Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/t0Y09-96VS606mKhjlTXqQaQI08.roa
File: t0Y09-96VS606mKhjlTXqQaQI08.roa (raw, json)
Hash identifier: Ij8UQtx7ZKa8V2UZ+NQT+Vc+wF2/L2N8J2l8cGGGqvY=
Subject key identifier: B7:46:34:F7:EF:7A:55:2E:B4:EA:62:A1:8E:54:D7:A9:06:90:23:4F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018682C997F21912EE348A358EEA3AF40A33
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/t0Y09-96VS606mKhjlTXqQaQI08.roa
Signing time: Fri 24 Feb 2023 09:38:14 +0000
ROA not before: Fri 24 Feb 2023 09:38:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:c9:97:f2:19:12:ee:34:8a:35:8e:ea:3a:f4:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 24 09:38:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b74634f7ef7a552eb4ea62a18e54d7a90690234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:30:71:4f:d3:4c:47:db:ad:84:02:f9:29:e2:
ea:c6:02:d1:5f:0f:35:f4:c5:02:49:60:88:2e:2b:
7e:81:43:a6:bd:39:74:90:aa:75:62:89:9e:84:b1:
4f:5f:ff:c5:57:7a:4d:a2:3a:40:b1:7a:07:e0:65:
ad:3c:e3:78:7b:97:5d:84:e0:5a:37:78:4a:73:70:
4c:f5:86:4e:4c:1c:e9:64:8b:08:84:63:68:16:dc:
87:a2:b5:eb:d8:8f:93:5c:7d:f8:d7:77:a5:62:71:
03:52:3a:9c:1a:ea:e4:50:8d:11:c8:3e:b1:fb:e4:
79:45:0b:15:9a:cd:5c:b2:68:87:0d:f6:47:b3:c0:
70:28:ab:d4:29:20:d7:da:13:ca:3b:b7:4e:01:3e:
17:0f:ea:44:c5:ab:3d:17:f5:96:77:af:97:d5:c0:
4e:79:ca:5c:1f:e3:ce:8a:ad:b2:5d:b4:b8:86:71:
62:1a:a8:68:cb:ef:b1:57:97:97:a4:17:62:b3:de:
85:99:dd:66:e8:1a:6a:47:58:90:28:e4:47:79:b0:
43:83:49:4a:8a:e7:53:1d:ac:02:5f:67:3a:73:b1:
0a:c3:16:29:25:80:32:27:17:5e:8b:de:49:b3:2c:
b1:60:4f:41:bc:84:84:15:83:9b:98:71:3b:97:93:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:34:F7:EF:7A:55:2E:B4:EA:62:A1:8E:54:D7:A9:06:90:23:4F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/t0Y09-96VS606mKhjlTXqQaQI08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ed:18:4b:18:41:6f:61:55:45:b7:f5:fa:27:d3:e1:e6:25:
91:ff:da:09:c4:8d:96:8f:7b:10:e1:37:86:68:6c:c0:f4:30:
25:86:5c:bf:fe:6f:d3:a8:bd:90:d8:c8:96:86:9a:fe:30:5b:
87:05:d1:21:b8:31:06:07:52:12:4c:88:ad:18:7f:44:44:87:
88:13:31:96:fd:92:b5:b8:ea:e3:e1:be:d6:14:61:f5:2a:61:
77:af:fb:b7:09:f2:05:16:48:58:1a:9d:7e:fc:1c:4a:ef:d0:
fe:c6:54:b4:ef:dc:5a:d7:b4:36:eb:e3:7e:29:7b:ce:d1:83:
a4:61:57:9f:d2:67:4f:61:42:40:48:cf:e4:c0:19:89:b5:ff:
7f:f7:89:14:2f:f9:48:04:f8:64:ef:61:84:1c:30:c5:21:73:
27:e5:f6:22:26:82:f0:16:af:1f:0e:12:ae:26:5f:11:7f:e0:
f3:29:e0:29:31:a4:52:6f:88:31:51:be:24:77:35:0f:21:05:
1d:95:86:2c:22:7d:69:d2:fb:f9:29:ec:d9:0b:d9:d2:49:d5:
a3:7d:84:17:d4:67:02:8c:40:5e:7b:98:2c:65:17:11:cf:6a:
50:9d:4a:85:7d:c6:3f:e5:78:11:59:6c:34:22:5d:f2:c1:8e:
9c:15:73:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaCyZfyGRLuNIo1juo69AozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMjI0MDkzODE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzQ2MzRmN2VmN2E1NTJlYjRlYTYyYTE4ZTU0ZDdhOTA2OTAyMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzBxT9NMR9uthAL5KeLqxgLRXw81
9MUCSWCILit+gUOmvTl0kKp1YomehLFPX//FV3pNojpAsXoH4GWtPON4e5ddhOBa
N3hKc3BM9YZOTBzpZIsIhGNoFtyHorXr2I+TXH3413elYnEDUjqcGurkUI0RyD6x
++R5RQsVms1csmiHDfZHs8BwKKvUKSDX2hPKO7dOAT4XD+pExas9F/WWd6+X1cBO
ecpcH+POiq2yXbS4hnFiGqhoy++xV5eXpBdis96Fmd1m6BpqR1iQKORHebBDg0lK
iudTHawCX2c6c7EKwxYpJYAyJxdei95JsyyxYE9BvISEFYObmHE7l5OmTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLdGNPfvelUutOpioY5U16kGkCNPMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvdDBZMDktOTZWUzYwNm1LaGpsVFhxUWFRSTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATS+OMA0G
CSqGSIb3DQEBCwUAA4IBAQC17RhLGEFvYVVFt/X6J9Ph5iWR/9oJxI2Wj3sQ4TeG
aGzA9DAlhly//m/TqL2Q2MiWhpr+MFuHBdEhuDEGB1ISTIitGH9ERIeIEzGW/ZK1
uOrj4b7WFGH1KmF3r/u3CfIFFkhYGp1+/BxK79D+xlS079xa17Q26+N+KXvO0YOk
YVef0mdPYUJASM/kwBmJtf9/94kUL/lIBPhk72GEHDDFIXMn5fYiJoLwFq8fDhKu
Jl8Rf+DzKeApMaRSb4gxUb4kdzUPIQUdlYYsIn1p0vv5KezZC9nSSdWjfYQX1GcC
jEBee5gsZRcRz2pQnUqFfcY/5XgRWWw0Il3ywY6cFXOU
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:46:45 2025 by rpki-client