Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WBFmMvADieHrLyxZ1xzr8AxrY3A.roa
File: WBFmMvADieHrLyxZ1xzr8AxrY3A.roa (raw, json)
Hash identifier: YJsPzNn22wNURUkJ9h50d2j3HXPiBNzUqf007562vP0=
Subject key identifier: 58:11:66:32:F0:03:89:E1:EB:2F:2C:59:D7:1C:EB:F0:0C:6B:63:70
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B22B5DC
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WBFmMvADieHrLyxZ1xzr8AxrY3A.roa
Signing time: Sat 01 Jan 2022 13:58:19 +0000
ROA not before: Sat 01 Jan 2022 13:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210959
IP address blocks: 77.65.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723695068 (0x2b22b5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58116632f00389e1eb2f2c59d71cebf00c6b6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:7a:49:f8:dc:b1:36:2a:99:c1:2d:6b:46:
a6:e4:c2:cc:12:15:2d:27:34:ed:00:49:c2:a2:98:
0d:7d:2b:cc:58:f3:18:b9:86:aa:43:83:85:c3:20:
ba:e2:7c:7e:a2:4a:27:91:a4:77:b5:b0:44:18:0e:
b5:e3:79:7f:46:a8:e5:92:22:23:c7:06:80:e9:aa:
e3:d6:e4:36:e3:69:d1:04:21:d0:c3:06:9f:d7:b9:
30:d8:02:14:a0:f1:a6:14:2d:b8:28:cc:b1:32:8c:
57:8c:10:38:ce:e0:85:a2:8f:21:35:2b:cc:2e:f0:
e0:d8:8d:8a:72:ec:43:7c:bb:2e:5c:ce:94:da:e0:
45:16:c9:07:e4:ad:54:e5:a9:6b:f1:e0:1b:3f:be:
87:03:ce:92:09:44:55:9a:96:b2:0b:64:3c:8c:6e:
ae:8d:de:8d:dc:f6:cb:29:80:2c:71:7a:33:93:e2:
9d:f5:0d:1f:8f:8b:17:0f:cf:bc:26:45:e9:68:a4:
28:cf:56:c4:34:58:69:44:5e:b6:61:2f:31:34:20:
56:77:18:8c:a6:07:9b:75:04:a3:20:f6:ed:f3:01:
8d:29:96:54:c4:52:ae:f9:2d:3c:2b:5a:f7:d8:d9:
e0:1a:ba:c3:8e:6a:16:23:13:bb:c5:22:17:b7:14:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:66:32:F0:03:89:E1:EB:2F:2C:59:D7:1C:EB:F0:0C:6B:63:70
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/WBFmMvADieHrLyxZ1xzr8AxrY3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.206.0/23
Signature Algorithm: sha256WithRSAEncryption
47:da:ad:ce:ce:22:b0:7e:0a:5d:6c:63:e4:d7:a5:c5:cf:ec:
80:d0:e4:d8:4c:24:46:c1:1b:15:fc:98:6e:4e:90:33:40:eb:
f2:34:70:fb:d6:f7:28:5e:e2:0d:a7:bb:be:a4:d4:92:0d:b7:
3d:7d:c3:5d:71:63:da:96:94:e6:81:ba:fd:12:10:9b:8e:27:
64:c0:59:1f:9e:f2:6e:b6:4a:cd:1b:61:31:ad:ad:ba:73:41:
0e:cd:d1:ab:ba:89:54:3a:6e:7b:24:da:dc:9d:cd:49:3c:18:
76:b8:a6:d1:17:e1:a9:61:fa:fe:7f:a0:aa:67:3b:82:6d:b2:
04:69:8c:92:c6:d3:c3:86:cb:06:b9:79:f6:c8:32:de:5c:ae:
ab:17:90:c1:a3:bb:73:f3:ef:ef:8a:c7:72:8f:1b:fd:39:0d:
87:d8:f4:ed:ed:5d:ff:21:13:77:b5:24:01:d7:47:89:8c:6d:
56:42:23:20:86:b2:57:ce:02:38:e3:6e:62:86:0c:c8:ea:60:
35:2c:74:d5:d0:46:ee:69:b8:8e:59:76:32:f0:74:a2:4c:29:
22:a7:14:2e:ad:54:1f:a6:87:41:ab:e3:b9:fc:bd:3e:01:cf:
2b:d5:73:ed:d1:b0:b6:f3:1b:35:f5:c3:28:95:c2:19:1c:a8:
d2:af:08:32
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKyK13DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTgxMTY2MzJmMDAz
ODllMWViMmYyYzU5ZDcxY2ViZjAwYzZiNjM3MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8/ekn43LE2KpnBLWtGpuTCzBIVLSc07QBJwqKYDX0rzFjz
GLmGqkODhcMguuJ8fqJKJ5Gkd7WwRBgOteN5f0ao5ZIiI8cGgOmq49bkNuNp0QQh
0MMGn9e5MNgCFKDxphQtuCjMsTKMV4wQOM7ghaKPITUrzC7w4NiNinLsQ3y7LlzO
lNrgRRbJB+StVOWpa/HgGz++hwPOkglEVZqWsgtkPIxuro3ejdz2yymALHF6M5Pi
nfUNH4+LFw/PvCZF6WikKM9WxDRYaURetmEvMTQgVncYjKYHm3UEoyD27fMBjSmW
VMRSrvktPCta99jZ4Bq6w45qFiMTu8UiF7cUdq8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRYEWYy8AOJ4esvLFnXHOvwDGtjcDAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L1dCRm1NdkFEaWVIckx5eFoxeHpyOEF4clkzQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAU1BzjANBgkqhkiG9w0BAQsFAAOC
AQEAR9qtzs4isH4KXWxj5Nelxc/sgNDk2EwkRsEbFfyYbk6QM0Dr8jRw+9b3KF7i
Dae7vqTUkg23PX3DXXFj2paU5oG6/RIQm44nZMBZH57ybrZKzRthMa2tunNBDs3R
q7qJVDpueyTa3J3NSTwYdrim0RfhqWH6/n+gqmc7gm2yBGmMksbTw4bLBrl59sgy
3lyuqxeQwaO7c/Pv74rHco8b/TkNh9j07e1d/yETd7UkAddHiYxtVkIjIIayV84C
OONuYoYMyOpgNSx01dBG7mm4jll2MvB0okwpIqcULq1UH6aHQavjufy9PgHPK9Vz
7dGwtvMbNfXDKJXCGRyo0q8IMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org