Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B91K2e56JDseBa131nPk7OrpZMo.roa
File: B91K2e56JDseBa131nPk7OrpZMo.roa (raw, json)
Hash identifier: vhTR8X4onvx6cub1HlZ7jwIlna+v9+aSAeI6wiEjUoQ=
Subject key identifier: 07:DD:4A:D9:EE:7A:24:3B:1E:05:AD:77:D6:73:E4:EC:EA:E9:64:CA
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 01823D04D5895732FD625CF77DF38B1C2EE5
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B91K2e56JDseBa131nPk7OrpZMo.roa
Signing time: Wed 27 Jul 2022 00:18:23 +0000
ROA not before: Wed 27 Jul 2022 00:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 77.74.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3d:04:d5:89:57:32:fd:62:5c:f7:7d:f3:8b:1c:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 27 00:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07dd4ad9ee7a243b1e05ad77d673e4eceae964ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:54:38:dc:61:b0:c4:e3:0a:f3:21:21:5a:
e3:f4:c5:82:36:55:39:14:67:c5:60:03:20:bd:ea:
10:83:b7:bc:e7:17:fb:b8:02:c9:5d:91:3b:3e:59:
6a:fb:4d:5c:6a:e9:f4:53:00:65:61:ad:e8:c0:4a:
e6:3b:92:e3:4d:ef:a8:17:79:e2:e4:22:71:1b:86:
aa:4f:63:ff:23:b2:47:bf:49:cd:bc:f1:e1:60:a1:
37:33:63:f2:49:5b:c6:24:e9:7c:9c:ae:ed:38:91:
d8:51:71:c0:77:1a:92:54:f0:43:bd:8e:a1:e5:66:
01:b2:c8:a6:dd:a3:34:03:c0:ea:10:f4:c1:0f:bf:
9e:e3:58:d9:30:5c:7a:9e:f3:d7:48:d6:b0:1d:a6:
1b:b8:90:f0:78:d7:2b:2d:5a:4e:76:78:b5:50:d3:
40:a9:bc:82:1a:94:46:be:8c:47:ad:ac:12:e0:c7:
dc:bd:27:a2:03:52:53:05:e4:20:6f:77:97:ea:41:
f7:4f:68:d7:f6:c9:00:1a:2f:bc:0c:26:67:b6:85:
82:90:4e:94:1b:0c:65:d5:67:2b:b8:b8:31:38:98:
ee:e7:ac:ed:b9:8c:0c:61:59:c8:65:8d:5d:8e:d7:
de:63:d2:50:d4:6e:ac:0d:1b:d3:19:03:44:02:17:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:4A:D9:EE:7A:24:3B:1E:05:AD:77:D6:73:E4:EC:EA:E9:64:CA
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/B91K2e56JDseBa131nPk7OrpZMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.229.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:06:5f:0d:98:b2:54:40:50:a6:cb:b5:71:c9:d5:9b:51:79:
1f:11:f3:98:db:c5:1b:57:e3:05:89:1a:77:b4:15:76:f6:1d:
dc:6b:fd:38:d9:84:aa:63:ba:c9:67:7f:9d:2b:de:ec:35:08:
a4:68:5e:9a:6c:a1:8a:62:c2:c3:f5:ba:31:68:09:5b:da:41:
72:f7:05:18:bf:cc:22:39:3f:f5:44:8c:e9:c9:9b:39:b4:c4:
78:47:b9:6e:2b:1f:1a:40:a4:fe:77:83:1e:f4:36:9f:8e:46:
ad:11:45:f6:4e:93:f6:ed:8a:f5:fe:75:2f:f1:85:e4:1b:1f:
bf:7b:d3:26:f2:e9:28:dc:b8:07:a5:6d:43:e1:e1:9d:a6:3d:
50:18:64:33:4a:dc:12:4b:e5:fe:e8:79:ad:93:93:fc:8a:47:
2d:ca:45:96:e0:a7:42:cf:2e:1b:01:89:61:41:a3:a4:97:86:
05:a8:19:13:81:ac:37:59:8d:35:60:29:0b:a9:9d:4a:41:21:
d3:e6:aa:b2:11:b2:6b:16:c7:7b:36:32:51:9d:7f:d7:e3:82:
c3:5d:7a:3c:ae:06:c0:9f:ae:33:c5:d4:78:68:50:62:4b:6d:
70:58:a0:78:e8:56:1c:67:38:35:41:27:12:f4:b7:e9:bd:b9:
3b:78:12:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI9BNWJVzL9Ylz3ffOLHC7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjIwNzI3MDAxODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2RkNGFkOWVlN2EyNDNiMWUwNWFkNzdkNjczZTRlY2VhZTk2NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCtUONxhsMTjCvMhIVrj9MWCNlU5
FGfFYAMgveoQg7e85xf7uALJXZE7Pllq+01caun0UwBlYa3owErmO5LjTe+oF3ni
5CJxG4aqT2P/I7JHv0nNvPHhYKE3M2PySVvGJOl8nK7tOJHYUXHAdxqSVPBDvY6h
5WYBssim3aM0A8DqEPTBD7+e41jZMFx6nvPXSNawHaYbuJDweNcrLVpOdni1UNNA
qbyCGpRGvoxHrawS4MfcvSeiA1JTBeQgb3eX6kH3T2jX9skAGi+8DCZntoWCkE6U
Gwxl1WcruLgxOJju56ztuYwMYVnIZY1djtfeY9JQ1G6sDRvTGQNEAhd0pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfdStnueiQ7HgWtd9Zz5Ozq6WTKMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvQjkxSzJlNTZKRHNlQmExMzFuUGs3T3JwWk1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUrlMA0G
CSqGSIb3DQEBCwUAA4IBAQBNBl8NmLJUQFCmy7VxydWbUXkfEfOY28UbV+MFiRp3
tBV29h3ca/042YSqY7rJZ3+dK97sNQikaF6abKGKYsLD9boxaAlb2kFy9wUYv8wi
OT/1RIzpyZs5tMR4R7luKx8aQKT+d4Me9DafjkatEUX2TpP27Yr1/nUv8YXkGx+/
e9Mm8uko3LgHpW1D4eGdpj1QGGQzStwSS+X+6Hmtk5P8ikctykWW4KdCzy4bAYlh
QaOkl4YFqBkTgaw3WY01YCkLqZ1KQSHT5qqyEbJrFsd7NjJRnX/X44LDXXo8rgbA
n64zxdR4aFBiS21wWKB46FYcZzg1QScS9Lfpvbk7eBLD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org