Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-zc8uFf65zMI_HN5lhX1VCOZMFc.roa
File: 1-zc8uFf65zMI_HN5lhX1VCOZMFc.roa (raw, json)
Hash identifier: BfhKAFYEX+SbuP2iwKLTRJC/jOvHL2/TEyGI2M6Ww/g=
Subject key identifier: FB:37:3C:B8:57:FA:E7:33:08:FC:73:79:96:15:F5:54:23:99:30:57
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0931C470
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-zc8uFf65zMI_HN5lhX1VCOZMFc.roa
Signing time: Sat 01 Jan 2022 16:00:56 +0000
ROA not before: Sat 01 Jan 2022 16:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211715
IP address blocks: 77.83.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154256496 (0x931c470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb373cb857fae73308fc73799615f55423993057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:b0:3e:2b:ca:90:92:c3:02:99:3d:0d:71:
45:2e:af:cf:fc:17:3e:20:7e:8f:bb:d9:1f:4a:0b:
83:ea:b8:5d:da:d0:d0:15:30:f7:2d:b0:2d:97:b8:
27:98:41:05:90:0d:0e:d6:7e:23:4c:00:1b:f1:01:
70:c7:0c:56:ac:e9:bc:62:09:0b:41:a6:e4:ca:f4:
ae:21:5a:b3:1f:9a:02:52:a8:5f:31:cb:2d:d6:64:
c2:b2:cc:e4:43:a5:37:45:0e:0b:4f:a1:61:fa:f2:
9f:60:3e:91:46:cd:d3:72:15:83:6d:bf:1a:4f:54:
c3:1b:3f:d6:91:0f:ab:8d:4c:9c:5f:b4:9b:43:15:
cf:7d:fd:a2:01:64:b2:6a:a2:d1:70:9f:5c:f3:f3:
b6:4b:3b:3e:57:d6:cf:6d:64:98:1d:c1:30:f9:32:
c6:9b:b2:5b:cc:1c:52:0c:ce:0a:56:82:ca:94:f5:
a3:36:90:ef:63:5c:e3:8f:29:81:e4:7b:85:31:f0:
a6:d8:e7:b6:22:3f:6b:c2:e2:3b:50:d6:d0:e4:67:
3c:98:7b:30:de:86:e3:a3:4f:a9:73:47:df:66:24:
a2:59:ce:6f:0f:48:21:74:d5:67:d3:f1:ac:95:64:
dd:a7:42:74:90:58:82:32:7f:a1:51:ed:93:1f:d6:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:3C:B8:57:FA:E7:33:08:FC:73:79:96:15:F5:54:23:99:30:57
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-zc8uFf65zMI_HN5lhX1VCOZMFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0b:e0:14:cd:c5:24:0b:54:d0:86:76:fa:43:a2:67:6e:32:
41:d7:3c:2f:2a:f7:6d:a5:9e:0d:60:0c:5c:b6:ee:da:29:19:
4f:c7:2e:48:e1:c5:87:6a:86:22:9d:be:c6:fe:8a:4a:aa:c7:
4a:7e:81:d8:a3:72:84:fc:99:7e:5e:38:dd:28:59:6c:a3:bf:
ee:f5:52:98:8d:9e:a1:3f:fd:3d:72:45:cb:ce:21:89:3a:33:
fe:69:91:08:ca:e8:40:de:2f:2e:ee:07:b2:ff:bf:91:be:1d:
93:f1:2a:a4:d6:a5:4b:f7:c7:e7:69:70:e4:48:9e:cf:64:3c:
4c:6f:96:f5:83:3b:56:a9:b1:af:3e:49:57:71:72:ed:46:55:
d2:f9:f2:86:06:68:ef:bd:b8:c9:cb:62:07:45:86:d8:ac:db:
99:dc:e9:62:68:e7:51:58:64:5d:53:a5:bb:3a:4f:8f:f8:65:
27:28:06:a5:9c:ad:af:36:24:22:6e:1c:ec:52:48:7f:ce:46:
7b:53:76:8c:e4:32:c0:dc:5f:aa:ed:ff:0e:cd:3d:6c:c1:6c:
5a:fe:1e:79:5c:31:86:1d:76:cd:74:0e:ab:71:9e:e6:07:dc:
05:96:52:d4:1f:a2:3b:cd:2e:91:cd:fa:28:bd:51:cc:0b:50:
cd:d5:83:04
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECTHEcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDA1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmIzNzNjYjg1N2Zh
ZTczMzA4ZmM3Mzc5OTYxNWY1NTQyMzk5MzA1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALtTsD4rypCSwwKZPQ1xRS6vz/wXPiB+j7vZH0oLg+q4XdrQ
0BUw9y2wLZe4J5hBBZANDtZ+I0wAG/EBcMcMVqzpvGIJC0Gm5Mr0riFasx+aAlKo
XzHLLdZkwrLM5EOlN0UOC0+hYfryn2A+kUbN03IVg22/Gk9Uwxs/1pEPq41MnF+0
m0MVz339ogFksmqi0XCfXPPztks7PlfWz21kmB3BMPkyxpuyW8wcUgzOClaCypT1
ozaQ72Nc448pgeR7hTHwptjntiI/a8LiO1DW0ORnPJh7MN6G46NPqXNH32YkolnO
bw9IIXTVZ9PxrJVk3adCdJBYgjJ/oVHtkx/WPUECAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT7Nzy4V/rnMwj8c3mWFfVUI5kwVzAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
LzEtemM4dUZmNjV6TUlfSE41bGhYMVZDT1pNRmMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3
L2YxMzRjOC1mODE0LTRiNzEtOTU3Yi0zOTRhY2QyMWYzOWIvMS9zYWV3Mk42Q1Vk
TnRmSVA2OXJ4LV9zYzdVRFEuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNU/IwDQYJKoZIhvcNAQELBQAD
ggEBALQL4BTNxSQLVNCGdvpDomduMkHXPC8q922lng1gDFy27topGU/HLkjhxYdq
hiKdvsb+ikqqx0p+gdijcoT8mX5eON0oWWyjv+71UpiNnqE//T1yRcvOIYk6M/5p
kQjK6EDeLy7uB7L/v5G+HZPxKqTWpUv3x+dpcORIns9kPExvlvWDO1apsa8+SVdx
cu1GVdL58oYGaO+9uMnLYgdFhtis25nc6WJo51FYZF1Tpbs6T4/4ZScoBqWcra82
JCJuHOxSSH/ORntTdozkMsDcX6rt/w7NPWzBbFr+HnlcMYYdds10DqtxnuYH3AWW
UtQfojvNLpHN+ii9UcwLUM3VgwQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org