:67:F4:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b1QTbOsnq4WmECqAcHrXP7pn9I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
Signature Algorithm: sha256WithRSAEncryption
15:55:79:93:62:3b:73:46:e6:e9:fa:48:64:03:5b:16:a5:fb:
5d:32:74:b3:bf:e3:0d:bf:c7:5b:fc:86:24:c4:b7:25:ec:dd:
00:4d:0e:2d:5c:d8:3a:35:0b:ce:e1:1d:cc:06:f0:72:a9:96:
16:30:8e:4e:ff:c1:d6:52:d2:b2:39:31:13:fd:33:3a:18:a5:
b3:14:6e:9c:64:75:cd:6e:20:db:04:9e:97:00:30:b5:3e:dc:
32:32:64:0a:d5:6d:68:55:f1:c0:fd:cd:7c:30:f1:85:e6:79:
da:f6:b4:3a:ee:86:45:40:f3:0b:59:e6:b7:34:7e:bd:97:e9:
59:b5:5e:a9:36:6b:25:05:01:98:9d:02:27:40:7a:ae:82:da:
df:8c:f2:72:0e:bb:63:a7:89:23:11:82:0b:8a:d6:d2:08:9c:
fb:23:0e:6f:fb:ea:5c:c3:99:1b:7f:4c:a5:f6:13:c5:9a:7d:
03:4a:c0:77:83:ff:f1:bc:23:c5:cd:c9:42:af:a6:57:a9:7b:
48:f8:ca:bb:54:23:64:9e:70:1a:f4:4f:e8:0a:14:a0:6b:c4:
29:f4:63:83:fd:1a:3a:46:ab:00:26:e0:6d:49:7a:ec:cd:20:
73:fe:bb:d7:5b:a4:15:88:68:d0:f2:81:3d:61:bf:00:e4:9f:
11:ad:f4:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYTA1uvXi9TUs2e8S+dTZgAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMTI5MDA0MzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjU0MTM2Y2ViMjdhYjg1YTYxMDJhODA3MDdhZDczZmJhNjdmNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5/5I+VfWKckDcry3dJl8oXBgTwS
plna1/iNlJnR9baGmMbRo46WHy4EZ/oh5XslqRZoA8h7bjF6MzgZM9odyayjEpIp
Yv45jht4HZ9ZhGolUKQ/B6ibk1TtsfaPO88hEOUwRYVWC6hsOCaRqJKecnU2d69N
jE+mtqwX7DncRD2pCUmsXQeXrLx3nYbpVnXm/IBdyPlY8mVgoD5IgJCYhSScyzdr
7NrayyKrBY7OrvjnTUkGUohEqjZVzhjX/KtI0VHiuWy1oh0r9tHZFfxyi2w4+98k
mX7ZLFgtR1j1dwdEH1eHmiDO/XYepXcF69v+1BhT8MkKtNMpBZ9GAp8ymQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9UE2zrJ6uFphAqgHB61z+6Z/SPMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYjFRVGJPc25xNFdtRUNxQWNIclhQN3BuOUk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT24yMA0G
CSqGSIb3DQEBCwUAA4IBAQAVVXmTYjtzRubp+khkA1sWpftdMnSzv+MNv8db/IYk
xLcl7N0ATQ4tXNg6NQvO4R3MBvByqZYWMI5O/8HWUtKyOTET/TM6GKWzFG6cZHXN
biDbBJ6XADC1PtwyMmQK1W1oVfHA/c18MPGF5nna9rQ67oZFQPMLWea3NH69l+lZ
tV6pNmslBQGYnQInQHqugtrfjPJyDrtjp4kjEYILitbSCJz7Iw5v++pcw5kbf0yl
9hPFmn0DSsB3g//xvCPFzclCr6ZXqXtI+Mq7VCNknnAa9E/oChSga8Qp9GOD/Ro6
RqsAJuBtSXrszSBz/rvXW6QViGjQ8oE9Yb8A5J8RrfRA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org