Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NPj7O2yZhzajwaVBG-ouqfs5cro.roa
File: NPj7O2yZhzajwaVBG-ouqfs5cro.roa (raw, json)
Hash identifier: YKfrvxlz1F/RJBmmbOq0XxbTM6YZ0IbiidgcvBYUj7A=
Subject key identifier: 34:F8:FB:3B:6C:99:87:36:A3:C1:A5:41:1B:EA:2E:A9:FB:39:72:BA
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018240A9C284F05D4D591EE22475B0DD19F4
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NPj7O2yZhzajwaVBG-ouqfs5cro.roa
Signing time: Wed 27 Jul 2022 17:17:23 +0000
ROA not before: Wed 27 Jul 2022 17:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204603
IP address blocks: 77.73.133.0/24 maxlen: 24
77.73.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:a9:c2:84:f0:5d:4d:59:1e:e2:24:75:b0:dd:19:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jul 27 17:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34f8fb3b6c998736a3c1a5411bea2ea9fb3972ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:91:f6:4e:d7:ec:89:85:7d:72:98:fc:63:
a4:8a:c7:33:c1:2b:ad:ea:a6:b5:eb:0d:cd:8c:1f:
bd:5d:43:74:7a:bb:c5:0f:51:1c:8f:9a:5b:de:d0:
a3:64:5d:ab:4d:46:d5:3f:9c:39:c6:88:cb:33:39:
cf:fa:a3:17:54:09:bf:14:ab:a4:ac:b4:d5:bb:6d:
9f:97:51:97:7d:3a:30:21:ea:80:fb:2d:ba:2d:87:
17:c1:3f:87:f7:30:f6:0a:e3:c2:10:8d:5e:67:9e:
af:b2:2e:8e:75:a2:19:ec:8b:f5:21:70:a4:26:80:
96:27:dc:83:fa:58:bf:9f:dd:43:00:23:3d:cd:9f:
52:29:01:59:4d:20:b7:97:e7:4e:9b:a7:49:8e:d8:
82:13:fb:82:64:c7:d2:fe:08:a9:37:6f:db:76:98:
07:8d:47:28:37:75:0f:79:15:f0:3f:86:d8:a2:b4:
27:87:f7:c8:44:86:83:62:0e:b1:59:b8:85:75:25:
6c:97:a5:1c:1d:20:e5:e5:68:d4:7d:2a:30:67:8d:
0c:57:c0:de:df:c1:26:a8:55:6e:0d:39:d0:a1:29:
a8:80:1c:2e:84:35:96:69:f3:63:d3:64:9d:51:11:
2b:65:83:e6:0e:8d:49:30:cd:69:4b:7f:c9:f2:0c:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:FB:3B:6C:99:87:36:A3:C1:A5:41:1B:EA:2E:A9:FB:39:72:BA
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/NPj7O2yZhzajwaVBG-ouqfs5cro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.133.0-77.73.134.255
Signature Algorithm: sha256WithRSAEncryption
29:54:dc:fa:6b:08:9f:b8:1a:6b:70:71:e6:fe:2d:be:d2:8c:
a4:ca:98:19:7d:1e:d1:04:bd:50:8d:87:15:ef:63:47:20:a2:
fd:7d:1d:7c:64:6d:37:e6:03:a2:ba:ab:ea:8d:ec:a1:3a:8a:
03:1f:1e:80:f9:86:0b:7a:32:db:a0:df:fd:fd:34:9a:06:e4:
06:fb:01:29:8d:b6:9a:d5:39:a5:51:5a:9a:39:16:73:cc:be:
d2:ac:5d:0b:50:40:67:1a:46:48:f7:91:39:8c:16:65:28:1c:
1d:f2:9d:88:f0:52:db:f5:1b:76:d9:cd:3e:7f:7e:ed:f4:78:
af:82:99:27:5f:3f:95:2c:8c:98:ba:3e:41:72:26:d3:3c:8e:
98:39:0c:d0:a3:9e:e7:91:3f:3e:1c:c3:39:db:94:1e:eb:61:
8b:98:2d:e8:7a:d6:01:61:04:da:98:ac:9b:0d:b3:da:ac:f3:
cc:da:5a:78:0c:ba:ac:84:09:02:f2:27:8c:1c:88:bf:35:fc:
64:c4:82:4f:58:0e:90:06:12:58:ef:9b:b2:43:94:dc:28:63:
2b:b2:16:1c:e4:93:8c:16:91:b7:32:f8:fc:0c:d4:e2:3f:16:
7f:12:08:73:4a:bf:f7:92:be:71:ee:f2:b1:c3:0e:89:03:a3:
8a:57:c4:d8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYJAqcKE8F1NWR7iJHWw3Rn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZmExM2YxYWUwNTM5MTYyODBlYzY4ZWUxYjA5NzZmOWVi
ZDNlYTgwHhcNMjIwNzI3MTcxNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGY4ZmIzYjZjOTk4NzM2YTNjMWE1NDExYmVhMmVhOWZiMzk3MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEOR9k7X7ImFfXKY/GOkisczwSut
6qa16w3NjB+9XUN0ervFD1Ecj5pb3tCjZF2rTUbVP5w5xojLMznP+qMXVAm/FKuk
rLTVu22fl1GXfTowIeqA+y26LYcXwT+H9zD2CuPCEI1eZ56vsi6OdaIZ7Iv1IXCk
JoCWJ9yD+li/n91DACM9zZ9SKQFZTSC3l+dOm6dJjtiCE/uCZMfS/gipN2/bdpgH
jUcoN3UPeRXwP4bYorQnh/fIRIaDYg6xWbiFdSVsl6UcHSDl5WjUfSowZ40MV8De
38EmqFVuDTnQoSmogBwuhDWWafNj02SdURErZYPmDo1JMM1pS3/J8gxluQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDT4+ztsmYc2o8GlQRvqLqn7OXK6MB8GA1UdIwQY
MBaAFK/6E/GuBTkWKA7GjuGwl2+evT6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAt
NDc4YzJjOGNiMmEwLzEvTlBqN08yeVpoemFqd2FWQkctb3VxZnM1Y3JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9hM2MwYTQtMzE5MS00ZTUxLThkODAtNDc4YzJjOGNiMmEw
LzEvcl9vVDhhNEZPUllvRHNhTzRiQ1hiNTY5UHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNSYUD
BABNSYYwDQYJKoZIhvcNAQELBQADggEBAClU3PprCJ+4Gmtwceb+Lb7SjKTKmBl9
HtEEvVCNhxXvY0cgov19HXxkbTfmA6K6q+qN7KE6igMfHoD5hgt6Mtug3/39NJoG
5Ab7ASmNtprVOaVRWpo5FnPMvtKsXQtQQGcaRkj3kTmMFmUoHB3ynYjwUtv1G3bZ
zT5/fu30eK+CmSdfP5UsjJi6PkFyJtM8jpg5DNCjnueRPz4cwznblB7rYYuYLeh6
1gFhBNqYrJsNs9qs88zaWngMuqyECQLyJ4wciL81/GTEgk9YDpAGEljvm7JDlNwo
YyuyFhzkk4wWkbcy+PwM1OI/Fn8SCHNKv/eSvnHu8rHDDokDo4pXxNg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org