Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/9uxuM96jz7cUfaMjtNPGoqngC2I.roa
File: 9uxuM96jz7cUfaMjtNPGoqngC2I.roa (raw, json)
Hash identifier: 5BIJVfFnC8a3euqroIzwsvMIwRxbebpd98kZ3fz0JxM=
Subject key identifier: F6:EC:6E:33:DE:A3:CF:B7:14:7D:A3:23:B4:D3:C6:A2:A9:E0:0B:62
Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial: 0182018FFD4B3200308BDD03948DA5C5E6F4
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/9uxuM96jz7cUfaMjtNPGoqngC2I.roa
Signing time: Fri 15 Jul 2022 11:13:09 +0000
ROA not before: Fri 15 Jul 2022 11:13:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59835
IP address blocks: 77.80.128.0/17 maxlen: 17
77.80.253.0/24 maxlen: 24
77.80.255.0/24 maxlen: 24
185.69.168.0/24 maxlen: 24
2a05:2240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:8f:fd:4b:32:00:30:8b:dd:03:94:8d:a5:c5:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
Validity
Not Before: Jul 15 11:13:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6ec6e33dea3cfb7147da323b4d3c6a2a9e00b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:73:19:2e:17:7b:91:54:87:57:28:50:a2:01:
a3:7b:c2:bf:fc:5b:d1:60:a2:17:68:14:4b:9b:d8:
f2:02:e1:4e:6a:0f:38:ae:5e:44:83:b4:ec:f2:28:
10:83:5b:6f:d7:88:0c:74:65:5c:13:92:b5:dd:a0:
f7:e2:6d:f5:39:b5:d2:3c:fc:63:ea:8e:b9:77:90:
d3:2d:92:ca:f3:e4:5a:c1:c7:5f:6d:4e:64:d3:b1:
1b:6c:eb:cc:03:5f:1f:ff:74:81:b1:87:f2:e0:5a:
bc:b7:27:2a:64:14:65:0b:b6:19:fb:96:43:42:28:
7d:f1:24:d5:11:d1:b5:1e:21:56:0c:52:cf:a6:62:
25:a1:b1:62:86:a6:e8:5c:9d:53:3d:26:f0:8f:f6:
6d:50:62:a3:67:c7:0b:5e:46:f7:1c:cb:b8:e0:6e:
c6:67:78:72:b9:44:8d:a1:2c:1a:8a:4e:d9:9a:d1:
4c:36:3a:d3:36:5c:4f:0c:65:a9:24:04:44:9c:bd:
6f:f8:40:90:03:ca:46:06:a2:db:bc:14:6a:b8:74:
bc:da:2f:3c:c7:9a:ba:e5:37:01:4e:12:16:f8:7c:
6e:21:9e:6a:22:56:b6:b7:bb:06:87:5b:9f:44:f2:
c1:2b:67:d2:58:be:fc:7d:ed:b6:15:66:30:ba:c6:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EC:6E:33:DE:A3:CF:B7:14:7D:A3:23:B4:D3:C6:A2:A9:E0:0B:62
X509v3 Authority Key Identifier:
keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/9uxuM96jz7cUfaMjtNPGoqngC2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.80.128.0/17
185.69.168.0/24
IPv6:
2a05:2240::/32
Signature Algorithm: sha256WithRSAEncryption
4b:2e:8c:10:a6:b8:6b:a7:1e:a3:4c:41:df:5f:ea:18:dc:18:
d2:5b:b2:29:da:ee:35:56:b0:d9:2f:84:39:61:93:fd:02:a0:
4b:c8:99:76:bd:4f:08:41:44:e6:99:4f:3e:a4:03:72:bd:7f:
51:da:94:ab:dc:65:67:c2:59:8d:30:f5:c8:0f:6b:98:fd:58:
95:7b:4e:68:c8:9e:dd:5f:79:f8:5f:da:fd:c9:9f:3e:38:19:
d5:3f:cb:6d:59:39:55:be:85:c1:eb:11:44:d5:39:3f:50:0d:
4e:de:96:e2:7c:0a:24:9a:7f:06:5b:12:aa:fc:fd:e0:22:b7:
67:65:e5:37:90:ec:5c:fa:bd:a4:20:3c:f7:04:a2:f9:7a:76:
f5:50:9e:67:cf:a9:33:e2:49:4e:93:16:6b:6f:3d:7a:cb:f0:
75:48:7c:4b:0a:d1:41:20:e7:1a:d7:9b:b2:e7:bb:b2:8c:ee:
13:d2:c5:7c:8e:0b:87:2f:e9:4c:68:68:10:48:94:7f:ab:7c:
06:df:b5:70:a0:9a:d5:f4:0f:3a:b5:14:9f:2d:f8:be:bf:c1:
35:e2:7d:fc:84:b3:78:dc:7e:b2:ef:e3:8c:85:4a:d7:7e:b6:
09:7f:8f:bc:37:49:13:e3:f8:b4:c0:f7:01:26:84:dd:36:73:
9b:9e:c3:7d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYIBj/1LMgAwi90DlI2lxeb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw
M2YyNzcwHhcNMjIwNzE1MTExMzA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmVjNmUzM2RlYTNjZmI3MTQ3ZGEzMjNiNGQzYzZhMmE5ZTAwYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XMZLhd7kVSHVyhQogGje8K//FvR
YKIXaBRLm9jyAuFOag84rl5Eg7Ts8igQg1tv14gMdGVcE5K13aD34m31ObXSPPxj
6o65d5DTLZLK8+RawcdfbU5k07EbbOvMA18f/3SBsYfy4Fq8tycqZBRlC7YZ+5ZD
Qih98STVEdG1HiFWDFLPpmIlobFihqboXJ1TPSbwj/ZtUGKjZ8cLXkb3HMu44G7G
Z3hyuUSNoSwaik7ZmtFMNjrTNlxPDGWpJAREnL1v+ECQA8pGBqLbvBRquHS82i88
x5q65TcBThIW+HxuIZ5qIla2t7sGh1ufRPLBK2fSWL78fe22FWYwusaLPQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPbsbjPeo8+3FH2jI7TTxqKp4AtiMB8GA1UdIwQY
MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt
MDhkNjViMzg2MzlkLzEvOXV4dU05Nmp6N2NVZmFNanROUEdvcW5nQzJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk
LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHTVCAAwQA
uUWoMA0EAgACMAcDBQAqBSJAMA0GCSqGSIb3DQEBCwUAA4IBAQBLLowQprhrpx6j
TEHfX+oY3BjSW7Ip2u41VrDZL4Q5YZP9AqBLyJl2vU8IQUTmmU8+pANyvX9R2pSr
3GVnwlmNMPXID2uY/ViVe05oyJ7dX3n4X9r9yZ8+OBnVP8ttWTlVvoXB6xFE1Tk/
UA1O3pbifAokmn8GWxKq/P3gIrdnZeU3kOxc+r2kIDz3BKL5enb1UJ5nz6kz4klO
kxZrbz16y/B1SHxLCtFBIOca15uy57uyjO4T0sV8jguHL+lMaGgQSJR/q3wG37Vw
oJrV9A86tRSfLfi+v8E14n38hLN43H6y7+OMhUrXfrYJf4+8N0kT4/i0wPcBJoTd
NnObnsN9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:59 2024 by rpki-client on console-fra.rpki-client.org