Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ALgmH1ajEH_2BZChxCMz_6UfKkE.roa
File: ALgmH1ajEH_2BZChxCMz_6UfKkE.roa (raw, json)
Hash identifier: ShgQ/E5+qPWjwY0lVKGFVodlTSnHXZrTqGk+AZipdiA=
Subject key identifier: 00:B8:26:1F:56:A3:10:7F:F6:05:90:A1:C4:23:33:FF:A5:1F:2A:41
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 41F1C2AE
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ALgmH1ajEH_2BZChxCMz_6UfKkE.roa
Signing time: Sat 01 Jan 2022 16:05:06 +0000
ROA not before: Sat 01 Jan 2022 16:05:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199833
IP address blocks: 81.177.254.0/23 maxlen: 23
81.177.186.0/24 maxlen: 24
2a03:aa00:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106363054 (0x41f1c2ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:05:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00b8261f56a3107ff60590a1c42333ffa51f2a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:70:b8:4f:7d:03:7f:80:8c:91:d2:47:79:
34:1f:da:2a:dc:07:f1:a3:b7:f1:af:03:59:4b:18:
79:25:1d:19:d1:48:fb:4a:fb:66:72:15:4c:84:34:
d3:d2:89:55:a2:6f:c5:a9:19:cc:86:78:46:64:3f:
60:47:52:48:36:44:b1:51:cf:95:3d:3f:f0:10:14:
fa:7f:7d:7f:0d:44:26:26:db:33:be:d0:d4:70:8a:
11:92:59:94:fd:02:db:8e:dc:a1:27:dd:b3:e5:47:
d1:f5:33:f2:ea:d3:a8:fa:15:32:e9:4e:e6:fa:5b:
52:92:d0:1f:fe:77:d1:dc:d4:83:c1:64:fd:ae:c3:
61:56:49:0a:3f:87:41:38:98:b8:37:43:9b:c4:64:
7e:6c:78:a1:57:c5:97:c5:9c:fb:af:b2:05:58:4d:
5a:67:72:6d:44:33:de:37:f9:ee:00:f7:32:e1:5b:
c6:e7:f3:66:59:e0:cf:7d:40:13:7b:c3:1e:9c:1f:
27:1e:9a:f2:ea:03:2c:83:60:53:dc:0f:b1:b2:a0:
1a:dd:57:4d:9a:8e:4c:ee:08:57:b4:9c:14:d7:4b:
65:16:45:15:46:0d:fd:76:f1:a5:92:94:30:e7:6b:
67:4e:b0:b2:f2:ac:3f:c9:51:b5:99:0e:ee:75:28:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:26:1F:56:A3:10:7F:F6:05:90:A1:C4:23:33:FF:A5:1F:2A:41
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ALgmH1ajEH_2BZChxCMz_6UfKkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.186.0/24
81.177.254.0/23
IPv6:
2a03:aa00:1000::/48
Signature Algorithm: sha256WithRSAEncryption
19:ee:5b:73:d6:da:d3:ba:80:d2:06:08:48:e0:4c:ad:d2:9e:
b9:1b:b9:c7:0d:9f:07:16:7a:44:45:40:4e:d2:e0:e8:d0:c0:
10:58:bf:79:66:18:fd:03:08:c4:bc:63:6a:1d:bb:8d:6d:ef:
97:2b:dd:0f:94:50:8b:47:62:b1:dc:29:fd:d0:5b:bc:7f:19:
40:fd:ac:ab:99:10:d1:92:fd:01:e9:7e:e3:26:2b:66:45:6c:
6f:15:d7:58:34:64:1c:8c:3e:9d:ec:fa:c4:de:cc:a0:a7:d5:
21:47:87:1c:2e:c9:b1:12:55:b5:e5:7c:96:18:71:6e:74:9d:
10:34:cb:4e:97:85:ed:db:ef:2c:95:18:da:11:26:b7:54:3e:
33:8b:c6:d0:c0:9c:d3:21:70:63:73:fc:78:81:3a:4f:d1:01:
3e:9b:3a:6d:b4:78:a3:13:0d:39:d5:69:a7:1f:72:23:69:5c:
a2:c9:85:14:e4:ae:0d:ff:e0:f8:37:56:5f:0a:09:0d:fc:21:
d2:62:e9:e3:86:cf:1c:a6:84:9d:d3:ec:89:bd:be:51:91:5b:
62:b8:48:e5:0c:ba:4c:fc:ea:1c:21:cc:42:df:82:e8:25:99:
ca:8d:8d:f8:c4:1f:0d:3f:29:59:a1:d7:90:9a:47:c1:af:1b:
09:67:1f:da
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEQfHCrjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmY0YjFjMGJmYmFkNDZiODExZWVlNTY4YTE4ZmJhYTE0YTlkNjg3MB4XDTIyMDEw
MTE2MDUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBiODI2MWY1NmEz
MTA3ZmY2MDU5MGExYzQyMzMzZmZhNTFmMmE0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdRcLhPfQN/gIyR0kd5NB/aKtwH8aO38a8DWUsYeSUdGdFI
+0r7ZnIVTIQ009KJVaJvxakZzIZ4RmQ/YEdSSDZEsVHPlT0/8BAU+n99fw1EJibb
M77Q1HCKEZJZlP0C247coSfds+VH0fUz8urTqPoVMulO5vpbUpLQH/530dzUg8Fk
/a7DYVZJCj+HQTiYuDdDm8Rkfmx4oVfFl8Wc+6+yBVhNWmdybUQz3jf57gD3MuFb
xufzZlngz31AE3vDHpwfJx6a8uoDLINgU9wPsbKgGt1XTZqOTO4IV7ScFNdLZRZF
FUYN/XbxpZKUMOdrZ06wsvKsP8lRtZkO7nUoxMcCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQAuCYfVqMQf/YFkKHEIzP/pR8qQTAfBgNVHSMEGDAWgBSS9LHAv7rUa4Ee
7laKGPuqFKnWhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t2U3h3TC02MUd1Qkh1NVdpaGo3cWhTcDFvYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTIvNGY4NTE0LTJlMjAtNDkzNS05OTVjLWEwODRmNzZjOGUyYi8x
L0FMZ21IMWFqRUhfMkJaQ2h4Q016XzZVZktrRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIv
NGY4NTE0LTJlMjAtNDkzNS05OTVjLWEwODRmNzZjOGUyYi8xL2t2U3h3TC02MUd1
Qkh1NVdpaGo3cWhTcDFvYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAFGxugMEAVGx/jAPBAIAAjAJAwcA
KgOqABAAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ7ltz1trTuoDSBghI4Eyt0p65G7nH
DZ8HFnpERUBO0uDo0MAQWL95Zhj9AwjEvGNqHbuNbe+XK90PlFCLR2Kx3Cn90Fu8
fxlA/ayrmRDRkv0B6X7jJitmRWxvFddYNGQcjD6d7PrE3sygp9UhR4ccLsmxElW1
5XyWGHFudJ0QNMtOl4Xt2+8slRjaESa3VD4zi8bQwJzTIXBjc/x4gTpP0QE+mzpt
tHijEw051WmnH3IjaVyiyYUU5K4N/+D4N1ZfCgkN/CHSYunjhs8cpoSd0+yJvb5R
kVtiuEjlDLpM/OocIcxC34LoJZnKjY34xB8NPylZodeQmkfBrxsJZx/a
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org