Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/9r-jez2pArPtsHPriJWHd-Y2Mq8.roa
File: 9r-jez2pArPtsHPriJWHd-Y2Mq8.roa (raw, json)
Hash identifier: 0snis/ORML8OkyNIBvTOuWdQeGCjFM/vyH0ehYuKQug=
Subject key identifier: F6:BF:A3:7B:3D:A9:02:B3:ED:B0:73:EB:88:95:87:77:E6:36:32:AF
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 055FAF
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/9r-jez2pArPtsHPriJWHd-Y2Mq8.roa
Signing time: Wed 09 Feb 2022 16:35:20 +0000
ROA not before: Wed 09 Feb 2022 16:35:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51964
IP address blocks: 185.84.218.0/24 maxlen: 24
185.84.217.0/24 maxlen: 24
193.96.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352175 (0x55faf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Feb 9 16:35:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6bfa37b3da902b3edb073eb88958777e63632af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:4c:77:3c:45:b2:0b:e6:cd:3b:22:9a:94:
9f:99:e8:59:a2:b8:3a:62:14:d4:24:ab:4b:8b:fe:
db:c4:a7:4f:0d:13:6c:b2:93:fd:5f:f4:88:5b:01:
30:68:dc:85:71:43:28:6f:ce:b1:a1:f9:7c:02:35:
67:f3:3d:31:76:3e:b3:9c:cc:8b:5c:28:bf:80:0e:
ca:dc:73:bc:13:07:26:18:e8:e4:ec:e8:85:13:81:
f0:37:c6:de:ca:67:96:c6:da:40:c1:f4:ae:20:e7:
8d:f6:ce:36:a3:19:86:c9:c6:54:54:d4:d8:16:f2:
ed:85:a4:1c:61:42:58:b1:03:e9:71:13:f6:ae:dc:
b4:e4:82:b0:eb:d6:b8:2b:2c:3f:66:13:0e:09:b0:
e1:02:ba:ec:86:3e:ef:da:4b:e9:7d:aa:a4:8d:2d:
e0:84:dd:7f:bc:f4:f6:2b:bd:ce:88:40:e4:91:96:
9d:a2:8a:b3:d8:39:fe:8e:e3:4e:76:5e:75:0d:42:
f6:32:fe:8d:d6:d7:b3:24:18:1c:f1:c2:8f:3c:f1:
65:6f:97:3b:3d:bf:26:96:60:b8:f5:1e:55:ed:81:
b7:25:b9:dc:dd:a3:b0:33:5b:5e:f0:a6:a3:cb:42:
bd:54:2a:c7:91:b6:df:3f:b9:de:c4:1c:e9:9f:0e:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BF:A3:7B:3D:A9:02:B3:ED:B0:73:EB:88:95:87:77:E6:36:32:AF
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/9r-jez2pArPtsHPriJWHd-Y2Mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.217.0-185.84.218.255
193.96.96.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:ba:1a:bc:02:d0:c5:d8:93:fd:4c:7b:a1:bd:d8:b9:6a:cc:
59:4a:2b:db:62:f3:b5:0b:b2:de:81:6a:ad:74:2f:53:67:12:
6c:cc:b3:6b:0e:25:55:d2:c3:cc:6c:8f:12:6b:7a:6a:a3:36:
56:94:39:58:ee:23:a2:bf:72:8f:3e:bf:ad:ac:a8:a9:9d:93:
64:e5:5a:11:ad:d3:bd:15:6d:ab:2f:9a:c8:d7:86:7a:be:70:
93:66:d9:3b:01:35:84:28:b0:cf:62:17:61:29:0a:20:5b:66:
7e:b3:e4:c8:ba:a2:17:cf:5e:bd:a6:2b:69:37:17:7a:b3:46:
f1:f6:89:bb:7e:1b:ed:24:c7:29:fd:83:54:1f:9d:da:1b:a2:
67:07:83:c4:01:88:4d:2e:78:dc:61:c4:da:96:fe:40:3b:71:
6e:c7:f6:40:b8:d3:2b:a9:10:23:e4:1c:93:7e:14:d7:e8:c0:
af:05:3b:79:a2:61:b1:09:c9:9c:7a:fa:d2:f8:95:d8:9f:fb:
81:7c:2e:bf:19:bc:a7:d4:53:68:fc:97:79:0a:2c:2c:03:99:
cb:77:fd:b4:fe:29:53:bb:6e:f5:82:4d:50:ac:1d:d4:6c:92:
43:4a:bc:54:99:7c:d8:63:64:a9:92:d6:0f:e9:6f:85:60:8f:
98:4f:ea:32
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgIDBV+vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc3
ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhjMmE5NmIwHhcNMjIwMjA5
MTYzNTIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmNmJmYTM3YjNkYTkw
MmIzZWRiMDczZWI4ODk1ODc3N2U2MzYzMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh2xMdzxFsgvmzTsimpSfmehZorg6YhTUJKtLi/7bxKdPDRNs
spP9X/SIWwEwaNyFcUMob86xofl8AjVn8z0xdj6znMyLXCi/gA7K3HO8EwcmGOjk
7OiFE4HwN8beymeWxtpAwfSuIOeN9s42oxmGycZUVNTYFvLthaQcYUJYsQPpcRP2
rty05IKw69a4Kyw/ZhMOCbDhArrshj7v2kvpfaqkjS3ghN1/vPT2K73OiEDkkZad
ooqz2Dn+juNOdl51DUL2Mv6N1tezJBgc8cKPPPFlb5c7Pb8mlmC49R5V7YG3Jbnc
3aOwM1te8Kajy0K9VCrHkbbfP7nexBzpnw5HPwIDAQABo4ICFzCCAhMwHQYDVR0O
BBYEFPa/o3s9qQKz7bBz64iVh3fmNjKvMB8GA1UdIwQYMBaAFHftqPcmpptQTemU
lDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0LzEv
OXItamV6MnBBclB0c0hQcmlKV0hkLVkyTXE4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83
Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0LzEvZC0ybzl5YW1tMUJO
NlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0G
CCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5VNkDBAC5VNoDBAPBYGAwDQYJ
KoZIhvcNAQELBQADggEBAJ26GrwC0MXYk/1Me6G92LlqzFlKK9ti87ULst6Baq10
L1NnEmzMs2sOJVXSw8xsjxJremqjNlaUOVjuI6K/co8+v62sqKmdk2TlWhGt070V
basvmsjXhnq+cJNm2TsBNYQosM9iF2EpCiBbZn6z5Mi6ohfPXr2mK2k3F3qzRvH2
ibt+G+0kxyn9g1QfndobomcHg8QBiE0ueNxhxNqW/kA7cW7H9kC40yupECPkHJN+
FNfowK8FO3miYbEJyZx6+tL4ldif+4F8Lr8ZvKfUU2j8l3kKLCwDmct3/bT+KVO7
bvWCTVCsHdRskkNKvFSZfNhjZKmS1g/pb4Vgj5hP6jI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:00 2023 by rpki-client on console-ams.rpki-client.org