Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/3taXPQqGzi_z5W3SHclstj4tWD8.roa
File: 3taXPQqGzi_z5W3SHclstj4tWD8.roa (raw, json)
Hash identifier: NfYxOlvmkspy2gbxMlg1zuVfnOzgzF3TkTTkdCCrZeA=
Subject key identifier: DE:D6:97:3D:0A:86:CE:2F:F3:E5:6D:D2:1D:C9:6C:B6:3E:2D:58:3F
Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial: 0181EE0CE63EF4F44889F9C38B7621011592
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/3taXPQqGzi_z5W3SHclstj4tWD8.roa
Signing time: Mon 11 Jul 2022 16:17:11 +0000
ROA not before: Mon 11 Jul 2022 16:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198930
IP address blocks: 77.87.185.0/24 maxlen: 24
185.66.176.0/22 maxlen: 22
2a05:900::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ee:0c:e6:3e:f4:f4:48:89:f9:c3:8b:76:21:01:15:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Validity
Not Before: Jul 11 16:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ded6973d0a86ce2ff3e56dd21dc96cb63e2d583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:fe:a2:46:3f:dd:6d:f5:1c:ad:1b:f6:63:
25:48:ca:3b:da:f0:ca:3b:7c:4a:56:0b:cb:4e:75:
82:56:ea:f6:ec:34:2d:f8:67:f0:58:c9:59:1b:06:
94:b0:ef:44:2e:e9:df:5a:b2:f8:3e:c6:56:d2:09:
cb:35:75:34:3f:5f:d1:08:9f:11:d6:58:84:39:4c:
07:e4:b5:45:1c:12:97:15:b9:5f:9c:c6:cc:ad:91:
7d:24:69:c4:06:c1:4d:50:04:e5:3a:9a:cc:9c:5c:
30:cd:2e:f2:09:99:62:ae:f0:cb:ba:55:34:41:f1:
06:f4:5b:c5:ef:21:a5:01:bb:6a:c1:b0:7c:fa:49:
33:68:b8:8d:b8:0d:e4:af:49:34:49:a3:bb:28:84:
c0:cf:de:c4:34:c3:06:63:dd:57:ad:a4:47:77:af:
28:05:18:f9:33:04:59:dc:f2:b8:52:1a:a1:b3:f5:
d7:3e:43:12:e9:f2:f0:9e:e5:ee:9f:69:b0:94:f9:
2f:35:a7:c9:43:44:6f:78:9b:04:10:a0:45:6e:76:
ce:ea:b4:4c:3d:4b:cc:ca:5b:55:cd:d1:6c:9d:59:
ad:ec:14:1f:b7:65:2b:b0:37:12:ea:ff:ce:29:86:
4d:d1:f3:b7:ed:a7:40:b2:32:f0:7a:32:16:c9:5d:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:97:3D:0A:86:CE:2F:F3:E5:6D:D2:1D:C9:6C:B6:3E:2D:58:3F
X509v3 Authority Key Identifier:
keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/3taXPQqGzi_z5W3SHclstj4tWD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.185.0/24
185.66.176.0/22
IPv6:
2a05:900::/29
Signature Algorithm: sha256WithRSAEncryption
3b:ef:65:bc:8d:4f:0f:f9:a4:27:63:cb:14:b2:96:c5:4d:b1:
97:8b:04:72:5c:28:58:5d:dc:3d:1b:db:0e:f2:ff:af:62:5e:
6c:36:92:ad:0b:8f:93:5b:74:98:75:52:98:c8:68:26:68:f3:
4c:a9:51:a9:34:87:d8:f6:2e:69:5b:28:5e:ee:4b:4c:4a:ed:
6d:f8:dc:d0:f5:f5:85:32:01:70:3d:40:37:d6:13:fd:aa:36:
ad:a1:20:d0:b8:69:1c:3c:c3:9d:1b:5b:7b:ac:f3:cf:7f:be:
99:c6:13:6f:8c:ad:34:cc:67:5e:73:73:06:f4:78:af:84:6a:
11:ac:36:34:63:f4:f4:e9:f8:db:3d:fc:9f:d8:72:7d:07:b0:
eb:92:0a:c9:17:83:77:6b:63:22:40:b5:f2:d9:41:01:a5:38:
0d:5b:e2:7f:f0:44:fb:98:ee:5a:c1:c7:dc:11:13:de:48:61:
38:61:b0:17:45:1c:fc:30:86:f0:99:d8:cd:f0:20:13:88:28:
cd:33:f4:0b:a4:f6:b2:7a:b4:fb:3c:ec:a7:a8:95:a0:93:b7:
aa:2a:2b:34:f6:95:cd:ea:7c:af:31:64:50:e6:0a:01:dd:46:
a3:1e:c1:9f:87:0d:5c:b4:78:b3:e3:e6:21:78:08:a9:c5:e6:
3a:fc:8a:79
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYHuDOY+9PRIifnDi3YhARWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjIwNzExMTYxNzExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWQ2OTczZDBhODZjZTJmZjNlNTZkZDIxZGM5NmNiNjNlMmQ1ODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAD+okY/3W31HK0b9mMlSMo72vDK
O3xKVgvLTnWCVur27DQt+GfwWMlZGwaUsO9ELunfWrL4PsZW0gnLNXU0P1/RCJ8R
1liEOUwH5LVFHBKXFblfnMbMrZF9JGnEBsFNUATlOprMnFwwzS7yCZlirvDLulU0
QfEG9FvF7yGlAbtqwbB8+kkzaLiNuA3kr0k0SaO7KITAz97ENMMGY91XraRHd68o
BRj5MwRZ3PK4Uhqhs/XXPkMS6fLwnuXun2mwlPkvNafJQ0RveJsEEKBFbnbO6rRM
PUvMyltVzdFsnVmt7BQft2UrsDcS6v/OKYZN0fO37adAsjLwejIWyV2RlwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFN7Wlz0Khs4v8+Vt0h3JbLY+LVg/MB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvM3RhWFBRcUd6aV96NVczU0hjbHN0ajR0V0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATVe5AwQC
uUKwMA0EAgACMAcDBQMqBQkAMA0GCSqGSIb3DQEBCwUAA4IBAQA772W8jU8P+aQn
Y8sUspbFTbGXiwRyXChYXdw9G9sO8v+vYl5sNpKtC4+TW3SYdVKYyGgmaPNMqVGp
NIfY9i5pWyhe7ktMSu1t+NzQ9fWFMgFwPUA31hP9qjatoSDQuGkcPMOdG1t7rPPP
f76ZxhNvjK00zGdec3MG9HivhGoRrDY0Y/T06fjbPfyf2HJ9B7DrkgrJF4N3a2Mi
QLXy2UEBpTgNW+J/8ET7mO5awcfcERPeSGE4YbAXRRz8MIbwmdjN8CATiCjNM/QL
pPayerT7POynqJWgk7eqKis09pXN6nyvMWRQ5goB3UajHsGfhw1ctHiz4+YheAip
xeY6/Ip5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:01 2023 by rpki-client on console-ams.rpki-client.org