Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZD2KUOsXCXmTM-NW98dWryff2jA.roa
File: ZD2KUOsXCXmTM-NW98dWryff2jA.roa (raw, json)
Hash identifier: 5C1pLX2RNCLZwFwvYyPOj/WmEeGPjW9nxRho3x8Q6J8=
Subject key identifier: 64:3D:8A:50:EB:17:09:79:93:33:E3:56:F7:C7:56:AF:27:DF:DA:30
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01823C378168054F0B56F7A4892424A9F4C0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZD2KUOsXCXmTM-NW98dWryff2jA.roa
Signing time: Tue 26 Jul 2022 20:34:06 +0000
ROA not before: Tue 26 Jul 2022 20:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 77.92.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:37:81:68:05:4f:0b:56:f7:a4:89:24:24:a9:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 26 20:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643d8a50eb1709799333e356f7c756af27dfda30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:5c:fd:45:0f:13:67:6a:c0:03:12:00:35:
66:59:cb:f7:50:34:dd:c0:85:46:01:70:b5:17:0b:
33:7c:6e:3f:aa:de:6c:c1:f0:c5:ad:41:c3:45:c6:
21:54:33:fb:1d:9d:33:0b:23:89:e1:c6:6c:af:eb:
e2:43:c2:92:94:ee:30:31:d1:aa:ee:33:b3:63:1f:
da:ad:51:0c:9f:40:64:e3:53:cb:98:de:3d:07:2a:
53:be:5e:55:89:62:69:80:04:1c:14:62:42:6f:5a:
4a:b3:6a:77:fa:b8:3e:b9:d5:a5:cd:4a:fa:36:b1:
fa:33:17:33:db:59:af:51:cf:71:5a:ca:30:7e:a2:
bb:57:af:07:3c:d0:c7:bc:9e:0f:96:74:77:bb:f9:
d0:0c:c1:e5:22:5c:9a:8c:38:dd:d2:82:a3:c0:43:
3c:d8:32:59:a2:9f:24:c4:be:f7:60:59:05:26:24:
c4:b1:5f:74:c5:f6:a7:fe:b7:66:a7:34:a2:90:1e:
91:88:08:ab:f7:8d:fe:b2:2a:5d:f2:53:5f:4d:f2:
f7:a9:cd:cc:99:90:c0:ff:5d:45:10:3e:8d:61:de:
30:d5:ac:e1:67:44:a0:87:4c:d0:fc:07:0b:c0:fb:
6a:a9:fb:e3:0a:52:45:74:a9:02:ee:0c:88:cc:84:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3D:8A:50:EB:17:09:79:93:33:E3:56:F7:C7:56:AF:27:DF:DA:30
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ZD2KUOsXCXmTM-NW98dWryff2jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2c:07:d9:ff:bb:97:c9:d2:e0:be:7d:b1:03:64:6c:33:9e:
21:01:88:99:9c:b6:5d:8b:a8:e9:5a:88:3f:25:d0:7b:aa:7d:
db:40:de:59:13:8c:1e:22:a7:0c:60:e5:b4:2f:a1:ce:87:d9:
8c:1b:e4:f4:5d:26:8a:e6:a4:55:26:3c:3b:26:3e:9b:10:00:
9d:46:c8:93:84:ec:55:a8:ee:23:67:01:ef:e7:29:b2:cf:8b:
eb:cf:23:3a:a6:67:72:05:55:62:de:b8:c3:09:8f:63:56:5c:
50:5f:07:eb:b4:54:3c:8e:a1:58:73:d8:4d:db:08:be:7d:25:
83:f9:bd:1e:59:a0:5e:b8:72:ca:82:2b:da:59:4d:59:ef:ea:
e9:59:cd:a9:33:b1:25:7c:f2:bf:95:ea:e0:2a:59:c3:b0:d5:
7e:bd:c8:fe:9d:cc:24:fb:b9:ea:b3:a0:2b:87:52:02:e4:b2:
86:9d:5d:6e:77:96:26:e9:0b:55:f1:1d:4d:22:25:5c:16:6e:
33:af:22:b8:41:71:57:b1:31:7e:e7:cc:91:d8:bd:95:94:9b:
8d:4c:da:ed:43:ad:b6:91:ac:42:8d:92:63:b9:28:84:a1:11:
c2:1c:82:5f:98:5e:43:86:61:a7:3e:03:4e:ca:f0:36:cb:40:
f2:d8:e4:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYI8N4FoBU8LVvekiSQkqfTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIwNzI2MjAzNDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDNkOGE1MGViMTcwOTc5OTMzM2UzNTZmN2M3NTZhZjI3ZGZkYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYpc/UUPE2dqwAMSADVmWcv3UDTd
wIVGAXC1FwszfG4/qt5swfDFrUHDRcYhVDP7HZ0zCyOJ4cZsr+viQ8KSlO4wMdGq
7jOzYx/arVEMn0Bk41PLmN49BypTvl5ViWJpgAQcFGJCb1pKs2p3+rg+udWlzUr6
NrH6Mxcz21mvUc9xWsowfqK7V68HPNDHvJ4PlnR3u/nQDMHlIlyajDjd0oKjwEM8
2DJZop8kxL73YFkFJiTEsV90xfan/rdmpzSikB6RiAir943+sipd8lNfTfL3qc3M
mZDA/11FED6NYd4w1azhZ0Sgh0zQ/AcLwPtqqfvjClJFdKkC7gyIzIS4DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGQ9ilDrFwl5kzPjVvfHVq8n39owMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvWkQyS1VPc1hDWG1UTS1OVzk4ZFdyeWZmMmpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVyYMA0G
CSqGSIb3DQEBCwUAA4IBAQA4LAfZ/7uXydLgvn2xA2RsM54hAYiZnLZdi6jpWog/
JdB7qn3bQN5ZE4weIqcMYOW0L6HOh9mMG+T0XSaK5qRVJjw7Jj6bEACdRsiThOxV
qO4jZwHv5ymyz4vrzyM6pmdyBVVi3rjDCY9jVlxQXwfrtFQ8jqFYc9hN2wi+fSWD
+b0eWaBeuHLKgivaWU1Z7+rpWc2pM7ElfPK/lergKlnDsNV+vcj+ncwk+7nqs6Ar
h1IC5LKGnV1ud5Ym6QtV8R1NIiVcFm4zryK4QXFXsTF+58yR2L2VlJuNTNrtQ622
kaxCjZJjuSiEoRHCHIJfmF5DhmGnPgNOyvA2y0Dy2OQ5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org