Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mQuI7Q01QbH8cFKpvEu6Hfw6mmg.roa
File: mQuI7Q01QbH8cFKpvEu6Hfw6mmg.roa (raw, json)
Hash identifier: J6cwtXHZJ14a9Rtq7WEyhTTiSBMLcpDJF37+Qg6ie/E=
Subject key identifier: 99:0B:88:ED:0D:35:41:B1:FC:70:52:A9:BC:4B:BA:1D:FC:3A:9A:68
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07683473
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mQuI7Q01QbH8cFKpvEu6Hfw6mmg.roa
Signing time: Wed 02 Feb 2022 15:50:36 +0000
ROA not before: Wed 02 Feb 2022 15:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124269683 (0x7683473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 2 15:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=990b88ed0d3541b1fc7052a9bc4bba1dfc3a9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:cd:50:0f:d7:c3:a9:12:09:7d:66:20:0c:
42:0d:bc:b2:eb:b3:fd:a7:16:e0:76:bd:a4:5c:41:
91:ba:75:f1:7e:4b:d7:f1:61:ac:49:c1:11:f5:dd:
32:36:89:e1:3f:f6:ad:7c:0b:da:fe:2b:7f:01:8e:
d6:b6:d2:f6:49:69:64:b8:81:39:f3:b9:82:41:2c:
4a:ed:dd:a0:da:39:04:84:41:e6:94:d2:c4:20:1b:
c2:6e:f7:67:bb:d1:40:76:64:78:a0:69:bf:dd:2b:
20:f4:ec:90:ce:88:23:fc:33:3d:bc:f5:b2:34:40:
37:15:60:a9:80:ca:d5:4f:c4:05:b2:c6:78:06:eb:
26:d8:59:e9:bf:e8:90:78:7c:8b:fb:02:25:af:25:
84:df:ce:96:ad:36:22:7d:18:41:a6:11:8c:0b:fa:
6e:c7:76:00:22:2e:bc:4a:3a:36:f0:82:c2:cf:b6:
31:b5:87:4c:d4:8c:47:39:a2:da:c5:05:a6:52:a3:
59:88:48:b5:f5:80:62:83:80:7b:d5:3a:a9:36:77:
4f:c1:e8:19:73:d3:08:d3:d7:82:28:4f:64:61:66:
6c:ed:71:97:02:1e:33:57:32:3d:69:d9:99:be:79:
c2:9e:e1:6e:27:d9:73:6d:a6:3b:4a:19:4e:74:6e:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:88:ED:0D:35:41:B1:FC:70:52:A9:BC:4B:BA:1D:FC:3A:9A:68
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/mQuI7Q01QbH8cFKpvEu6Hfw6mmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
23:42:2e:04:f1:b2:35:22:20:74:3a:c1:35:68:f8:76:52:17:
12:58:95:52:6d:c9:10:d2:18:35:3d:f6:e1:41:88:41:88:04:
0b:cb:b5:5d:2a:34:9f:c5:f2:92:4f:4a:b2:7e:5a:7b:04:c3:
5a:cb:cf:fb:5d:4d:67:9d:c9:25:a9:5c:a7:f0:e2:8d:2a:3c:
08:44:6d:63:d2:ef:c0:01:ec:84:a5:9b:a0:9e:60:a9:54:a1:
48:56:68:b1:53:c8:55:ce:74:4b:fd:3c:35:33:06:00:f3:eb:
54:39:66:ee:76:7f:9e:b8:d2:3d:50:19:71:ad:ad:c5:06:b9:
2f:75:ac:f0:b5:e4:e6:ad:21:42:1d:78:c0:41:20:98:21:01:
4b:f7:1d:ac:61:32:1d:79:fb:31:73:20:37:cb:9b:b6:45:7e:
e4:4f:0a:97:4d:2c:fd:34:19:89:5c:f2:75:9a:59:1c:d3:5b:
16:1e:22:75:0c:e9:9e:3f:70:0a:8d:0a:01:5d:fa:68:af:b4:
c0:93:95:f1:2e:8f:b1:ea:e5:13:a4:41:38:d3:9d:03:83:b0:
3d:e4:c7:bb:a1:ba:70:f1:dd:8c:de:02:9c:4b:a7:f1:7c:bd:
a1:d9:74:c3:8c:8a:48:0b:9f:85:b9:1c:9d:6a:31:f4:99:2f:
05:8c:03:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB2g0czANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDIw
MjE1NTAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTkwYjg4ZWQwZDM1
NDFiMWZjNzA1MmE5YmM0YmJhMWRmYzNhOWE2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANjSzVAP18OpEgl9ZiAMQg28suuz/acW4Ha9pFxBkbp18X5L
1/FhrEnBEfXdMjaJ4T/2rXwL2v4rfwGO1rbS9klpZLiBOfO5gkEsSu3doNo5BIRB
5pTSxCAbwm73Z7vRQHZkeKBpv90rIPTskM6II/wzPbz1sjRANxVgqYDK1U/EBbLG
eAbrJthZ6b/okHh8i/sCJa8lhN/Olq02In0YQaYRjAv6bsd2ACIuvEo6NvCCws+2
MbWHTNSMRzmi2sUFplKjWYhItfWAYoOAe9U6qTZ3T8HoGXPTCNPXgihPZGFmbO1x
lwIeM1cyPWnZmb55wp7hbifZc22mO0oZTnRuej0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSZC4jtDTVBsfxwUqm8S7od/DqaaDAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
L21RdUk3UTAxUWJIOGNGS3B2RXU2SGZ3Nm1tZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1TJTANBgkqhkiG9w0BAQsFAAOC
AQEAI0IuBPGyNSIgdDrBNWj4dlIXEliVUm3JENIYNT324UGIQYgEC8u1XSo0n8Xy
kk9Ksn5aewTDWsvP+11NZ53JJalcp/DijSo8CERtY9LvwAHshKWboJ5gqVShSFZo
sVPIVc50S/08NTMGAPPrVDlm7nZ/nrjSPVAZca2txQa5L3Ws8LXk5q0hQh14wEEg
mCEBS/cdrGEyHXn7MXMgN8ubtkV+5E8Kl00s/TQZiVzydZpZHNNbFh4idQzpnj9w
Co0KAV36aK+0wJOV8S6PserlE6RBONOdA4OwPeTHu6G6cPHdjN4CnEun8Xy9odl0
w4yKSAufhbkcnWox9JkvBYwDNg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org