Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/a77oznVwrdlRiRWgxLb_YqQ3ytA.roa
File: a77oznVwrdlRiRWgxLb_YqQ3ytA.roa (raw, json)
Hash identifier: T58Y2EtGi2YYhhWUgqT1MDIMnN4r3EGQZR2ZOgO9+64=
Subject key identifier: 6B:BE:E8:CE:75:70:AD:D9:51:89:15:A0:C4:B6:FF:62:A4:37:CA:D0
Certificate issuer: /CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Certificate serial: E3AC47
Authority key identifier: 47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/a77oznVwrdlRiRWgxLb_YqQ3ytA.roa
Signing time: Sat 01 Jan 2022 03:59:36 +0000
ROA not before: Sat 01 Jan 2022 03:59:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14920775 (0xe3ac47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d9f9e16a41530bc2abaa18f17a7456017720e5
Validity
Not Before: Jan 1 03:59:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bbee8ce7570add9518915a0c4b6ff62a437cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:cc:de:f5:89:be:4c:4e:7b:d4:0f:f1:f6:
a7:5d:b9:59:eb:1d:16:b2:39:61:0a:2c:3b:98:e8:
4c:51:32:e4:58:4a:b5:df:ae:49:a9:6e:27:5d:3b:
4f:db:34:99:aa:fe:67:1f:9c:89:da:f8:a7:f0:ff:
d8:d6:91:b8:1a:29:a1:28:fd:fa:0a:53:1c:5b:c9:
e7:77:b2:49:50:c6:93:f7:6b:07:62:ea:74:e1:95:
ca:c0:b8:e1:4b:ff:e1:be:04:5d:49:7c:62:6e:67:
0c:53:fa:11:34:c4:80:ea:40:4f:de:7f:bd:30:65:
0e:88:6d:7e:4b:19:0c:77:81:7c:a9:ee:13:a0:43:
28:3f:cf:23:a4:8e:d0:bd:c0:3b:d2:b7:82:a0:57:
ca:13:02:7b:f8:07:c4:e3:85:a7:d9:3e:1b:63:b8:
a2:0f:7f:eb:34:32:a7:1b:c9:af:6d:9e:d5:c4:b9:
14:a2:d7:83:34:16:a6:ce:d0:10:53:06:1e:cf:ec:
f0:af:5f:d8:1a:fc:a8:5c:a5:c2:2e:02:48:72:7c:
df:4b:4a:ed:d4:79:81:73:5e:40:a3:0c:06:94:1a:
00:d3:bc:52:4f:41:07:a7:33:12:84:d6:7c:d3:80:
22:3f:ea:47:2a:a3:f9:20:85:cb:d0:b8:31:f3:07:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:E8:CE:75:70:AD:D9:51:89:15:A0:C4:B6:FF:62:A4:37:CA:D0
X509v3 Authority Key Identifier:
keyid:47:D9:F9:E1:6A:41:53:0B:C2:AB:AA:18:F1:7A:74:56:01:77:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9n54WpBUwvCq6oY8Xp0VgF3IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/a77oznVwrdlRiRWgxLb_YqQ3ytA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0accf3-8b25-4405-8d52-fc2f7a872ff9/1/R9n54WpBUwvCq6oY8Xp0VgF3IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:65:7d:ca:6d:b4:46:22:4c:f4:e0:e2:66:c2:60:cd:71:ab:
df:9f:6e:1c:2e:a3:f5:dd:f8:82:54:27:16:fa:d1:7f:08:4f:
cd:22:3c:38:51:e2:8a:33:ee:8c:1f:7e:e4:a4:ec:a5:a8:80:
