Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AbGfM1U9YUH1W67ITBKI-RwLPk.roa
File: 5AbGfM1U9YUH1W67ITBKI-RwLPk.roa (raw, json)
Hash identifier: OwKolZDicISTp5kJRNkAiMkzsfx5muCOLbcs5afwd8E=
Subject key identifier: E4:06:C6:7C:CD:54:F5:85:07:D5:6E:BB:21:30:4A:23:E4:70:2C:F9
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0182587B2BEA74E76E4D66554718CB016C0C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AbGfM1U9YUH1W67ITBKI-RwLPk.roa
Signing time: Mon 01 Aug 2022 08:17:23 +0000
ROA not before: Mon 01 Aug 2022 08:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400039
IP address blocks: 188.255.129.0/24 maxlen: 24
77.105.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:58:7b:2b:ea:74:e7:6e:4d:66:55:47:18:cb:01:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 1 08:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e406c67ccd54f58507d56ebb21304a23e4702cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:18:49:20:a7:bd:07:bf:50:99:c8:2a:a3:
8d:29:f8:de:bf:ea:eb:ec:f2:4d:4b:f9:5b:ea:44:
6e:e6:2f:b4:28:47:f4:f8:32:35:9e:60:bc:5d:ec:
61:ae:55:88:e5:ae:81:4a:e4:87:10:5f:19:1f:a0:
f2:d9:d2:a1:0e:b7:6f:dd:bf:be:3f:bb:3f:01:ed:
16:1e:db:c3:77:ea:b1:94:d2:dd:8e:a5:4d:16:78:
15:a4:ec:bd:c0:ce:63:90:41:06:63:0a:8f:09:8f:
65:75:a2:86:bd:d0:39:74:ba:2e:0e:51:79:3a:c5:
6c:7f:71:9a:fa:c6:96:56:41:49:36:c7:f3:ed:1a:
1d:90:52:d6:90:a4:21:ba:b7:ad:8a:bd:46:7d:86:
57:69:f2:fb:bd:7b:c2:7b:b8:a9:42:78:81:cc:d1:
b4:75:69:dd:cb:7a:29:91:5b:85:d9:a4:53:54:df:
92:d8:08:15:79:13:58:52:3e:c0:b1:15:d7:7a:ac:
4d:10:83:2b:70:8d:a2:c8:cf:4b:92:39:6f:d5:85:
16:a7:60:24:1a:79:97:55:26:62:20:53:85:fb:99:
de:47:2d:d6:57:10:8e:b3:13:93:24:a6:90:46:d9:
65:49:53:a4:d2:f6:4b:ee:a4:be:d6:41:83:dc:56:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:C6:7C:CD:54:F5:85:07:D5:6E:BB:21:30:4A:23:E4:70:2C:F9
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/5AbGfM1U9YUH1W67ITBKI-RwLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.6.0/24
188.255.129.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d7:57:25:44:c0:a4:e2:20:02:e6:ed:e0:0d:87:80:51:21:
99:e8:d6:61:2d:93:84:39:3f:37:86:6e:8a:ba:68:f7:65:ae:
7d:51:27:f7:9e:cb:b7:b5:c2:03:d8:a2:af:13:86:d5:7f:0f:
ed:f9:3c:89:29:25:e6:55:de:58:25:22:d0:9f:22:e5:03:da:
36:1d:e6:c0:37:4a:b9:6b:c8:8e:c9:6a:2f:aa:34:4b:a7:6c:
c9:4e:a3:06:60:c2:43:f8:16:a2:69:00:e6:7c:8c:54:3c:fe:
fc:d6:12:4a:7b:76:5c:d8:d4:e2:68:3e:92:e3:7d:e6:f4:65:
3f:24:30:be:7a:28:ea:73:ad:40:2c:9e:7c:21:3d:b3:d9:2d:
f2:68:1a:0c:a2:ac:ff:cc:f9:c3:c5:01:8d:34:29:92:72:5f:
25:53:74:74:00:47:55:40:98:2c:c2:e4:76:23:fc:f5:35:de:
ed:13:90:52:e4:e3:83:78:56:49:42:65:3c:b3:14:12:7c:65:
5a:a1:ae:b3:3b:e5:a4:51:1c:8f:5f:36:91:1f:0f:46:a9:c7:
a6:aa:83:90:51:c0:6d:6e:9d:c9:f3:b5:13:da:20:14:06:15:
54:0e:4e:3e:2a:28:e9:08:82:c1:c5:e4:b6:b0:df:31:b9:62:
b7:8c:d2:9c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYJYeyvqdOduTWZVRxjLAWwMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwODAxMDgxNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDA2YzY3Y2NkNTRmNTg1MDdkNTZlYmIyMTMwNGEyM2U0NzAyY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+4YSSCnvQe/UJnIKqONKfjev+rr
7PJNS/lb6kRu5i+0KEf0+DI1nmC8XexhrlWI5a6BSuSHEF8ZH6Dy2dKhDrdv3b++
P7s/Ae0WHtvDd+qxlNLdjqVNFngVpOy9wM5jkEEGYwqPCY9ldaKGvdA5dLouDlF5
OsVsf3Ga+saWVkFJNsfz7RodkFLWkKQhuretir1GfYZXafL7vXvCe7ipQniBzNG0
dWndy3opkVuF2aRTVN+S2AgVeRNYUj7AsRXXeqxNEIMrcI2iyM9Lkjlv1YUWp2Ak
GnmXVSZiIFOF+5neRy3WVxCOsxOTJKaQRtllSVOk0vZL7qS+1kGD3FZjIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOQGxnzNVPWFB9VuuyEwSiPkcCz5MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNUFiR2ZNMVU5WVVIMVc2N0lUQktJLVJ3TFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATWkGAwQA
vP+BMA0GCSqGSIb3DQEBCwUAA4IBAQBR11clRMCk4iAC5u3gDYeAUSGZ6NZhLZOE
OT83hm6Kumj3Za59USf3nsu3tcID2KKvE4bVfw/t+TyJKSXmVd5YJSLQnyLlA9o2
HebAN0q5a8iOyWovqjRLp2zJTqMGYMJD+BaiaQDmfIxUPP781hJKe3Zc2NTiaD6S
433m9GU/JDC+eijqc61ALJ58IT2z2S3yaBoMoqz/zPnDxQGNNCmScl8lU3R0AEdV
QJgswuR2I/z1Nd7tE5BS5OODeFZJQmU8sxQSfGVaoa6zO+WkURyPXzaRHw9Gqcem
qoOQUcBtbp3J87UT2iAUBhVUDk4+KijpCILBxeS2sN8xuWK3jNKc
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org