Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zDzjoJ0wQ4QRBm6zLcbPtu3qd3I.roa
File: zDzjoJ0wQ4QRBm6zLcbPtu3qd3I.roa (raw, json)
Hash identifier: KJTLjNSdA+xopiQaOG/OE/nHM1qq4+l8frScYQ7PIgI=
Subject key identifier: CC:3C:E3:A0:9D:30:43:84:11:06:6E:B3:2D:C6:CF:B6:ED:EA:77:72
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018216224F660E2D6B3840351D63244E390C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zDzjoJ0wQ4QRBm6zLcbPtu3qd3I.roa
Signing time: Tue 19 Jul 2022 11:05:23 +0000
ROA not before: Tue 19 Jul 2022 11:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212953
IP address blocks: 212.111.207.0/24 maxlen: 24
77.47.158.0/23 maxlen: 24
77.47.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:22:4f:66:0e:2d:6b:38:40:35:1d:63:24:4e:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 19 11:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3ce3a09d30438411066eb32dc6cfb6edea7772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:41:a8:f3:78:73:9c:ea:e5:d1:07:52:93:
19:d6:cf:59:ef:3b:07:4c:e1:44:37:51:a9:64:b3:
39:cb:69:6a:69:f3:59:cf:86:15:3b:02:a9:e9:bd:
e9:34:db:04:b1:2a:50:3e:ae:f3:a0:3c:80:34:11:
63:fc:25:a5:d6:1f:d8:5b:55:11:1e:a2:95:93:a1:
fb:6a:77:9c:48:db:36:c0:cb:91:96:e0:25:ee:0c:
32:03:08:7d:0b:08:d3:55:90:4d:4d:02:86:b2:8b:
fd:45:a0:c5:de:6e:1e:93:c3:4a:de:17:d8:22:a7:
a8:8a:ee:82:9f:a6:9e:bf:87:73:77:92:3f:69:48:
9c:95:18:3a:e3:e7:73:48:18:52:13:e8:79:67:d4:
95:4f:2e:96:86:fc:ad:3c:47:13:d9:30:fd:f5:be:
e3:ec:b8:9e:82:4b:ed:5d:f0:f6:5e:16:f9:ea:7e:
bd:cd:46:8a:18:13:23:6f:8d:0e:b2:c2:a4:e7:45:
65:18:7a:90:13:4c:15:27:1d:f1:8e:64:26:18:94:
10:48:8f:2a:bb:4f:8e:c1:64:ac:43:44:f4:33:4a:
a2:b2:b8:5c:78:87:bf:55:00:4a:29:7f:f8:6d:1c:
99:fb:d8:42:5a:c8:e5:7f:25:2b:23:b6:a1:2b:95:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:E3:A0:9D:30:43:84:11:06:6E:B3:2D:C6:CF:B6:ED:EA:77:72
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zDzjoJ0wQ4QRBm6zLcbPtu3qd3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.157.0-77.47.159.255
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
62:dd:fc:6d:50:cf:0f:00:de:b6:ef:b6:b3:80:4e:89:59:a3:
9a:64:0a:3f:f9:1a:b1:72:93:0a:88:f5:a2:0d:81:94:43:8f:
fc:dd:4a:28:db:76:3e:5d:e8:3f:fd:b5:23:50:11:f7:6b:d6:
a2:f1:e0:68:de:b6:b6:cf:d3:85:41:e0:87:33:05:57:f1:74:
6a:ee:c1:f0:4c:12:94:30:dd:1a:a9:de:0b:5e:9c:c0:a0:4a:
93:27:c2:e6:11:6e:3c:44:a8:34:41:0b:28:db:0c:87:75:c8:
e1:22:ae:54:a9:a7:ee:0b:8c:15:2a:ed:bc:c6:f7:8b:05:67:
bd:d0:84:11:7c:ab:fa:c6:22:f0:ab:a4:5d:d3:24:36:d8:ab:
04:7a:de:c5:fc:8d:a6:dd:5c:c8:a0:60:cc:e4:5e:dd:d3:d2:
2d:75:40:1b:af:75:3b:14:34:2c:0d:7d:f1:48:68:7e:15:40:
bb:e6:c2:67:18:a8:34:4f:81:a7:f7:0f:a8:11:99:21:22:13:
95:aa:ba:f7:1a:41:f3:b7:7e:1e:1f:bc:d9:a6:66:44:e7:ec:
4f:a2:b7:78:a8:9f:dd:8f:11:df:be:0e:37:09:0a:6a:ef:11:
f8:86:c3:dc:b2:a2:15:79:66:25:31:0d:d1:6e:51:78:24:02:
35:1a:05:1b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYIWIk9mDi1rOEA1HWMkTjkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwNzE5MTEwNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzNjZTNhMDlkMzA0Mzg0MTEwNjZlYjMyZGM2Y2ZiNmVkZWE3NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDxBqPN4c5zq5dEHUpMZ1s9Z7zsH
TOFEN1GpZLM5y2lqafNZz4YVOwKp6b3pNNsEsSpQPq7zoDyANBFj/CWl1h/YW1UR
HqKVk6H7anecSNs2wMuRluAl7gwyAwh9CwjTVZBNTQKGsov9RaDF3m4ek8NK3hfY
Iqeoiu6Cn6aev4dzd5I/aUiclRg64+dzSBhSE+h5Z9SVTy6WhvytPEcT2TD99b7j
7LiegkvtXfD2Xhb56n69zUaKGBMjb40OssKk50VlGHqQE0wVJx3xjmQmGJQQSI8q
u0+OwWSsQ0T0M0qisrhceIe/VQBKKX/4bRyZ+9hCWsjlfyUrI7ahK5XULQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFMw846CdMEOEEQZusy3Gz7bt6ndyMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvekR6am9KMHdRNFFSQm02ekxjYlB0dTNxZDNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABNL50D
BAVNL4ADBADUb88wDQYJKoZIhvcNAQELBQADggEBAGLd/G1Qzw8A3rbvtrOATolZ
o5pkCj/5GrFykwqI9aINgZRDj/zdSijbdj5d6D/9tSNQEfdr1qLx4GjetrbP04VB
4IczBVfxdGruwfBMEpQw3Rqp3gtenMCgSpMnwuYRbjxEqDRBCyjbDId1yOEirlSp
p+4LjBUq7bzG94sFZ73QhBF8q/rGIvCrpF3TJDbYqwR63sX8jabdXMigYMzkXt3T
0i11QBuvdTsUNCwNffFIaH4VQLvmwmcYqDRPgaf3D6gRmSEiE5WquvcaQfO3fh4f
vNmmZkTn7E+it3ion92PEd++DjcJCmrvEfiGw9yyohV5ZiUxDdFuUXgkAjUaBRs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org