Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/W3cumZc4pRWf2qTy5axu4KFwj1E.roa
File: W3cumZc4pRWf2qTy5axu4KFwj1E.roa (raw, json)
Hash identifier: tm1JhGxTdy6rJ12jZ4ynt3zF6e9nqWh4yd4k0EQop1E=
Subject key identifier: 5B:77:2E:99:97:38:A5:15:9F:DA:A4:F2:E5:AC:6E:E0:A1:70:8F:51
Certificate issuer: /CN=1f29868e8487dcb4bc7205163f56b9400983644f
Certificate serial: 04A36357
Authority key identifier: 1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/W3cumZc4pRWf2qTy5axu4KFwj1E.roa
Signing time: Sat 01 Jan 2022 01:57:13 +0000
ROA not before: Sat 01 Jan 2022 01:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42876
IP address blocks: 77.221.224.0/19 maxlen: 19
77.221.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77816663 (0x4a36357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29868e8487dcb4bc7205163f56b9400983644f
Validity
Not Before: Jan 1 01:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b772e999738a5159fdaa4f2e5ac6ee0a1708f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:50:c7:81:e1:d0:be:cf:bb:06:cd:1b:0d:29:
70:eb:cc:86:da:1c:56:58:b7:d2:0f:05:2d:a4:62:
bb:6d:63:70:72:b6:9b:aa:33:a4:3f:ca:f0:0a:59:
f7:58:90:3d:d4:e4:88:0a:53:58:e9:fa:f6:74:6b:
88:3f:75:1d:3e:fc:b9:91:8a:4f:ee:95:e4:6c:46:
05:9f:4d:7e:c4:22:ef:13:78:24:46:dc:46:7a:28:
6c:cc:6e:7c:ea:06:b2:aa:87:bd:5e:db:fc:11:0f:
bb:7f:26:d6:99:47:81:24:d2:6d:3d:03:26:ef:16:
aa:fc:41:e0:19:0b:8b:6f:f4:61:fd:2e:b2:4a:32:
7c:69:4a:84:81:da:63:1b:88:21:0d:1d:ba:3d:d6:
c4:7e:90:d4:6d:c0:b6:1e:fe:35:1b:4a:58:c6:34:
92:c0:1a:65:01:ae:72:bc:9f:57:30:13:16:37:e9:
06:78:7c:9c:4d:02:50:c1:3c:57:bc:f7:3c:37:1e:
bc:83:db:ba:70:d0:8b:c9:0a:4a:8c:5a:07:05:fb:
14:4a:3a:0b:ba:63:dd:be:0a:4b:d0:c6:e2:c5:50:
ad:b8:94:b4:b7:a0:55:f7:1b:cf:aa:27:02:71:eb:
23:34:5a:8c:b7:e4:4d:8d:ec:54:7c:e3:7b:3f:e1:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:77:2E:99:97:38:A5:15:9F:DA:A4:F2:E5:AC:6E:E0:A1:70:8F:51
X509v3 Authority Key Identifier:
keyid:1F:29:86:8E:84:87:DC:B4:BC:72:05:16:3F:56:B9:40:09:83:64:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HymGjoSH3LS8cgUWP1a5QAmDZE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/W3cumZc4pRWf2qTy5axu4KFwj1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2ab6a4-f0b4-40b0-a276-6000fcc5db36/1/HymGjoSH3LS8cgUWP1a5QAmDZE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
51:ed:75:68:1e:6c:8c:b9:21:fb:4e:82:2d:21:41:a6:9a:d6:
97:bc:eb:44:74:65:f7:cb:62:17:f0:56:33:c7:ea:6d:78:43:
