Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/42rfTrG54TnG95DtRC4fz8VzfcQ.roa
File: 42rfTrG54TnG95DtRC4fz8VzfcQ.roa (raw, json)
Hash identifier: xgpRR/qgybOOQEPqlz6tISW87/XjWB32XzFdbOe+G2E=
Subject key identifier: E3:6A:DF:4E:B1:B9:E1:39:C6:F7:90:ED:44:2E:1F:CF:C5:73:7D:C4
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0FBB1E21
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/42rfTrG54TnG95DtRC4fz8VzfcQ.roa
Signing time: Sat 01 Jan 2022 06:06:00 +0000
ROA not before: Sat 01 Jan 2022 06:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205016
IP address blocks: 77.111.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263921185 (0xfbb1e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jan 1 06:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e36adf4eb1b9e139c6f790ed442e1fcfc5737dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:68:68:79:58:8c:83:e7:a8:75:57:fd:8b:
28:a1:fb:e1:b9:90:40:d8:9a:7f:34:c2:ac:26:97:
59:11:e6:d5:ae:24:dd:81:2f:db:69:35:5b:7f:d7:
46:5c:1c:65:21:6e:58:aa:4b:99:3e:6a:13:02:d3:
0e:7f:e9:2d:39:78:51:fe:a6:67:1e:e8:0e:4f:e5:
db:ce:17:5f:54:8a:34:ac:0c:e7:e8:42:3a:79:a9:
0b:91:82:55:4f:a8:61:5b:bf:f1:48:7e:a6:ed:87:
ff:f4:98:ad:58:b5:bf:8e:13:9e:ca:d5:d4:4f:47:
58:79:4c:44:81:b3:f5:14:e1:cd:23:be:bd:a2:ba:
45:c9:3a:e8:a0:dd:f7:03:4d:4c:ef:33:09:1f:e6:
13:bb:8c:d8:32:53:11:9e:0d:07:a6:3e:c4:34:4b:
5e:78:44:3d:af:46:63:8e:dd:03:71:c5:c2:d7:1d:
b5:45:1c:e8:63:a7:90:b0:9c:a1:df:9e:d2:22:05:
1c:66:64:f7:90:aa:aa:20:38:29:0d:8c:3b:7e:7e:
06:f7:bd:0f:02:e2:09:43:9c:1a:6c:1b:27:df:7c:
96:40:bd:17:d9:78:80:d3:01:b7:2e:50:db:e7:4a:
0c:9f:74:0e:ab:44:53:15:88:14:07:bc:eb:a7:f1:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6A:DF:4E:B1:B9:E1:39:C6:F7:90:ED:44:2E:1F:CF:C5:73:7D:C4
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/42rfTrG54TnG95DtRC4fz8VzfcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:57:9e:c3:73:a8:97:f9:7f:ef:55:06:9d:84:fa:f8:59:5d:
2c:fa:7e:a2:bf:74:b5:10:ec:3f:ec:0d:d1:88:7f:98:00:60:
81:42:45:41:f3:d6:d2:ea:fc:67:6a:78:c5:15:6f:ef:b2:2c:
1d:f9:7e:dd:1a:94:2b:c7:4c:7e:92:99:72:a4:12:19:80:54:
c7:0b:ff:0a:e6:24:4f:52:89:75:6f:2d:b0:14:89:ec:03:b5:
7e:ec:65:c4:c8:6c:b5:e4:27:d0:e5:32:3c:3c:4e:c5:80:de:
c2:16:37:e2:75:e5:3b:f2:ef:fe:f5:6a:ab:70:7a:aa:77:06:
6a:90:39:be:56:72:29:2b:df:2f:51:d6:f8:13:fb:6d:db:ac:
d9:40:a8:82:06:2f:ed:1c:e3:fe:bf:43:35:90:42:9c:18:c7:
1c:9e:37:23:9d:69:8b:d5:4a:28:f0:91:42:0a:9d:b9:aa:36:
f8:5c:42:57:9c:12:d7:d5:57:96:b5:ef:8e:77:a6:0a:96:08:
b1:54:db:10:e2:d8:54:81:db:9c:d8:2e:0e:63:cb:5d:e0:61:
36:5b:1f:01:70:dc:c2:50:0f:f1:e6:da:c7:dd:a9:bd:a7:03:
44:86:b5:d1:60:f3:6f:83:e0:6f:aa:5e:ea:b7:15:e2:7a:bc:
45:b5:e7:8a
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIED7seITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmVkOTQzOWE0ZTRiMmQzMmU0YmVlNjQ3ZjNiNjEwNTViMTY5ZTNkMB4XDTIyMDEw
MTA2MDYwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTM2YWRmNGViMWI5
ZTEzOWM2Zjc5MGVkNDQyZTFmY2ZjNTczN2RjNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJtjaGh5WIyD56h1V/2LKKH74bmQQNiafzTCrCaXWRHm1a4k
3YEv22k1W3/XRlwcZSFuWKpLmT5qEwLTDn/pLTl4Uf6mZx7oDk/l284XX1SKNKwM
5+hCOnmpC5GCVU+oYVu/8Uh+pu2H//SYrVi1v44TnsrV1E9HWHlMRIGz9RThzSO+
vaK6Rck66KDd9wNNTO8zCR/mE7uM2DJTEZ4NB6Y+xDRLXnhEPa9GY47dA3HFwtcd
tUUc6GOnkLCcod+e0iIFHGZk95CqqiA4KQ2MO35+Bve9DwLiCUOcGmwbJ998lkC9
F9l4gNMBty5Q2+dKDJ90DqtEUxWIFAe866fxhPcCAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTjat9OsbnhOcb3kO1ELh/PxXN9xDAfBgNVHSMEGDAWgBT77ZQ5pOSy0y5L
7mR/O2EFWxaePTAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtLTJVT2FUa3N0TXVTLTVrZnp0aEJWc1duajAuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzkwL2QwN2MwNy1iOTYyLTRmNGItYTNhMC1iNTFiMzVkZWY2ZGUv
MS80MnJmVHJHNTRUbkc5NUR0UkM0Zno4VnpmY1Eucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkw
L2QwN2MwNy1iOTYyLTRmNGItYTNhMC1iNTFiMzVkZWY2ZGUvMS8xLS0yVU9hVGtz
dE11Uy01a2Z6dGhCVnNXbmowLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTW/0MA0GCSqGSIb3DQEBCwUA
A4IBAQBvV57Dc6iX+X/vVQadhPr4WV0s+n6iv3S1EOw/7A3RiH+YAGCBQkVB89bS
6vxnanjFFW/vsiwd+X7dGpQrx0x+kplypBIZgFTHC/8K5iRPUol1by2wFInsA7V+
7GXEyGy15CfQ5TI8PE7FgN7CFjfideU78u/+9WqrcHqqdwZqkDm+VnIpK98vUdb4
E/tt26zZQKiCBi/tHOP+v0M1kEKcGMccnjcjnWmL1Uoo8JFCCp25qjb4XEJXnBLX
1VeWte+Od6YKlgixVNsQ4thUgduc2C4OY8td4GE2Wx8BcNzCUA/x5trH3am9pwNE
hrXRYPNvg+Bvql7qtxXierxFteeK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:53 2024 by rpki-client on console-ams.rpki-client.org