Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZQZpEzYiGfBLEzmr_UWfqdko9os.roa
File: ZQZpEzYiGfBLEzmr_UWfqdko9os.roa (raw, json)
Hash identifier: RVnT1ehdt6cPo/at8Te13fB5k7n/NHDfmhCyMvGNtxw=
Subject key identifier: 65:06:69:13:36:22:19:F0:4B:13:39:AB:FD:45:9F:A9:D9:28:F6:8B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 07AFE52E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZQZpEzYiGfBLEzmr_UWfqdko9os.roa
Signing time: Sat 01 Jan 2022 05:57:02 +0000
ROA not before: Sat 01 Jan 2022 05:57:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128967982 (0x7afe52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 05:57:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65066913362219f04b1339abfd459fa9d928f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:1c:d7:6f:3f:c4:81:9d:56:5d:08:7f:f6:
5c:ed:0d:c1:89:b6:37:93:80:26:de:75:92:5c:11:
d7:b5:94:cf:a0:15:de:03:74:71:1b:4e:30:7c:10:
8f:63:c2:c8:5e:0b:94:4b:ce:b7:ae:49:21:4f:45:
52:7e:bb:9e:3a:43:f8:5c:dc:b3:d7:0a:8b:f5:f4:
82:30:f8:2d:1c:41:2d:01:63:43:42:b3:be:b3:07:
a6:ee:58:cc:3c:30:b9:78:31:ea:20:93:27:b4:2e:
e1:87:de:63:1c:dc:9c:2d:2e:a8:29:ac:03:c2:a8:
05:5a:90:04:7f:5a:02:c1:45:fc:c5:5b:2b:bc:b6:
80:3b:9b:89:2e:1a:28:9a:10:d5:7b:30:aa:17:f1:
b1:2c:9a:50:88:0a:13:01:e1:18:de:8d:aa:e6:96:
50:53:79:9a:06:ac:91:96:fe:2a:31:02:00:72:f4:
2d:fc:f1:75:10:7b:ac:5b:ad:d8:5e:c8:5d:6c:a3:
9e:ac:69:91:f1:a1:60:16:2a:38:d3:22:6a:eb:05:
e2:7c:78:39:eb:91:e2:86:60:58:ba:f2:0f:66:46:
e5:cf:35:92:68:03:ad:b2:24:ae:7d:75:d3:79:b7:
79:60:58:96:df:66:60:0d:4a:68:fa:bb:6c:92:c3:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:69:13:36:22:19:F0:4B:13:39:AB:FD:45:9F:A9:D9:28:F6:8B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ZQZpEzYiGfBLEzmr_UWfqdko9os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7d:77:86:c6:3b:2e:8e:3b:69:0c:cc:3d:9d:52:15:0b:6d:
50:ca:a1:ce:d5:1c:ea:79:f4:e0:bb:ee:a2:1c:83:4a:55:c6:
2a:8b:ae:79:ee:42:95:a5:07:45:b7:0d:ff:a1:74:d3:55:89:
a8:ca:59:99:6c:68:77:01:25:6d:49:1b:85:fd:35:ec:62:d5:
dc:5f:29:f2:c5:81:2c:b3:7e:c8:62:bf:a2:95:3e:d3:80:55:
8c:6d:e2:0d:c9:b6:8e:ce:c1:ba:b1:4b:f0:41:0b:dc:35:41:
db:5a:f5:78:10:a9:d0:cf:04:ae:a2:96:05:24:ab:d1:04:2e:
21:bd:82:6b:c9:0e:a4:3d:5b:4c:8c:b5:36:fd:00:a3:83:db:
48:3d:3d:84:5a:82:03:c9:88:92:fa:4e:48:57:cc:b5:d3:e8:
89:33:e6:e1:6f:0d:9f:de:db:73:e5:19:b1:cb:30:b8:87:9a:
4e:92:8d:31:c9:8f:15:22:0f:22:c0:b6:8c:94:42:c6:c4:fd:
61:a7:49:80:90:74:6d:66:24:b1:26:a5:3a:1e:69:9e:13:b2:
32:5d:64:98:75:c6:83:e3:55:16:4e:7e:a7:5b:7e:8c:86:6c:
3d:fe:46:9d:bf:5b:97:74:9e:6f:4d:34:fd:66:83:41:13:e3:
5f:86:8e:a6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB6/lLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
Zjg0ZTQ3MzhhNzBlYTM5YzA4Y2VmMjEwNDMyYWUzOTllYzdlOTE1MB4XDTIyMDEw
MTA1NTcwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjUwNjY5MTMzNjIy
MTlmMDRiMTMzOWFiZmQ0NTlmYTlkOTI4ZjY4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKudHNdvP8SBnVZdCH/2XO0NwYm2N5OAJt51klwR17WUz6AV
3gN0cRtOMHwQj2PCyF4LlEvOt65JIU9FUn67njpD+Fzcs9cKi/X0gjD4LRxBLQFj
Q0KzvrMHpu5YzDwwuXgx6iCTJ7Qu4YfeYxzcnC0uqCmsA8KoBVqQBH9aAsFF/MVb
K7y2gDubiS4aKJoQ1XswqhfxsSyaUIgKEwHhGN6NquaWUFN5mgaskZb+KjECAHL0
LfzxdRB7rFut2F7IXWyjnqxpkfGhYBYqONMiausF4nx4OeuR4oZgWLryD2ZG5c81
kmgDrbIkrn1103m3eWBYlt9mYA1KaPq7bJLDpz0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRlBmkTNiIZ8EsTOav9RZ+p2Sj2izAfBgNVHSMEGDAWgBRvhORzinDqOcCM
7yEEMq45nsfpFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2I0VGtjNHB3NmpuQWpPOGhCREt1T1o3SDZSVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzYvZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8x
L1pRWnBFellpR2ZCTEV6bXJfVVdmcWRrbzlvcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYv
ZGRmOGIzLTFjMDgtNDk1Yy04ZGRmLWZhZTVkYmVkM2IxYi8xL2I0VGtjNHB3Nmpu
QWpPOGhCREt1T1o3SDZSVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1pBDANBgkqhkiG9w0BAQsFAAOC
AQEAVH13hsY7Lo47aQzMPZ1SFQttUMqhztUc6nn04LvuohyDSlXGKouuee5ClaUH
RbcN/6F001WJqMpZmWxodwElbUkbhf017GLV3F8p8sWBLLN+yGK/opU+04BVjG3i
Dcm2js7BurFL8EEL3DVB21r1eBCp0M8ErqKWBSSr0QQuIb2Ca8kOpD1bTIy1Nv0A
o4PbSD09hFqCA8mIkvpOSFfMtdPoiTPm4W8Nn97bc+UZscswuIeaTpKNMcmPFSIP
IsC2jJRCxsT9YadJgJB0bWYksSalOh5pnhOyMl1kmHXGg+NVFk5+p1t+jIZsPf5G
nb9bl3Seb000/WaDQRPjX4aOpg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org