3b:a1:65:c7:c7:8e:eb:9f:bd:eb:ff:e0:16:6d:ca:de:9f:04:
ac:e3:60:36:e0:73:7c:af:58:7f:c9:09:54:d3:67:7a:2a:3b:
68:ac:2f:33:08:27:d3:4a:7e:62:43:f2:45:ea:21:e5:06:b4:
4e:9e:c1:29:36:88:9f:c5:3c:1b:e4:b9:39:f5:46:52:22:36:
c2:05:a7:dc:97:34:d7:70:41:d3:fc:da:3d:be:84:80:1e:e3:
37:d1:3d:12:e5:f5:8f:9f:9e:38:11:02:8d:67:d8:e7:65:d6:
4d:86:2a:76:9f:f2:02:82:83:50:aa:af:0c:cc:ce:18:0c:26:
11:84:8a:c1:7a:b2:e9:27:4b:71:da:46:4b:d5:f7:81:cc:b6:
51:13:78:35:8f:5a:3f:90:fd:1e:72:09:e9:41:da:d5:23:2f:
4d:0a:86:cf:77:24:00:d4:7c:2b:6d:68:82:f6:98:b4:90:04:
b3:23:7c:8c:72:6c:7f:fe:82:dd:2d:30:09:f7:95:6c:7f:3e:
22:23:15:79:66:b3:8a:3d:3e:df:9e:d7:a0:52:d1:5f:e4:29:
a2:f5:89:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBKNjVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZjI5ODY4ZTg0ODdkY2I0YmM3MjA1MTYzZjU2Yjk0MDA5ODM2NDRmMB4XDTIyMDEw
MTAxNTcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWI3NzJlOTk5NzM4
YTUxNTlmZGFhNGYyZTVhYzZlZTBhMTcwOGY1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5Qx4Hh0L7PuwbNGw0pcOvMhtocVli30g8FLaRiu21jcHK2
m6ozpD/K8ApZ91iQPdTkiApTWOn69nRriD91HT78uZGKT+6V5GxGBZ9NfsQi7xN4
JEbcRnoobMxufOoGsqqHvV7b/BEPu38m1plHgSTSbT0DJu8WqvxB4BkLi2/0Yf0u
skoyfGlKhIHaYxuIIQ0duj3WxH6Q1G3Ath7+NRtKWMY0ksAaZQGucryfVzATFjfp
Bnh8nE0CUME8V7z3PDcevIPbunDQi8kKSoxaBwX7FEo6C7pj3b4KS9DG4sVQrbiU
tLegVfcbz6onAnHrIzRajLfkTY3sVHzjez/hQw0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRbdy6ZlzilFZ/apPLlrG7goXCPUTAfBgNVHSMEGDAWgBQfKYaOhIfctLxy
BRY/VrlACYNkTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0h5bUdqb1NIM0xTOGNnVVdQMWE1UUFtRFpFOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzgvMmFiNmE0LWYwYjQtNDBiMC1hMjc2LTYwMDBmY2M1ZGIzNi8x
L1czY3VtWmM0cFJXZjJxVHk1YXh1NEtGd2oxRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgv
MmFiNmE0LWYwYjQtNDBiMC1hMjc2LTYwMDBmY2M1ZGIzNi8xL0h5bUdqb1NIM0xT
OGNnVVdQMWE1UUFtRFpFOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBU3d4DANBgkqhkiG9w0BAQsFAAOC
AQEAUe11aB5sjLkh+06CLSFBpprWl7zrRHRl98tiF/BWM8fqbXhDO6Flx8eO65+9
6//gFm3K3p8ErONgNuBzfK9Yf8kJVNNneio7aKwvMwgn00p+YkPyReoh5Qa0Tp7B
KTaIn8U8G+S5OfVGUiI2wgWn3Jc013BB0/zaPb6EgB7jN9E9EuX1j5+eOBECjWfY
52XWTYYqdp/yAoKDUKqvDMzOGAwmEYSKwXqy6SdLcdpGS9X3gcy2URN4NY9aP5D9
HnIJ6UHa1SMvTQqGz3ckANR8K21ogvaYtJAEsyN8jHJsf/6C3S0wCfeVbH8+IiMV
eWazij0+357XoFLRX+QpovWJRg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:23 2023 by rpki-client on console-ams.rpki-client.org