f2:44:26:4b:d0:72:ed:c3:30:77:f0:66:98:82:af:12:78:67:
1a:ba:d4:7c:16:93:65:51:e7:05:94:e2:f5:04:43:0c:24:04:
0e:de:02:8f:40:38:b5:9a:06:12:10:40:29:4c:e6:f7:e3:2b:
fd:6e:2e:d9:f1:06:e3:36:a6:b6:34:73:8f:06:02:8e:9d:90:
70:f0:18:93:e4:ad:db:8e:7a:99:d2:74:54:2e:d8:55:0c:7b:
cd:59:54:96:20:3c:7a:fe:5b:23:52:d2:6e:83:9c:7b:eb:ed:
cd:d2:5f:22:2e:f9:93:c0:47:7c:76:60:ec:5e:11:13:f7:40:
ec:a9:0b:8c:82:50:ae:6e:b8:69:02:58:b8:a0:69:a6:eb:92:
de:ac:e0:9d:67:b9:17:3f:86:ce:b6:f2:d8:53:da:a6:cc:23:
06:82:d9:c6:a0:d7:48:19:b9:2b:eb:68:f0:51:74:21:d6:f4:
58:45:d8:92:39:e4:b7:76:f0:83:93:c4:34:c8:7b:be:2a:34:
cc:f1:f3:17
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAOOsRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2Q5ZjllMTZhNDE1MzBiYzJhYmFhMThmMTdhNzQ1NjAxNzcyMGU1MB4XDTIyMDEw
MTAzNTkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmJiZWU4Y2U3NTcw
YWRkOTUxODkxNWEwYzRiNmZmNjJhNDM3Y2FkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLvzN71ib5MTnvUD/H2p125WesdFrI5YQosO5joTFEy5FhK
td+uSaluJ107T9s0mar+Zx+cidr4p/D/2NaRuBopoSj9+gpTHFvJ53eySVDGk/dr
B2LqdOGVysC44Uv/4b4EXUl8Ym5nDFP6ETTEgOpAT95/vTBlDohtfksZDHeBfKnu
E6BDKD/PI6SO0L3AO9K3gqBXyhMCe/gHxOOFp9k+G2O4og9/6zQypxvJr22e1cS5
FKLXgzQWps7QEFMGHs/s8K9f2Br8qFylwi4CSHJ830tK7dR5gXNeQKMMBpQaANO8
Uk9BB6czEoTWfNOAIj/qRyqj+SCFy9C4MfMHtVUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRrvujOdXCt2VGJFaDEtv9ipDfK0DAfBgNVHSMEGDAWgBRH2fnhakFTC8Kr
qhjxenRWAXcg5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1I5bjU0V3BCVXd2Q3E2b1k4WHAwVmdGM0lPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMGFjY2YzLThiMjUtNDQwNS04ZDUyLWZjMmY3YTg3MmZmOS8x
L2E3N296blZ3cmRsUmlSV2d4TGJfWXFRM3l0QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MGFjY2YzLThiMjUtNDQwNS04ZDUyLWZjMmY3YTg3MmZmOS8xL1I5bjU0V3BCVXd2
Q3E2b1k4WHAwVmdGM0lPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5nuzANBgkqhkiG9w0BAQsFAAOC
AQEAuGV9ym20RiJM9ODiZsJgzXGr359uHC6j9d34glQnFvrRfwhPzSI8OFHiijPu
jB9+5KTspaiA8kQmS9By7cMwd/BmmIKvEnhnGrrUfBaTZVHnBZTi9QRDDCQEDt4C
j0A4tZoGEhBAKUzm9+Mr/W4u2fEG4zamtjRzjwYCjp2QcPAYk+St2456mdJ0VC7Y
VQx7zVlUliA8ev5bI1LSboOce+vtzdJfIi75k8BHfHZg7F4RE/dA7KkLjIJQrm64
aQJYuKBppuuS3qzgnWe5Fz+Gzrby2FPapswjBoLZxqDXSBm5K+to8FF0Idb0WEXY
kjnkt3bwg5PENMh7vio0zPHzFw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:23 2023 by rpki-client on console-ams.rpki-client.org