Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vx95GD8GxEdSc0Gj1yOqvlQVZDc.roa
File: Vx95GD8GxEdSc0Gj1yOqvlQVZDc.roa (raw, json)
Hash identifier: iQH/uKIbKY4bpIYjgdH+pAUIPV/fZrNwF/cAJn1o2Hc=
Subject key identifier: 57:1F:79:18:3F:06:C4:47:52:73:41:A3:D7:23:AA:BE:54:15:64:37
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01842D1351359A98BDA267E157DDB0562292
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vx95GD8GxEdSc0Gj1yOqvlQVZDc.roa
Signing time: Mon 31 Oct 2022 08:05:51 +0000
ROA not before: Mon 31 Oct 2022 08:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 188.255.140.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:13:51:35:9a:98:bd:a2:67:e1:57:dd:b0:56:22:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 31 08:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=571f79183f06c447527341a3d723aabe54156437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:39:f5:54:21:9f:0e:a1:2d:94:8b:f8:93:
8f:65:fd:dd:e7:55:36:d5:39:95:a6:7c:b0:1b:b0:
bc:3e:48:81:a9:2a:68:23:ef:44:db:f3:29:a9:a8:
e1:86:5b:33:ca:bf:c5:39:53:48:7e:bf:ad:c8:68:
59:45:d0:0b:14:fb:2d:21:65:4d:1d:64:a2:cc:89:
3f:72:bc:91:99:a4:a7:9e:3b:0f:e6:7e:b4:b6:49:
bc:cf:53:74:fa:a5:2b:50:35:ac:a8:64:cc:bb:50:
62:6b:34:ce:42:ce:f0:ff:d4:96:c8:ba:5b:3b:49:
59:b3:3d:0a:ab:35:bd:9a:bb:3d:2d:91:ec:15:41:
6d:a2:21:36:c1:3a:17:2c:99:57:7a:ec:eb:14:39:
23:74:03:85:b9:42:ae:31:9c:59:f4:b5:3b:96:9b:
0d:67:d4:3f:7b:fc:d4:4d:34:07:48:37:05:78:88:
aa:66:db:41:5b:9c:19:fa:ef:6f:b0:b4:84:b8:09:
01:b7:4c:1b:3b:97:96:0f:d5:8d:25:68:86:aa:c6:
cd:b4:c7:12:25:42:78:cb:88:77:68:85:8d:67:01:
0a:e0:f4:dc:03:95:24:18:fe:5d:3a:a5:1a:98:fd:
7e:18:51:91:63:01:f3:38:3b:a5:f6:16:c8:46:68:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1F:79:18:3F:06:C4:47:52:73:41:A3:D7:23:AA:BE:54:15:64:37
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Vx95GD8GxEdSc0Gj1yOqvlQVZDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
188.255.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:90:7b:b3:17:7f:e2:b8:2f:ea:33:cd:eb:c1:a5:17:74:12:
98:20:fc:bb:67:f7:9e:bf:0d:71:ab:19:aa:85:41:44:a3:ab:
b1:c4:df:c5:91:88:05:3c:56:b9:b4:3d:71:eb:12:96:4d:7b:
5d:4d:dd:fc:53:8b:f2:b6:f5:e2:6c:56:da:86:13:bd:eb:26:
e5:de:a5:6d:f8:f2:15:27:14:b4:32:89:bf:92:99:50:22:23:
c0:5b:22:84:ee:ce:6d:2e:a7:bf:02:d7:04:12:72:c0:68:af:
42:e5:31:9c:00:02:61:d0:de:7a:5b:69:8e:9f:75:3a:eb:0b:
de:00:e1:73:38:7b:8a:4b:b5:dc:0a:cd:5e:7e:9f:f6:3c:f9:
ff:50:62:f6:14:97:9a:da:d4:24:84:ff:69:ce:ac:df:87:27:
df:78:c6:1d:43:fe:cf:aa:3b:40:2e:de:38:ec:21:47:31:cf:
7f:41:7f:27:08:40:0e:02:47:e6:52:45:15:96:c7:a3:28:15:
a6:a9:74:2e:76:26:68:e4:a1:99:6c:1e:f2:27:b5:ca:6d:77:
9a:d4:c3:26:d7:89:5d:23:2d:5f:d5:78:6c:11:49:02:41:db:
c2:b1:4f:9f:03:7c:39:00:18:8b:a9:5b:bb:16:47:d8:06:27:
40:35:2d:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQtE1E1mpi9omfhV92wViKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIxMDMxMDgwNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzFmNzkxODNmMDZjNDQ3NTI3MzQxYTNkNzIzYWFiZTU0MTU2NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ks59VQhnw6hLZSL+JOPZf3d51U2
1TmVpnywG7C8PkiBqSpoI+9E2/Mpqajhhlszyr/FOVNIfr+tyGhZRdALFPstIWVN
HWSizIk/cryRmaSnnjsP5n60tkm8z1N0+qUrUDWsqGTMu1BiazTOQs7w/9SWyLpb
O0lZsz0KqzW9mrs9LZHsFUFtoiE2wToXLJlXeuzrFDkjdAOFuUKuMZxZ9LU7lpsN
Z9Q/e/zUTTQHSDcFeIiqZttBW5wZ+u9vsLSEuAkBt0wbO5eWD9WNJWiGqsbNtMcS
JUJ4y4h3aIWNZwEK4PTcA5UkGP5dOqUamP1+GFGRYwHzODul9hbIRmh/OwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFcfeRg/BsRHUnNBo9cjqr5UFWQ3MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvVng5NUdEOEd4RWRTYzBHajF5T3F2bFFWWkRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATWkIAwQA
vP+MMA0GCSqGSIb3DQEBCwUAA4IBAQB6kHuzF3/iuC/qM83rwaUXdBKYIPy7Z/ee
vw1xqxmqhUFEo6uxxN/FkYgFPFa5tD1x6xKWTXtdTd38U4vytvXibFbahhO96ybl
3qVt+PIVJxS0Mom/kplQIiPAWyKE7s5tLqe/AtcEEnLAaK9C5TGcAAJh0N56W2mO
n3U66wveAOFzOHuKS7XcCs1efp/2PPn/UGL2FJea2tQkhP9pzqzfhyffeMYdQ/7P
qjtALt447CFHMc9/QX8nCEAOAkfmUkUVlsejKBWmqXQudiZo5KGZbB7yJ7XKbXea
1MMm14ldIy1f1XhsEUkCQdvCsU+fA3w5ABiLqVu7FkfYBidANS1X
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:04 2024 by rpki-client on console-ams.rpki-client.org