Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/jEXM7gTWkZtcwbA6fhrxRIzP1ig.roa
File: jEXM7gTWkZtcwbA6fhrxRIzP1ig.roa (raw, json)
Hash identifier: OayLg6VKl2fma2UZzZnOaSsWR6lRnD5vQMoY4Sl7YaQ=
Subject key identifier: 8C:45:CC:EE:04:D6:91:9B:5C:C1:B0:3A:7E:1A:F1:44:8C:CF:D6:28
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 019F7DA7
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/jEXM7gTWkZtcwbA6fhrxRIzP1ig.roa
Signing time: Mon 31 Jan 2022 11:34:48 +0000
ROA not before: Mon 31 Jan 2022 11:34:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43179
IP address blocks: 77.74.226.0/24 maxlen: 24
77.74.225.0/24 maxlen: 24
77.74.224.0/24 maxlen: 24
77.74.228.0/24 maxlen: 24
77.74.229.0/24 maxlen: 24
77.74.227.0/24 maxlen: 24
109.105.197.0/24 maxlen: 24
109.105.198.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
109.105.196.0/24 maxlen: 24
109.105.194.0/24 maxlen: 24
109.105.193.0/24 maxlen: 24
109.105.199.0/24 maxlen: 24
109.105.206.0/24 maxlen: 24
109.105.204.0/24 maxlen: 24
109.105.205.0/24 maxlen: 24
109.105.202.0/24 maxlen: 24
109.105.203.0/24 maxlen: 24
109.105.201.0/24 maxlen: 24
109.105.200.0/24 maxlen: 24
109.105.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27229607 (0x19f7da7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 31 11:34:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c45ccee04d6919b5cc1b03a7e1af1448ccfd628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:7d:22:5b:0c:82:53:4c:55:15:95:43:a7:
e0:a4:41:df:54:68:4e:51:c3:64:19:5a:d4:e1:e9:
08:3d:47:30:de:3c:32:9b:c6:f5:3d:e6:15:e3:df:
94:2d:49:6d:7d:1f:9b:b1:e8:48:43:ac:4b:a4:08:
bf:96:de:7e:4f:a5:bd:33:f6:ea:34:04:a8:33:53:
d1:a3:b4:9d:ad:74:e0:65:26:0d:d0:7b:d7:99:f9:
ee:05:e1:10:68:f8:b5:ee:f3:2e:84:36:e6:d9:cb:
45:f2:cc:3e:ad:3b:6f:31:25:6c:b4:8d:9d:ba:3c:
c6:47:85:b3:0f:7f:ab:34:0a:16:43:1d:61:07:b8:
fa:91:02:e5:99:63:f3:e6:9c:81:fc:69:88:22:e4:
6c:65:c9:ab:3a:71:74:21:e4:82:b7:0e:70:20:ae:
07:7f:5e:69:98:3e:da:be:70:19:7c:53:e1:8f:c4:
db:c9:69:8c:bb:b4:2f:de:3f:53:11:15:d5:79:fe:
d3:68:53:0a:1a:14:c8:68:e0:79:4b:2d:64:be:33:
76:c3:e8:68:6e:f3:e2:2a:b1:61:81:63:4c:ff:22:
54:a1:74:9c:09:62:d5:cb:cc:18:ce:ce:78:67:ce:
4b:c1:b7:d8:29:87:2c:35:b5:7d:95:ee:46:b2:7f:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:CC:EE:04:D6:91:9B:5C:C1:B0:3A:7E:1A:F1:44:8C:CF:D6:28
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/jEXM7gTWkZtcwbA6fhrxRIzP1ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.224.0-77.74.229.255
109.105.193.0-109.105.207.255
Signature Algorithm: sha256WithRSAEncryption
