Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa
File: N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa (raw, json)
Hash identifier: Yz5cZoKOZYAQ0Mul+GbxqL63GG6JaEF6bc6BXwvEiRM=
Subject key identifier: 37:73:B1:A7:DA:EE:59:F0:3F:52:3E:D4:93:9C:C1:2A:2D:0F:CF:34
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A76C72A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa
Signing time: Sat 01 Jan 2022 04:51:57 +0000
ROA not before: Sat 01 Jan 2022 04:51:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50625
IP address blocks: 194.183.60.0/23 maxlen: 23
82.177.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980862762 (0x3a76c72a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3773b1a7daee59f03f523ed4939cc12a2d0fcf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:a8:17:04:d9:5a:e9:9f:66:3e:46:07:58:
1d:2d:19:08:b0:47:f2:54:b5:9c:77:76:af:d1:d8:
54:87:e3:70:1c:1d:e3:29:ba:4f:9b:de:5a:e3:c1:
84:6e:af:13:4d:d1:38:e8:42:ac:c0:41:91:8f:bc:
7d:f6:eb:e5:ae:4e:38:6b:a6:1f:b3:82:46:fd:f3:
bc:fe:da:cd:3d:46:e2:3c:2f:a2:0c:cf:bf:1d:5d:
ff:fb:63:1d:47:cb:dd:65:47:c1:d3:b3:ea:5d:51:
bc:25:51:9d:50:51:10:c0:59:33:8b:41:9b:47:d9:
e0:46:e2:cd:48:bd:5f:1f:f5:3a:77:df:43:79:1e:
d2:8f:2d:a9:7b:82:36:8f:81:9d:49:e8:d4:76:32:
f7:78:93:be:c6:f0:3a:0a:d1:77:15:ee:85:f6:b1:
e3:e8:66:45:fb:fa:8b:a1:fb:10:9f:da:2c:21:c8:
17:14:68:29:81:b4:27:cd:29:31:17:01:02:94:9c:
3a:2d:00:4c:67:dd:ce:ef:99:81:37:42:1f:bc:95:
0e:c7:1b:40:5b:f5:f0:04:23:9b:3f:96:ec:d4:f7:
3c:ad:c4:4f:a1:a1:b5:83:af:f7:a9:f6:f7:16:89:
89:95:23:3c:ff:0e:9a:3d:41:3f:00:95:c5:d7:f6:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:73:B1:A7:DA:EE:59:F0:3F:52:3E:D4:93:9C:C1:2A:2D:0F:CF:34
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/N3Oxp9ruWfA_Uj7Uk5zBKi0PzzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.204.0/24
194.183.60.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:6a:f7:18:84:b4:37:60:c8:e0:b8:f6:67:f6:1e:bd:63:87:
05:a9:61:c3:3e:02:04:3b:04:98:fe:5a:82:ac:1e:e1:c6:43:
6c:91:d3:a4:dc:e2:52:6a:72:34:3e:aa:08:77:79:c3:d5:c7:
f7:4f:41:38:00:6c:32:1b:ff:3c:58:a5:35:07:ab:30:29:e6:
11:b3:37:3f:bb:53:e0:d2:d4:f2:de:de:f9:5a:31:64:44:cc:
9a:94:6a:0b:3c:dd:98:c0:5b:e2:14:8c:65:98:46:a4:6a:79:
68:60:eb:7a:75:d6:3f:60:28:57:00:14:43:b6:4e:fc:3f:2e:
a9:70:9a:51:ee:13:aa:00:12:a4:1e:4c:e9:8e:d3:1f:14:df:
9b:44:e1:5e:53:78:c5:99:81:b6:0a:5f:48:d9:7f:54:a6:03:
6f:a4:13:f5:d3:68:e1:07:2d:73:04:ee:87:4c:f0:17:86:a0:
cf:ec:14:71:d3:dc:8c:54:7c:c3:19:53:e7:31:aa:6d:43:53:
24:e7:e9:69:c8:77:b7:0d:32:dc:cf:e0:04:52:b5:31:3e:93:
90:5b:13:97:22:90:8b:25:a9:d1:6f:c0:26:7f:16:69:23:c6:
59:c4:d6:e6:38:d6:ae:9b:81:9e:5e:fa:81:08:36:24:71:ed:
d4:92:af:01
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEOnbHKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDY4MzRlNjg4OTBmMzk4NmExYjA0NTdjZTBmNTRhZTAzYzJkNzZiMB4XDTIyMDEw
MTA0NTE1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzc3M2IxYTdkYWVl
NTlmMDNmNTIzZWQ0OTM5Y2MxMmEyZDBmY2YzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZwqBcE2Vrpn2Y+RgdYHS0ZCLBH8lS1nHd2r9HYVIfjcBwd
4ym6T5veWuPBhG6vE03ROOhCrMBBkY+8ffbr5a5OOGumH7OCRv3zvP7azT1G4jwv
ogzPvx1d//tjHUfL3WVHwdOz6l1RvCVRnVBREMBZM4tBm0fZ4EbizUi9Xx/1Onff
Q3ke0o8tqXuCNo+BnUno1HYy93iTvsbwOgrRdxXuhfax4+hmRfv6i6H7EJ/aLCHI
FxRoKYG0J80pMRcBApScOi0ATGfdzu+ZgTdCH7yVDscbQFv18AQjmz+W7NT3PK3E
T6GhtYOv96n29xaJiZUjPP8Omj1BPwCVxdf2kN0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ3c7Gn2u5Z8D9SPtSTnMEqLQ/PNDAfBgNVHSMEGDAWgBRUaDTmiJDzmGob
BFfOD1SuA8LXazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZHZzA1b2lRODVocUd3Ulh6ZzlVcmdQQzEycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjkvNWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8x
L04zT3hwOXJ1V2ZBX1VqN1VrNXpCS2kwUHp6US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkv
NWYyZjBiLWZkODItNDRmYS1iNjM0LTUyNzY2YjI0YmFhNC8xL1ZHZzA1b2lRODVo
cUd3Ulh6ZzlVcmdQQzEycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFKxzAMEAcK3PDANBgkqhkiG9w0B
AQsFAAOCAQEArmr3GIS0N2DI4Lj2Z/YevWOHBalhwz4CBDsEmP5agqwe4cZDbJHT
pNziUmpyND6qCHd5w9XH909BOABsMhv/PFilNQerMCnmEbM3P7tT4NLU8t7e+Vox
ZETMmpRqCzzdmMBb4hSMZZhGpGp5aGDrenXWP2AoVwAUQ7ZO/D8uqXCaUe4TqgAS
pB5M6Y7THxTfm0ThXlN4xZmBtgpfSNl/VKYDb6QT9dNo4QctcwTuh0zwF4agz+wU
cdPcjFR8wxlT5zGqbUNTJOfpach3tw0y3M/gBFK1MT6TkFsTlyKQiyWp0W/AJn8W
aSPGWcTW5jjWrpuBnl76gQg2JHHt1JKvAQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:18 2025 by rpki-client