Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMVKytD53fr-n0ifQqlM8cStUiw.roa
File: rMVKytD53fr-n0ifQqlM8cStUiw.roa (raw, json)
Hash identifier: +L3jELZbEHB5Wd+EKIF15qfVTsGO899PmqmYwVxoJaQ=
Subject key identifier: AC:C5:4A:CA:D0:F9:DD:FA:FE:9F:48:9F:42:A9:4C:F1:C4:AD:52:2C
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 391A3EFA
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMVKytD53fr-n0ifQqlM8cStUiw.roa
Signing time: Tue 31 May 2022 06:09:14 +0000
ROA not before: Tue 31 May 2022 06:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204393
IP address blocks: 81.12.78.0/24 maxlen: 24
87.107.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 958021370 (0x391a3efa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: May 31 06:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acc54acad0f9ddfafe9f489f42a94cf1c4ad522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:60:ee:c7:7e:f6:45:6a:e8:01:0a:ea:ed:
68:23:09:c6:4f:5e:b3:64:cd:c4:28:d1:1e:b3:a0:
6e:fe:7f:0a:59:12:9f:ad:57:a5:bd:f0:86:78:8d:
de:6c:26:a6:34:9e:fc:71:95:74:42:8f:79:b6:10:
a9:9e:db:3a:f7:0c:40:bb:15:0d:4f:e6:4f:66:85:
20:73:91:0f:55:48:9c:50:a9:9c:d3:c8:28:6a:14:
65:e1:3b:99:9c:bb:88:dd:ac:d1:0b:a5:a3:f3:76:
e9:8a:58:3e:03:21:19:8c:e4:1f:71:e0:c9:18:9f:
6f:1b:c3:47:cf:48:17:11:d7:97:b1:63:c1:72:0e:
b4:df:03:d5:6c:62:a7:e0:56:50:92:cc:4e:22:3f:
37:7f:b6:ca:7f:6b:d4:aa:31:f1:cc:6c:ec:76:e5:
45:30:f1:f4:ef:67:ad:4f:11:e4:9c:a0:25:0c:15:
21:ab:41:e6:9f:83:02:f9:fc:17:65:62:9b:80:e4:
36:44:be:c2:4c:a0:69:0b:7c:b4:86:f9:22:51:1b:
d6:1d:9b:5a:34:ad:df:f5:19:ff:73:0d:c8:25:8e:
f1:cc:1c:c0:65:7c:34:1f:44:aa:12:77:35:f0:97:
0c:18:2f:e6:92:82:30:cc:9f:b5:8d:3c:1f:48:73:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:4A:CA:D0:F9:DD:FA:FE:9F:48:9F:42:A9:4C:F1:C4:AD:52:2C
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rMVKytD53fr-n0ifQqlM8cStUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.78.0/24
87.107.36.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:73:8d:3e:76:7e:1e:67:f5:38:f6:f7:cd:60:67:53:6b:3d:
95:f7:df:c4:f9:58:63:e5:80:15:97:ed:fe:9e:a1:14:28:91:
31:4f:f1:1e:b0:77:09:8a:12:c2:88:2f:4e:2d:4b:9c:3d:2b:
c0:60:30:0c:43:18:58:4e:01:19:03:b3:c7:0d:7a:21:26:a0:
78:44:1b:91:cd:11:21:90:2e:d3:ac:89:b2:e1:57:9e:3b:cf:
2f:fb:fa:2c:92:c6:ca:82:dc:b2:6b:64:55:f9:ca:48:25:4c:
a7:83:42:a4:c4:ce:db:39:99:7f:7c:07:e9:c2:75:ba:c2:0e:
5f:17:72:f1:1b:f5:93:65:64:70:f3:d7:10:55:ec:10:9e:b8:
9b:a0:93:3c:0f:f7:2d:a6:b9:e3:4d:00:15:cb:7c:ce:09:ae:
21:ed:a0:ac:29:cc:37:24:f9:45:60:55:ec:6c:c8:7b:13:bc:
c2:1b:6f:93:6f:ef:ce:19:ff:9d:b3:9f:24:ce:86:f7:14:ae:
79:d6:46:1a:6f:b2:3f:7e:5d:53:37:5a:b5:3e:ef:98:59:67:
b6:07:64:02:b7:25:36:ca:81:61:85:7b:f0:52:a9:50:01:7b:
cf:60:74:47:fa:22:ef:66:b1:0b:43:3a:0f:30:6e:73:59:3a:
74:89:2f:ce
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEORo++jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
MDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMB4XDTIyMDUz
MTA2MDkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWNjNTRhY2FkMGY5
ZGRmYWZlOWY0ODlmNDJhOTRjZjFjNGFkNTIyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+RYO7HfvZFaugBCurtaCMJxk9es2TNxCjRHrOgbv5/ClkS
n61Xpb3whniN3mwmpjSe/HGVdEKPebYQqZ7bOvcMQLsVDU/mT2aFIHORD1VInFCp
nNPIKGoUZeE7mZy7iN2s0Qulo/N26YpYPgMhGYzkH3HgyRifbxvDR89IFxHXl7Fj
wXIOtN8D1Wxip+BWUJLMTiI/N3+2yn9r1Kox8cxs7HblRTDx9O9nrU8R5JygJQwV
IatB5p+DAvn8F2Vim4DkNkS+wkygaQt8tIb5IlEb1h2bWjSt3/UZ/3MNyCWO8cwc
wGV8NB9EqhJ3NfCXDBgv5pKCMMyftY08H0hzLZsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSsxUrK0Pnd+v6fSJ9CqUzxxK1SLDAfBgNVHSMEGDAWgBQAd12Ucbhdlj/v
bSg1kOLZQt1cITAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8x
L3JNVkt5dEQ1M2ZyLW4waWZRcWxNOGNTdFVpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYv
NjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZ
XzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFEMTgMEAFdrJDANBgkqhkiG9w0B
AQsFAAOCAQEAnXONPnZ+Hmf1OPb3zWBnU2s9lfffxPlYY+WAFZft/p6hFCiRMU/x
HrB3CYoSwogvTi1LnD0rwGAwDEMYWE4BGQOzxw16ISageEQbkc0RIZAu06yJsuFX
njvPL/v6LJLGyoLcsmtkVfnKSCVMp4NCpMTO2zmZf3wH6cJ1usIOXxdy8Rv1k2Vk
cPPXEFXsEJ64m6CTPA/3Laa5400AFct8zgmuIe2grCnMNyT5RWBV7GzIexO8whtv
k2/vzhn/nbOfJM6G9xSuedZGGm+yP35dUzdatT7vmFlntgdkArclNsqBYYV78FKp
UAF7z2B0R/oi72axC0M6DzBuc1k6dIkvzg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org