Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9nOOEqFS1uuOMTIX8txK_Fl-iJw.roa
File: 9nOOEqFS1uuOMTIX8txK_Fl-iJw.roa (raw, json)
Hash identifier: qeTiXG+AL2Ijbnb/t4A106b6A9hIzRpIr+Xyxl7KszQ=
Subject key identifier: F6:73:8E:12:A1:52:D6:EB:8E:31:32:17:F2:DC:4A:FC:59:7E:88:9C
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 029A3C08
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9nOOEqFS1uuOMTIX8txK_Fl-iJw.roa
Signing time: Wed 23 Feb 2022 20:30:36 +0000
ROA not before: Wed 23 Feb 2022 20:30:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 198.14.16.0/20 maxlen: 24
77.223.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43662344 (0x29a3c08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Feb 23 20:30:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6738e12a152d6eb8e313217f2dc4afc597e889c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:82:8f:3b:21:00:28:4a:b4:18:09:49:46:
db:59:f8:92:14:a2:2e:10:66:34:fd:76:c3:89:90:
e9:b5:a3:d5:ed:c9:54:22:a9:79:16:84:db:cc:19:
7c:5b:eb:8a:b0:60:ea:c7:58:a1:94:1e:d7:a5:b8:
cd:8e:18:8e:91:43:64:42:98:fe:f3:8d:00:ab:62:
81:15:c3:0b:5a:89:72:6e:f7:88:d7:00:c4:a5:72:
f2:43:17:e1:2d:1e:f0:b8:de:25:15:47:7a:86:69:
0d:24:8f:8d:ad:03:70:61:5c:b2:cf:18:4f:07:e8:
ab:99:a3:00:12:47:59:44:6e:42:e6:f2:02:87:57:
dd:9b:e1:cc:9e:4e:35:e4:9d:cc:4a:2a:ec:74:52:
53:8a:02:b1:e2:40:9b:26:f5:45:a8:d0:84:2e:c0:
7c:88:89:87:5d:78:eb:64:4a:fd:83:ff:5d:41:b1:
ad:b3:c4:51:4f:56:c2:a9:22:6d:71:67:05:77:ea:
77:8c:bd:25:8d:24:48:34:0c:d6:e7:4c:1b:27:98:
4d:1f:62:58:09:98:1e:2b:ff:3f:79:b0:35:c5:03:
14:6d:d0:ca:00:3c:9b:5e:bc:3c:19:79:e5:83:b3:
3e:aa:0c:7e:81:f2:61:e8:8e:7b:d9:fa:52:5a:58:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:73:8E:12:A1:52:D6:EB:8E:31:32:17:F2:DC:4A:FC:59:7E:88:9C
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9nOOEqFS1uuOMTIX8txK_Fl-iJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.192.0/21
198.14.16.0/20
Signature Algorithm: sha256WithRSAEncryption
58:ff:05:e0:35:41:51:68:a6:de:c3:75:00:71:97:88:03:2a:
28:c6:47:e3:40:43:51:05:39:a9:27:08:41:ba:4d:8d:d3:c7:
1a:f1:fc:a7:c6:b2:d6:9d:3c:e6:80:6a:2a:2d:eb:5b:e5:8b:
20:3d:8f:da:72:e9:e2:81:8d:8f:64:a2:3f:88:15:c7:bb:1f:
0c:99:97:45:29:90:bf:28:db:90:62:26:61:93:3a:43:fb:0b:
f0:cc:f3:c3:0d:bd:f2:de:85:5d:c6:9e:4d:a2:ae:eb:80:09:
b4:38:c9:60:eb:b3:a1:eb:39:ec:00:35:05:41:b0:20:95:99:
14:c4:d5:f2:51:9f:a9:fc:86:03:2a:69:da:e4:23:f3:d3:db:
bd:ba:c7:8b:d7:73:8e:38:d3:ed:74:62:f4:aa:7a:3d:bc:4d:
b5:ed:80:98:d0:69:21:88:ac:e6:4b:f2:8e:ee:aa:04:cb:d5:
7f:77:2d:d2:98:d8:eb:cf:51:0f:38:f2:88:a6:47:ee:67:ac:
12:90:28:15:30:7d:c8:34:b0:41:ab:3f:df:9d:7f:89:bd:05:
d1:69:0d:88:33:74:54:50:99:dc:d9:da:6c:ce:c2:53:13:01:
32:74:89:b0:85:2d:38:c8:eb:f0:2a:52:8d:20:59:0c:c8:f9:
d2:f2:25:bd
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEApo8CDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NWM5NjA2NTA5Mzk5OGJhNDJjZmJhMTFiZjBkMTdkM2FjNDAzZDQwMB4XDTIyMDIy
MzIwMzAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY3MzhlMTJhMTUy
ZDZlYjhlMzEzMjE3ZjJkYzRhZmM1OTdlODg5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7Xgo87IQAoSrQYCUlG21n4khSiLhBmNP12w4mQ6bWj1e3J
VCKpeRaE28wZfFvrirBg6sdYoZQe16W4zY4YjpFDZEKY/vONAKtigRXDC1qJcm73
iNcAxKVy8kMX4S0e8LjeJRVHeoZpDSSPja0DcGFcss8YTwfoq5mjABJHWURuQuby
AodX3ZvhzJ5ONeSdzEoq7HRSU4oCseJAmyb1RajQhC7AfIiJh11462RK/YP/XUGx
rbPEUU9WwqkibXFnBXfqd4y9JY0kSDQM1udMGyeYTR9iWAmYHiv/P3mwNcUDFG3Q
ygA8m168PBl55YOzPqoMfoHyYeiOe9n6UlpYPWMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT2c44SoVLW644xMhfy3Er8WX6InDAfBgNVHSMEGDAWgBQ1yWBlCTmYukLP
uhG/DRfTrEA9QDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05jbGdaUWs1bUxwQ3o3b1J2dzBYMDZ4QVBVQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvNjI3NjRiLTlhYTYtNGYxMi1hNzFjLTZiYWMzNDk4NzAxOS8x
LzluT09FcUZTMXV1T01USVg4dHhLX0ZsLWlKdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
NjI3NjRiLTlhYTYtNGYxMi1hNzFjLTZiYWMzNDk4NzAxOS8xL05jbGdaUWs1bUxw
Q3o3b1J2dzBYMDZ4QVBVQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA03fwAMEBMYOEDANBgkqhkiG9w0B
AQsFAAOCAQEAWP8F4DVBUWim3sN1AHGXiAMqKMZH40BDUQU5qScIQbpNjdPHGvH8
p8ay1p085oBqKi3rW+WLID2P2nLp4oGNj2SiP4gVx7sfDJmXRSmQvyjbkGImYZM6
Q/sL8Mzzww298t6FXcaeTaKu64AJtDjJYOuzoes57AA1BUGwIJWZFMTV8lGfqfyG
Aypp2uQj89PbvbrHi9dzjjjT7XRi9Kp6PbxNte2AmNBpIYis5kvyju6qBMvVf3ct
0pjY689RDzjyiKZH7mesEpAoFTB9yDSwQas/351/ib0F0WkNiDN0VFCZ3NnabM7C
UxMBMnSJsIUtOMjr8CpSjSBZDMj50vIlvQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:41 2023 by rpki-client on console-fra.rpki-client.org