Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/hCTVYEAspwliYJMwcU733OGq-A4.roa
File: hCTVYEAspwliYJMwcU733OGq-A4.roa (raw, json)
Hash identifier: ShJOdBhxXI9tfg2SkJ/yW3uyfrbUv/jiF1pFgR2x8CY=
Subject key identifier: 84:24:D5:60:40:2C:A7:09:62:60:93:30:71:4E:F7:DC:E1:AA:F8:0E
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0199D727
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/hCTVYEAspwliYJMwcU733OGq-A4.roa
Signing time: Sun 30 Jan 2022 08:17:55 +0000
ROA not before: Sun 30 Jan 2022 08:17:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.74.230.0/24 maxlen: 24
77.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26859303 (0x199d727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 30 08:17:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8424d560402ca70962609330714ef7dce1aaf80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:0a:32:dc:6d:bd:4b:26:7f:6e:23:e4:96:
8a:3b:8f:4c:c9:22:7e:3d:94:c2:3b:14:b3:ba:41:
6b:8e:c9:5e:bf:49:cf:92:b4:82:e7:98:14:ac:ee:
76:6f:53:e0:18:4c:d5:73:99:8b:d7:7c:2a:1b:25:
88:90:df:59:46:ab:85:cc:03:0c:78:55:9b:23:c0:
ba:25:81:f2:8d:11:93:da:d7:6e:15:66:8f:c3:23:
f1:6d:af:39:ff:70:59:f9:09:18:8a:02:ce:77:49:
7a:a2:8b:b6:8f:81:dc:a5:e2:f8:f9:c2:a2:eb:1f:
09:da:07:c2:0d:df:37:43:6d:ca:fa:4f:ab:28:0c:
16:b5:f7:e8:e6:65:2b:76:7a:21:85:b8:c2:a9:16:
20:3b:8f:56:6f:5c:86:20:01:2d:47:8d:5d:cc:e6:
98:02:f4:4b:e7:1c:10:db:f7:7f:29:7f:40:3b:54:
f9:15:32:b9:92:45:39:34:5e:f1:0d:aa:a8:53:40:
76:f5:55:ed:3d:de:73:46:60:42:4c:26:50:8c:42:
59:c7:62:7c:7d:20:22:52:c9:be:ad:88:2f:cf:90:
64:35:b4:d6:0d:96:00:7a:01:93:ef:36:d3:88:43:
f2:e5:cd:0a:c0:ae:83:d3:cc:2a:3a:9e:bc:39:82:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:D5:60:40:2C:A7:09:62:60:93:30:71:4E:F7:DC:E1:AA:F8:0E
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/hCTVYEAspwliYJMwcU733OGq-A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:7b:bf:3a:0d:68:5c:c6:49:c3:52:d5:71:e6:78:07:b0:07:
4b:ec:19:09:52:4b:d5:c5:c7:21:24:13:b5:29:22:7b:13:79:
e7:11:24:4c:7d:97:7f:46:91:63:5c:36:7d:c3:ea:b3:c6:d1:
5d:4c:1d:f3:65:77:fd:34:cd:d0:e4:16:f0:68:a1:09:34:e2:
80:86:36:76:5a:07:59:8a:6d:ed:81:31:c3:d5:ba:11:40:2a:
56:f5:81:8b:fa:0d:da:06:72:70:cd:e3:3f:31:ed:27:15:cd:
51:8a:e5:17:f9:26:29:86:9a:32:be:86:7c:ce:ac:74:26:da:
91:5a:50:8c:62:c8:41:63:dd:69:19:29:af:48:fd:66:84:20:
df:45:b7:84:cb:4c:eb:c3:f9:a7:de:a8:85:cb:2e:49:5c:7b:
59:7e:95:3b:39:23:c4:e6:ee:0e:6e:49:82:ae:22:d3:9d:55:
df:50:5b:ce:f0:f7:d2:9d:be:a1:e3:4b:9a:42:78:7e:3e:71:
c5:bd:f0:40:a0:ef:d9:d9:53:f7:ab:35:72:3c:7d:37:bb:0d:
8b:b6:8d:b3:24:bd:94:51:53:b6:0f:24:7e:50:d2:c2:04:b3:
75:ed:e6:94:9e:6a:8b:27:2c:17:f3:63:02:6f:00:db:37:4c:
25:53:ba:12
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAZnXJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGM2MGEwZDJkNzBhOTMzN2QwYmRhNTZkMWFkNTk2YWMxZjY5Y2RhMB4XDTIyMDEz
MDA4MTc1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQyNGQ1NjA0MDJj
YTcwOTYyNjA5MzMwNzE0ZWY3ZGNlMWFhZjgwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgICjLcbb1LJn9uI+SWijuPTMkifj2UwjsUs7pBa47JXr9J
z5K0gueYFKzudm9T4BhM1XOZi9d8KhsliJDfWUarhcwDDHhVmyPAuiWB8o0Rk9rX
bhVmj8Mj8W2vOf9wWfkJGIoCzndJeqKLto+B3KXi+PnCousfCdoHwg3fN0NtyvpP
qygMFrX36OZlK3Z6IYW4wqkWIDuPVm9chiABLUeNXczmmAL0S+ccENv3fyl/QDtU
+RUyuZJFOTRe8Q2qqFNAdvVV7T3ec0ZgQkwmUIxCWcdifH0gIlLJvq2IL8+QZDW0
1g2WAHoBk+8204hD8uXNCsCug9PMKjqevDmCpMECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSEJNVgQCynCWJgkzBxTvfc4ar4DjAfBgNVHSMEGDAWgBTYxgoNLXCpM30L
2lbRrVlqwfac2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJNWUtEUzF3cVROOUM5cFcwYTFaYXNIMm5Oby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvYjUxYTg1LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2Yy8x
L2hDVFZZRUFzcHdsaVlKTXdjVTczM09HcS1BNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
YjUxYTg1LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2Yy8xLzJNWUtEUzF3cVRO
OUM5cFcwYTFaYXNIMm5Oby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU1K5jANBgkqhkiG9w0BAQsFAAOC
AQEAj3u/Og1oXMZJw1LVceZ4B7AHS+wZCVJL1cXHISQTtSkiexN55xEkTH2Xf0aR
Y1w2fcPqs8bRXUwd82V3/TTN0OQW8GihCTTigIY2dloHWYpt7YExw9W6EUAqVvWB
i/oN2gZycM3jPzHtJxXNUYrlF/kmKYaaMr6GfM6sdCbakVpQjGLIQWPdaRkpr0j9
ZoQg30W3hMtM68P5p96ohcsuSVx7WX6VOzkjxObuDm5Jgq4i051V31BbzvD30p2+
oeNLmkJ4fj5xxb3wQKDv2dlT96s1cjx9N7sNi7aNsyS9lFFTtg8kflDSwgSzde3m
lJ5qiycsF/NjAm8A2zdMJVO6Eg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org