Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/ibu6I0z9Q2FLyi5At1Zm2TxwMAM.roa
File: ibu6I0z9Q2FLyi5At1Zm2TxwMAM.roa (raw, json)
Hash identifier: mk6p+g4MZ/sOSI+25nLu4M/BgZ6VupBRm0+bIOUt2aI=
Subject key identifier: 89:BB:BA:23:4C:FD:43:61:4B:CA:2E:40:B7:56:66:D9:3C:70:30:03
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 018456052B47BB1D80A08671D6F92FDE4540
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/ibu6I0z9Q2FLyi5At1Zm2TxwMAM.roa
Signing time: Tue 08 Nov 2022 06:54:50 +0000
ROA not before: Tue 08 Nov 2022 06:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209974
IP address blocks: 77.105.148.0/22 maxlen: 22
77.105.152.0/22 maxlen: 22
77.105.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:05:2b:47:bb:1d:80:a0:86:71:d6:f9:2f:de:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Nov 8 06:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89bbba234cfd43614bca2e40b75666d93c703003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:98:80:f5:8d:27:9e:63:ae:73:de:d3:08:
2c:5c:9b:cd:32:da:36:82:9d:2a:0d:55:45:c9:6d:
88:92:69:1b:f0:8e:3c:08:63:d9:a8:dd:2b:91:68:
09:4e:5b:7b:77:3e:9a:9f:7e:bf:1a:bb:8a:f7:7d:
52:fa:1e:33:e3:0b:be:3d:f0:27:30:41:b4:c3:69:
21:21:49:8a:36:32:39:05:38:b3:e9:3f:9d:fc:52:
ff:e8:b9:8a:aa:72:9b:a7:c5:45:35:83:d8:d0:d2:
ef:c1:ba:79:bf:d8:68:26:99:3e:ab:88:a5:50:f6:
8c:02:fb:72:88:88:2f:c6:b0:16:db:65:12:ac:f3:
62:89:f5:4e:68:f9:78:f8:01:e1:4f:b9:f1:70:1a:
a9:02:64:04:e7:b0:25:2b:0a:3c:9a:79:85:c6:5a:
95:28:74:14:ae:b0:d1:0c:1f:1e:27:e6:bb:e2:6f:
d0:fa:e3:5f:68:dd:ee:25:ec:9c:e3:16:16:e2:b2:
9c:37:4b:b2:c2:e0:dc:4c:a2:f1:91:83:52:4d:37:
17:eb:62:f7:cd:83:e5:fc:eb:1f:44:a9:43:f8:32:
74:d2:f2:2f:2e:df:e2:60:69:7f:ae:24:51:f6:c8:
f5:fa:ba:24:fd:89:06:99:24:d7:ce:cf:c0:c2:df:
cb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:BA:23:4C:FD:43:61:4B:CA:2E:40:B7:56:66:D9:3C:70:30:03
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/ibu6I0z9Q2FLyi5At1Zm2TxwMAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.148.0-77.105.155.255
Signature Algorithm: sha256WithRSAEncryption
3a:64:e6:3b:53:63:cc:f1:b1:99:8b:1d:94:bb:41:42:b0:64:
d1:2d:8f:aa:42:32:9a:48:1e:be:ef:3f:f4:b9:7d:ac:86:28:
20:29:4e:49:5c:3e:71:c4:0d:aa:79:8b:d3:d5:73:d7:7e:a1:
9d:ab:3f:69:52:de:e3:48:22:75:d5:8f:86:5a:9c:e2:12:56:
84:6f:3e:c5:9c:9f:dd:82:64:9d:65:e7:fb:ed:d3:d9:f0:44:
2e:ab:a6:4c:53:34:06:e1:16:8f:cc:f7:39:3d:86:2c:d4:79:
0d:a2:cd:d1:ad:df:a2:3e:f1:9d:3d:a0:50:dc:7e:f8:8f:75:
8d:60:31:ec:a0:8e:f4:51:08:99:34:c3:a7:21:8f:eb:e2:ea:
fb:28:6e:43:e7:84:65:09:7a:69:fc:8f:b9:dc:56:e8:cb:76:
ab:fd:ee:a9:57:02:ab:e7:6e:02:fa:1e:11:76:7d:61:23:5f:
43:4b:4c:d8:0c:8b:16:f9:f0:20:f4:8c:0c:4d:c6:1f:a9:8b:
dd:c0:2d:e5:f6:6b:fc:c5:c2:e3:cb:e5:bb:8e:ae:f0:c9:5a:
83:88:78:35:e4:0e:fe:c3:b0:eb:b3:d4:51:4d:59:64:7b:60:
1b:76:cf:7b:5a:3b:b2:39:cc:98:b3:50:83:d9:f0:00:c1:6f:
41:cd:19:ed
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYRWBStHux2AoIZx1vkv3kVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm
YmFhMDAwHhcNMjIxMTA4MDY1NDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWJiYmEyMzRjZmQ0MzYxNGJjYTJlNDBiNzU2NjZkOTNjNzAzMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtziYgPWNJ55jrnPe0wgsXJvNMto2
gp0qDVVFyW2Ikmkb8I48CGPZqN0rkWgJTlt7dz6an36/GruK931S+h4z4wu+PfAn
MEG0w2khIUmKNjI5BTiz6T+d/FL/6LmKqnKbp8VFNYPY0NLvwbp5v9hoJpk+q4il
UPaMAvtyiIgvxrAW22USrPNiifVOaPl4+AHhT7nxcBqpAmQE57AlKwo8mnmFxlqV
KHQUrrDRDB8eJ+a74m/Q+uNfaN3uJeyc4xYW4rKcN0uywuDcTKLxkYNSTTcX62L3
zYPl/OsfRKlD+DJ00vIvLt/iYGl/riRR9sj1+rok/YkGmSTXzs/Awt/LmQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIm7uiNM/UNhS8ouQLdWZtk8cDADMB8GA1UdIwQY
MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt
NzcwMGUyNWZmNzY5LzEvaWJ1NkkwejlRMkZMeWk1QXQxWm0yVHh3TUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5
LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJNaZQD
BAJNaZgwDQYJKoZIhvcNAQELBQADggEBADpk5jtTY8zxsZmLHZS7QUKwZNEtj6pC
MppIHr7vP/S5fayGKCApTklcPnHEDap5i9PVc9d+oZ2rP2lS3uNIInXVj4ZanOIS
VoRvPsWcn92CZJ1l5/vt09nwRC6rpkxTNAbhFo/M9zk9hizUeQ2izdGt36I+8Z09
oFDcfviPdY1gMeygjvRRCJk0w6chj+vi6vsobkPnhGUJemn8j7ncVujLdqv97qlX
AqvnbgL6HhF2fWEjX0NLTNgMixb58CD0jAxNxh+pi93ALeX2a/zFwuPL5buOrvDJ
WoOIeDXkDv7DsOuz1FFNWWR7YBt2z3taO7I5zJizUIPZ8ADBb0HNGe0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:06 2024 by rpki-client on console-fra.rpki-client.org