Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M31h9ZKjejENIhci9b4QArzuhmk.roa
File: M31h9ZKjejENIhci9b4QArzuhmk.roa (raw, json)
Hash identifier: 9Rq6KfO8IipOxovq17ZLRnvsuIvFrmcrc0UjjoM9Pmc=
Subject key identifier: 33:7D:61:F5:92:A3:7A:31:0D:22:17:22:F5:BE:10:02:BC:EE:86:69
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 09C93E30
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M31h9ZKjejENIhci9b4QArzuhmk.roa
Signing time: Thu 30 Jun 2022 10:07:05 +0000
ROA not before: Thu 30 Jun 2022 10:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 212.69.0.0/24 maxlen: 24
188.255.140.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164183600 (0x9c93e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 30 10:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=337d61f592a37a310d221722f5be1002bcee8669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:ae:01:fb:c4:f6:f1:a0:fd:2d:ef:f7:d0:
e5:a4:1d:3e:43:4d:52:08:dc:aa:6a:a2:67:94:09:
b7:61:af:f3:1e:ea:ab:59:bf:c1:85:a6:a5:0a:5d:
d0:56:c2:a5:22:c2:20:18:33:c1:45:cb:1f:f3:f4:
1d:e9:a1:67:34:2d:9b:e0:ec:89:e0:21:d9:4b:f6:
05:be:1a:29:25:0c:ac:e2:64:e9:65:de:fe:e1:21:
dd:f6:ba:dc:59:df:41:59:48:ca:fe:52:5c:62:e4:
8f:74:aa:95:3e:51:23:19:5f:de:1e:66:4d:bf:14:
d9:ca:a8:d8:e3:69:5b:9b:74:a4:97:60:71:28:03:
4d:18:58:94:eb:4b:4b:97:f9:7b:a1:92:34:bb:f9:
a4:75:6c:5c:79:8f:c5:2e:1c:96:10:70:22:49:ac:
cb:67:86:08:f2:84:ca:3d:af:9b:23:37:bd:33:1d:
62:42:f5:4b:b5:3a:cd:58:67:57:d4:24:fb:f9:f7:
f5:b8:17:ce:72:77:6e:e7:bc:68:4e:0d:89:03:c9:
0f:07:bb:f7:a5:cd:f3:0f:fb:f2:e5:6d:40:58:c8:
41:3c:37:ff:5d:94:5d:dd:e8:6b:41:b7:e2:8f:d7:
e6:7e:b9:0d:7e:3b:85:21:a3:39:75:56:d5:a9:1e:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:61:F5:92:A3:7A:31:0D:22:17:22:F5:BE:10:02:BC:EE:86:69
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/M31h9ZKjejENIhci9b4QArzuhmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
188.255.140.0/24
212.69.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d7:77:64:95:a6:f9:00:5c:d7:03:18:b1:eb:a1:3a:97:0a:
bd:bd:77:1b:0c:37:c4:ad:47:44:07:9c:c0:0d:d1:4d:b1:d7:
21:3e:e9:57:f8:1c:c8:1e:5f:5e:db:fc:ce:dd:4a:e5:58:f4:
38:9e:31:13:ff:78:15:83:f7:28:43:c0:e6:49:86:0f:51:78:
01:fd:76:39:28:59:85:45:23:3f:94:d2:91:20:4d:ae:e3:0a:
41:e3:79:95:42:3e:96:26:05:a1:40:d7:95:5d:3e:ed:b0:17:
35:d9:c3:b3:16:13:25:af:23:45:28:5f:11:31:c0:d3:8c:df:
45:f1:28:34:3c:2c:28:45:c3:55:96:30:0b:b9:bc:eb:f3:26:
1a:1f:e2:2f:98:fd:a6:60:d1:3f:cc:30:df:63:d5:2f:a6:da:
0d:48:6e:3f:6a:ab:8d:c5:00:cf:fd:03:35:9a:08:c4:e3:00:
bb:7f:6e:22:96:fa:1a:66:fe:9f:95:55:18:60:85:a5:db:51:
b7:9f:98:bd:b2:a1:d1:78:87:23:17:4b:7f:6c:f5:dd:96:18:
02:73:8f:1a:d0:86:9c:c2:6c:f2:c6:20:26:f0:cb:8d:8f:5a:
6e:92:02:c6:01:e7:48:00:16:f6:4c:a6:25:56:29:1c:8a:50:
84:d8:99:25
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECck+MDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDYz
MDEwMDcwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzM3ZDYxZjU5MmEz
N2EzMTBkMjIxNzIyZjViZTEwMDJiY2VlODY2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+8rgH7xPbxoP0t7/fQ5aQdPkNNUgjcqmqiZ5QJt2Gv8x7q
q1m/wYWmpQpd0FbCpSLCIBgzwUXLH/P0HemhZzQtm+DsieAh2Uv2Bb4aKSUMrOJk
6WXe/uEh3fa63FnfQVlIyv5SXGLkj3SqlT5RIxlf3h5mTb8U2cqo2ONpW5t0pJdg
cSgDTRhYlOtLS5f5e6GSNLv5pHVsXHmPxS4clhBwIkmsy2eGCPKEyj2vmyM3vTMd
YkL1S7U6zVhnV9Qk+/n39bgXznJ3bue8aE4NiQPJDwe796XN8w/78uVtQFjIQTw3
/12UXd3oa0G34o/X5n65DX47hSGjOXVW1akeeJkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQzfWH1kqN6MQ0iFyL1vhACvO6GaTAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L00zMWg5WktqZWpFTkloY2k5YjRRQXJ6dWhtay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE1pCAMEALz/jAMEANRFADANBgkq
hkiG9w0BAQsFAAOCAQEAjtd3ZJWm+QBc1wMYseuhOpcKvb13Gww3xK1HRAecwA3R
TbHXIT7pV/gcyB5fXtv8zt1K5Vj0OJ4xE/94FYP3KEPA5kmGD1F4Af12OShZhUUj
P5TSkSBNruMKQeN5lUI+liYFoUDXlV0+7bAXNdnDsxYTJa8jRShfETHA04zfRfEo
NDwsKEXDVZYwC7m86/MmGh/iL5j9pmDRP8ww32PVL6baDUhuP2qrjcUAz/0DNZoI
xOMAu39uIpb6Gmb+n5VVGGCFpdtRt5+YvbKh0XiHIxdLf2z13ZYYAnOPGtCGnMJs
8sYgJvDLjY9abpICxgHnSAAW9kymJVYpHIpQhNiZJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org