18:24:08:95:67:6f:3c:48:9f:69:d8:88:b8:46:ff:3f:ce:1a:
3b:dc:f4:ce:ea:b7:5f:14:41:aa:6e:d0:41:02:c4:f3:04:ca:
0a:7d:4f:c5:b7:ee:e1:84:0f:30:96:d6:8b:43:ac:c6:57:57:
f0:08:ca:ba:b8:cb:24:57:a4:0a:c8:af:8e:c7:df:22:ab:bb:
a5:42:bc:8b:d3:9e:29:4c:89:84:da:f6:75:40:51:61:36:62:
c0:11:2f:78:10:46:5a:f2:de:a2:44:b9:7f:c0:06:41:e9:d9:
87:43:cb:98:e7:1a:d0:e0:6f:a9:bc:4b:85:b6:24:93:8d:06:
39:ee:1d:eb:92:08:0c:0d:47:fb:9e:1d:e7:0f:1b:d6:a4:c9:
1a:e1:11:e8:e6:3e:b1:d8:3a:5c:40:58:33:1e:93:a3:07:71:
e3:cc:4e:99:b3:d4:7b:7c:e5:b3:62:9c:08:7a:79:fd:03:7c:
44:e2:f8:f2:c2:9e:07:18:e3:52:39:4d:5b:e6:0e:ec:50:21:
4d:c3:e5:50:c9:a9:22:18:b6:89:10:35:df:57:da:54:8a:15:
c1:01:bb:c0:77:5b:64:d2:7a:5e:50:af:9b:83:82:e8:9b:ac:
c1:06:71:f0:93:ee:bb:96:71:66:33:9d:e9:8b:74:67:e3:aa:
49:e9:49:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEAZ99pzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGM2MGEwZDJkNzBhOTMzN2QwYmRhNTZkMWFkNTk2YWMxZjY5Y2RhMB4XDTIyMDEz
MTExMzQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGM0NWNjZWUwNGQ2
OTE5YjVjYzFiMDNhN2UxYWYxNDQ4Y2NmZDYyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOEfSJbDIJTTFUVlUOn4KRB31RoTlHDZBla1OHpCD1HMN48
MpvG9T3mFePflC1JbX0fm7HoSEOsS6QIv5befk+lvTP26jQEqDNT0aO0na104GUm
DdB715n57gXhEGj4te7zLoQ25tnLRfLMPq07bzElbLSNnbo8xkeFsw9/qzQKFkMd
YQe4+pEC5Zlj8+acgfxpiCLkbGXJqzpxdCHkgrcOcCCuB39eaZg+2r5wGXxT4Y/E
28lpjLu0L94/UxEV1Xn+02hTChoUyGjgeUstZL4zdsPoaG7z4iqxYYFjTP8iVKF0
nAli1cvMGM7OeGfOS8G32CmHLDW1fZXuRrJ/umkCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBSMRczuBNaRm1zBsDp+GvFEjM/WKDAfBgNVHSMEGDAWgBTYxgoNLXCpM30L
2lbRrVlqwfac2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJNWUtEUzF3cVROOUM5cFcwYTFaYXNIMm5Oby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvYjUxYTg1LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2Yy8x
L2pFWE03Z1RXa1p0Y3diQTZmaHJ4Ukl6UDFpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
YjUxYTg1LWY5OWYtNDIzZi05ZmFlLWRkMjk0YzM3OGY2Yy8xLzJNWUtEUzF3cVRO
OUM5cFcwYTFaYXNIMm5Oby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwIgQCAAEwHDAMAwQFTUrgAwQBTUrkMAwDBABtacED
BARtacAwDQYJKoZIhvcNAQELBQADggEBABgkCJVnbzxIn2nYiLhG/z/OGjvc9M7q
t18UQapu0EECxPMEygp9T8W37uGEDzCW1otDrMZXV/AIyrq4yyRXpArIr47H3yKr
u6VCvIvTnilMiYTa9nVAUWE2YsARL3gQRlry3qJEuX/ABkHp2YdDy5jnGtDgb6m8
S4W2JJONBjnuHeuSCAwNR/ueHecPG9akyRrhEejmPrHYOlxAWDMek6MHcePMTpmz
1Ht85bNinAh6ef0DfETi+PLCngcY41I5TVvmDuxQIU3D5VDJqSIYtokQNd9X2lSK
FcEBu8B3W2TSel5Qr5uDguibrMEGcfCT7ruWcWYznemLdGfjqknpSfs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org