Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1PBxM7rk62OEfK8S5HvVWoYlm0Y.roa
File: 1PBxM7rk62OEfK8S5HvVWoYlm0Y.roa (raw, json)
Hash identifier: vlyIsfJi6Xlnxewk3NjTSsbGF+9c6P7E7yvcaWuyWb8=
Subject key identifier: D4:F0:71:33:BA:E4:EB:63:84:7C:AF:12:E4:7B:D5:5A:86:25:9B:46
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53EC82A8A4069AAF3B535FFF18644
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1PBxM7rk62OEfK8S5HvVWoYlm0Y.roa
Signing time: Mon 02 Jan 2023 00:15:24 +0000
ROA not before: Mon 02 Jan 2023 00:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60403
IP address blocks: 77.81.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3e:c8:2a:8a:40:69:aa:f3:b5:35:ff:f1:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4f07133bae4eb63847caf12e47bd55a86259b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:7a:6f:27:1a:ef:2d:03:4e:1b:72:d8:53:
87:1c:30:db:a6:e2:9a:65:a0:b1:e2:43:69:14:5c:
57:2b:e8:8f:47:7a:15:17:9e:93:08:29:a2:86:83:
95:8f:14:ce:0d:1b:f6:8f:5f:91:17:87:af:3c:e8:
b2:d5:49:cf:52:64:01:1e:03:8e:4f:af:31:49:6c:
80:b1:d0:c8:7a:ee:cf:81:b4:a9:c4:c0:a3:88:d3:
92:3d:3a:67:32:44:ed:46:49:3d:17:d6:b8:b5:60:
55:f8:ad:8e:9e:5b:dc:03:43:b3:ac:d4:e9:1a:8e:
eb:de:d5:e1:a0:db:41:68:66:ed:1c:02:6b:37:9f:
0e:f6:6c:bf:9d:33:8a:e7:1c:5c:50:c3:df:6e:91:
c0:3e:8c:0b:11:d6:bc:bb:10:aa:0e:9b:7c:f0:02:
39:1c:f9:ac:9d:5f:e5:ab:07:f6:34:43:3e:fd:58:
6c:94:73:f6:65:61:cd:6d:d3:f4:f0:5d:80:c1:42:
47:f8:d7:4c:e5:ec:26:0a:40:ff:dc:0c:d8:2f:70:
9a:8b:e2:0f:b8:d1:cf:34:55:68:1e:c8:44:d9:14:
cd:20:9d:55:1d:81:78:64:20:fe:9f:66:aa:82:e3:
a4:50:ae:e7:4c:79:3e:23:10:4b:99:1e:6e:01:4f:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:71:33:BA:E4:EB:63:84:7C:AF:12:E4:7B:D5:5A:86:25:9B:46
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1PBxM7rk62OEfK8S5HvVWoYlm0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.97.0/24
Signature Algorithm: sha256WithRSAEncryption
19:53:6a:ec:18:af:d0:35:86:bc:88:57:20:ed:e3:5c:dd:7b:
01:94:18:c4:39:82:de:00:78:1f:8b:d9:51:2f:bb:3f:d7:ab:
23:cf:ea:6e:1c:d3:59:11:58:5d:c8:9f:ad:c7:1a:d1:b8:c0:
6e:67:16:29:3e:a7:e3:9b:4e:31:d6:d8:9e:77:cd:b3:e1:43:
4c:81:cb:ad:4c:f6:d7:14:12:94:ed:90:82:97:ba:cd:44:2e:
b7:15:e3:1c:74:75:e6:f1:c4:66:10:4a:af:1a:45:58:bd:64:
68:61:29:ec:73:f0:38:0f:54:0a:d7:04:9d:f1:65:20:be:02:
1e:25:19:6c:63:e7:b0:27:c6:bf:fd:42:33:d6:66:9d:85:35:
eb:73:77:07:ee:7d:0c:2f:54:4d:b1:f8:11:08:a4:19:1b:a4:
3c:be:3d:ed:e1:b0:3e:5e:be:6b:fa:97:b5:7e:e9:4e:0f:66:
57:c6:dc:b4:4c:0d:6c:8b:d2:1c:43:99:72:d9:0b:d4:c8:a5:
93:43:10:13:33:fd:65:fb:8a:4e:86:95:d5:da:31:5c:6b:06:
08:8b:bb:31:4b:62:64:0f:69:65:19:a1:2a:8e:d7:eb:cc:2d:
c5:3f:e1:98:02:ef:1b:4a:da:ab:41:fb:99:23:89:a4:d1:80:
06:de:72:ee
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVv1T7IKopAaarztTX/8YZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMTAyMDAxNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGYwNzEzM2JhZTRlYjYzODQ3Y2FmMTJlNDdiZDU1YTg2MjU5YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocp6byca7y0DThty2FOHHDDbpuKa
ZaCx4kNpFFxXK+iPR3oVF56TCCmihoOVjxTODRv2j1+RF4evPOiy1UnPUmQBHgOO
T68xSWyAsdDIeu7PgbSpxMCjiNOSPTpnMkTtRkk9F9a4tWBV+K2OnlvcA0OzrNTp
Go7r3tXhoNtBaGbtHAJrN58O9my/nTOK5xxcUMPfbpHAPowLEda8uxCqDpt88AI5
HPmsnV/lqwf2NEM+/VhslHP2ZWHNbdP08F2AwUJH+NdM5ewmCkD/3AzYL3Cai+IP
uNHPNFVoHshE2RTNIJ1VHYF4ZCD+n2aqguOkUK7nTHk+IxBLmR5uAU/LAQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNTwcTO65OtjhHyvEuR71VqGJZtGMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzFQQnhNN3JrNjJPRWZLOFM1SHZWV29ZbG0wWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNUWEw
DQYJKoZIhvcNAQELBQADggEBABlTauwYr9A1hryIVyDt41zdewGUGMQ5gt4AeB+L
2VEvuz/XqyPP6m4c01kRWF3In63HGtG4wG5nFik+p+ObTjHW2J53zbPhQ0yBy61M
9tcUEpTtkIKXus1ELrcV4xx0debxxGYQSq8aRVi9ZGhhKexz8DgPVArXBJ3xZSC+
Ah4lGWxj57Anxr/9QjPWZp2FNetzdwfufQwvVE2x+BEIpBkbpDy+Pe3hsD5evmv6
l7V+6U4PZlfG3LRMDWyL0hxDmXLZC9TIpZNDEBMz/WX7ik6GldXaMVxrBgiLuzFL
YmQPaWUZoSqO1+vMLcU/4ZgC7xtK2qtB+5kjiaTRgAbecu4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:13 2025 by rpki-client