Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/7TvnTqreZpbX6J-diq5PFEeNW9Q.roa
File: 7TvnTqreZpbX6J-diq5PFEeNW9Q.roa (raw, json)
Hash identifier: gl2j9MXSGLWQrsrhlxtXRZha3Y2kKRpo7hCAbEjsGwY=
Subject key identifier: ED:3B:E7:4E:AA:DE:66:96:D7:E8:9F:9D:8A:AE:4F:14:47:8D:5B:D4
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CBC59D2
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/7TvnTqreZpbX6J-diq5PFEeNW9Q.roa
Signing time: Sat 01 Jan 2022 04:59:48 +0000
ROA not before: Sat 01 Jan 2022 04:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209409
IP address blocks: 77.79.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750541266 (0x2cbc59d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed3be74eaade6696d7e89f9d8aae4f14478d5bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:86:09:f2:a2:bf:44:44:b9:92:98:03:f9:
5a:f1:dc:29:6d:25:aa:31:47:7a:d5:26:2c:af:ef:
93:04:6f:22:37:b7:de:de:68:f1:ba:48:1f:6e:8c:
f6:fa:2f:36:5b:5f:ba:01:ce:d0:0a:6a:da:6d:77:
c1:79:b9:75:05:7d:ca:03:60:b3:14:99:b6:03:ed:
b4:cd:69:8d:92:b0:8f:b1:c3:c4:02:14:47:7b:d1:
ff:ba:fa:e2:fe:8a:9b:9d:68:99:55:c9:b7:de:df:
9a:48:35:e6:51:7b:ee:8c:e6:e4:59:60:81:22:77:
7e:11:8b:10:dd:00:0a:41:f6:7e:85:f5:f4:04:80:
02:a5:c9:f5:7b:67:88:7e:49:40:04:8c:e5:96:8b:
f3:49:97:9f:9e:8d:f8:a0:aa:d9:db:a5:d7:f7:98:
2d:13:5a:1d:57:e7:ba:01:f1:ff:2c:0e:5b:c8:05:
5d:d7:2b:c8:31:40:78:4d:38:92:1b:de:22:c3:94:
8a:2d:c0:0f:8f:c0:65:03:f4:47:9c:7b:f6:e2:f6:
05:be:e2:cf:c5:20:7a:eb:f2:3c:37:26:c3:c8:84:
72:fc:ba:9e:27:9a:88:27:19:ae:74:e8:73:0d:b1:
8d:2e:bb:95:23:05:6c:34:80:b1:d4:3a:1d:95:ef:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3B:E7:4E:AA:DE:66:96:D7:E8:9F:9D:8A:AE:4F:14:47:8D:5B:D4
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/7TvnTqreZpbX6J-diq5PFEeNW9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.200.0/24
Signature Algorithm: sha256WithRSAEncryption
79:81:42:3f:a5:03:7e:1e:ac:88:be:25:14:9f:1c:df:91:f8:
e6:ad:81:c3:eb:62:3d:19:ad:5c:37:89:56:60:36:c3:7a:b2:
a8:06:03:5b:01:7d:b4:94:0b:8c:80:0f:84:6c:ef:84:ee:33:
2f:1d:6d:56:8e:eb:84:3e:5c:1e:5d:b8:c1:57:90:e6:dd:c3:
f4:5e:ed:c9:d0:fc:3e:f2:44:e1:b4:46:30:9e:88:47:5f:1a:
2f:f7:33:e3:93:2e:62:51:24:44:15:e2:91:eb:67:a9:b9:b3:
8b:53:bc:b4:89:80:35:22:19:7e:1c:6a:bf:18:9d:92:24:d0:
4b:88:5e:0c:8a:c3:f7:56:61:df:22:be:21:7d:b0:ae:69:e9:
b6:77:03:ac:2c:79:4c:91:bc:47:14:d6:64:da:06:02:07:6a:
62:87:08:e3:b3:2a:4d:e0:e9:dd:a5:7a:64:da:de:21:e0:96:
6c:69:4f:6b:0b:0b:80:f7:27:f1:aa:f7:74:4c:11:5b:3a:a5:
de:7d:87:0c:99:54:04:75:12:88:f7:07:f1:6d:90:1f:6c:fe:
80:3b:24:09:e2:ee:39:95:68:c1:0c:c2:c4:0e:41:96:cd:33:
d4:35:9a:28:34:68:63:cb:fe:43:aa:84:2f:cd:5d:43:05:b4:
a2:c7:ad:a2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIELLxZ0jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OGM1MTBmYzliODY1ZDk2ZTNhZmM3YzU2MDU2ZWZhZDlhMzMwYzViMB4XDTIyMDEw
MTA0NTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQzYmU3NGVhYWRl
NjY5NmQ3ZTg5ZjlkOGFhZTRmMTQ0NzhkNWJkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANqBhgnyor9ERLmSmAP5WvHcKW0lqjFHetUmLK/vkwRvIje3
3t5o8bpIH26M9vovNltfugHO0Apq2m13wXm5dQV9ygNgsxSZtgPttM1pjZKwj7HD
xAIUR3vR/7r64v6Km51omVXJt97fmkg15lF77ozm5FlggSJ3fhGLEN0ACkH2foX1
9ASAAqXJ9XtniH5JQASM5ZaL80mXn56N+KCq2dul1/eYLRNaHVfnugHx/ywOW8gF
XdcryDFAeE04khveIsOUii3AD4/AZQP0R5x79uL2Bb7iz8UgeuvyPDcmw8iEcvy6
nieaiCcZrnTocw2xjS67lSMFbDSAsdQ6HZXv8esCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTtO+dOqt5mltfon52Krk8UR41b1DAfBgNVHSMEGDAWgBRoxRD8m4ZdluOv
x8VgVu+tmjMMWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8x
LzdUdm5UcXJlWnBiWDZKLWRpcTVQRkVlTlc5US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
ZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2YS8xL2FNVVFfSnVHWFpi
anI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1PyDANBgkqhkiG9w0BAQsFAAOC
AQEAeYFCP6UDfh6siL4lFJ8c35H45q2Bw+tiPRmtXDeJVmA2w3qyqAYDWwF9tJQL
jIAPhGzvhO4zLx1tVo7rhD5cHl24wVeQ5t3D9F7tydD8PvJE4bRGMJ6IR18aL/cz
45MuYlEkRBXiketnqbmzi1O8tImANSIZfhxqvxidkiTQS4heDIrD91Zh3yK+IX2w
rmnptncDrCx5TJG8RxTWZNoGAgdqYocI47MqTeDp3aV6ZNreIeCWbGlPawsLgPcn
8ar3dEwRWzql3n2HDJlUBHUSiPcH8W2QH2z+gDskCeLuOZVowQzCxA5Bls0z1DWa
KDRoY8v+Q6qEL81dQwW0osetog==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:00 2025 by rpki-client