Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/h7L-NyfAjYivLmrBX0HHxDQDp2c.roa
File: h7L-NyfAjYivLmrBX0HHxDQDp2c.roa (raw, json)
Hash identifier: km6ITjQ0lm50QY/9ZBVTyt8vrbioPTAJQFH81RZboU0=
Subject key identifier: 87:B2:FE:37:27:C0:8D:88:AF:2E:6A:C1:5F:41:C7:C4:34:03:A7:67
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 02A6D51B
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/h7L-NyfAjYivLmrBX0HHxDQDp2c.roa
Signing time: Sat 19 Mar 2022 09:07:50 +0000
ROA not before: Sat 19 Mar 2022 09:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33849
IP address blocks: 77.32.225.0/24 maxlen: 24
77.32.230.0/24 maxlen: 24
195.211.14.0/24 maxlen: 24
195.211.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44487963 (0x2a6d51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Mar 19 09:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87b2fe3727c08d88af2e6ac15f41c7c43403a767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:93:78:40:78:43:69:e7:60:98:47:38:2c:
f3:36:41:7e:7b:b8:ad:ff:ac:c7:27:f5:0f:b0:c4:
5d:94:d2:9b:a8:43:75:19:40:0a:ce:20:e4:63:93:
b8:af:f8:3e:d8:90:3c:e4:d4:e5:48:be:3d:2e:48:
ff:26:02:ec:ba:13:6e:95:4e:d3:16:79:88:a6:77:
28:16:0a:b6:1c:71:df:c1:9d:f3:ce:64:23:b6:90:
9e:dd:2c:92:8e:11:e1:54:18:14:46:43:49:87:df:
53:74:2d:af:9e:2a:39:e9:65:d1:54:12:2f:a9:88:
4d:26:51:cf:0a:1d:85:51:7d:45:ed:e8:67:c1:f3:
b0:c7:6f:53:43:2b:db:0b:c4:d6:3f:2a:d8:91:e6:
e0:57:00:b3:94:4c:a9:c5:74:87:84:90:dd:95:e3:
c6:15:bb:fe:67:9f:eb:7b:e8:8e:05:e9:ef:03:b6:
bd:28:f9:46:98:0d:00:75:cd:4a:be:b4:11:0f:66:
00:1b:8d:d2:52:26:a8:24:db:12:63:e3:0e:d7:0a:
42:fe:e0:95:44:53:15:ff:13:7e:d5:ba:81:4d:91:
42:45:cf:36:67:e5:4c:82:80:0e:44:07:0d:04:70:
02:dc:eb:dc:20:25:90:9b:d6:5b:35:b2:36:dc:65:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B2:FE:37:27:C0:8D:88:AF:2E:6A:C1:5F:41:C7:C4:34:03:A7:67
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/h7L-NyfAjYivLmrBX0HHxDQDp2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.32.225.0/24
77.32.230.0/24
195.211.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:02:0e:22:4f:55:63:86:bf:ba:2c:40:68:fc:f8:79:97:93:
c1:90:99:8c:15:2a:5c:47:54:64:29:95:a3:14:f7:a9:09:bd:
24:a4:15:15:0a:d1:35:c0:d3:50:7b:55:5a:35:8e:5c:0c:f9:
e1:b9:fd:a9:72:95:17:9b:16:d4:46:5d:74:26:54:82:b5:22:
7c:58:dd:3d:14:53:86:f5:0c:d0:05:64:03:14:ec:ad:24:f7:
de:a0:64:01:2f:fc:02:fc:c2:4a:22:08:70:d4:6d:a4:ba:6b:
86:c1:b0:3b:24:3f:df:58:6b:53:af:d0:d9:d6:51:36:e2:24:
d8:61:b6:90:0c:93:79:55:ae:94:a1:0d:e1:9a:8d:e3:67:e9:
f9:02:72:24:90:56:8b:28:f4:ef:86:bc:4f:29:ec:30:3b:09:
9a:c3:e9:c7:7f:84:9a:d5:6d:8a:56:0b:2e:3a:dd:a5:62:8e:
d7:0c:35:e4:e6:06:65:34:ce:9c:76:39:45:33:6a:5c:10:28:
d2:d6:ff:8e:c9:f5:3d:f8:62:42:ca:5c:32:62:9a:21:28:c2:
96:b2:4c:70:e4:5c:b5:b8:79:cd:16:4e:c3:33:32:fc:58:3f:
8a:17:e4:36:d3:64:0a:69:bf:52:c7:39:14:22:58:40:f2:d0:
15:72:48:11
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAqbVGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NTMyYTVjZjJiYTE4Yzc1M2VkYzk1ZWUyMGI2NjYyOTNkZjAyZDViMB4XDTIyMDMx
OTA5MDc1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODdiMmZlMzcyN2Mw
OGQ4OGFmMmU2YWMxNWY0MWM3YzQzNDAzYTc2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtek3hAeENp52CYRzgs8zZBfnu4rf+sxyf1D7DEXZTSm6hD
dRlACs4g5GOTuK/4PtiQPOTU5Ui+PS5I/yYC7LoTbpVO0xZ5iKZ3KBYKthxx38Gd
885kI7aQnt0sko4R4VQYFEZDSYffU3Qtr54qOell0VQSL6mITSZRzwodhVF9Re3o
Z8HzsMdvU0Mr2wvE1j8q2JHm4FcAs5RMqcV0h4SQ3ZXjxhW7/mef63vojgXp7wO2
vSj5RpgNAHXNSr60EQ9mABuN0lImqCTbEmPjDtcKQv7glURTFf8TftW6gU2RQkXP
NmflTIKADkQHDQRwAtzr3CAlkJvWWzWyNtxlIa0CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSHsv43J8CNiK8uasFfQcfENAOnZzAfBgNVHSMEGDAWgBQlMqXPK6GMdT7c
le4gtmYpPfAtWzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pUS2x6eXVoakhVLTNKWHVJTFptS1Qzd0xWcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvMWUwMmZhLWY4MjMtNDFjOC04NmIyLTE1MWNmNjFkZTgzZS8x
L2g3TC1OeWZBallpdkxtckJYMEhIeERRRHAyYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
MWUwMmZhLWY4MjMtNDFjOC04NmIyLTE1MWNmNjFkZTgzZS8xL0pUS2x6eXVoakhV
LTNKWHVJTFptS1Qzd0xWcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE0g4QMEAE0g5gMEAcPTDjANBgkq
hkiG9w0BAQsFAAOCAQEAHgIOIk9VY4a/uixAaPz4eZeTwZCZjBUqXEdUZCmVoxT3
qQm9JKQVFQrRNcDTUHtVWjWOXAz54bn9qXKVF5sW1EZddCZUgrUifFjdPRRThvUM
0AVkAxTsrST33qBkAS/8AvzCSiIIcNRtpLprhsGwOyQ/31hrU6/Q2dZRNuIk2GG2
kAyTeVWulKEN4ZqN42fp+QJyJJBWiyj074a8TynsMDsJmsPpx3+EmtVtilYLLjrd
pWKO1ww15OYGZTTOnHY5RTNqXBAo0tb/jsn1PfhiQspcMmKaISjClrJMcORctbh5
zRZOwzMy/Fg/ihfkNtNkCmm/Usc5FCJYQPLQFXJIEQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org