Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/trrgjWawUSSd648ALHea4mbaBmc.roa
File: trrgjWawUSSd648ALHea4mbaBmc.roa (raw, json)
Hash identifier: NUS/X+rUSrARByQ2mIlJ0jKwAQLQk0pcUZ4voXf+rKo=
Subject key identifier: B6:BA:E0:8D:66:B0:51:24:9D:EB:8F:00:2C:77:9A:E2:66:DA:06:67
Certificate issuer: /CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Certificate serial: 04B03422
Authority key identifier: E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/trrgjWawUSSd648ALHea4mbaBmc.roa
Signing time: Sat 01 Jan 2022 04:57:44 +0000
ROA not before: Sat 01 Jan 2022 04:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47195
IP address blocks: 79.110.80.0/20 maxlen: 24
194.187.16.0/22 maxlen: 24
2001:67c:31c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78656546 (0x4b03422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d3e463f11ccad055d1662e008c2a94f42de9de
Validity
Not Before: Jan 1 04:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6bae08d66b051249deb8f002c779ae266da0667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:6e:70:91:6f:e3:56:45:01:99:f7:fe:22:
bc:01:fa:45:20:f7:70:24:93:a2:19:e8:1b:e2:32:
87:e7:a0:37:a2:25:46:6b:64:97:60:4b:f1:02:b6:
ae:7e:c7:01:de:3d:80:bd:bd:21:4a:e4:9f:2b:e7:
6a:a3:91:5a:7d:51:30:91:d1:eb:54:ee:67:d2:19:
51:68:6e:f8:a6:7b:11:90:f9:20:ef:3e:e4:fd:49:
68:3d:06:a7:b4:42:69:86:72:bc:34:e0:2f:0f:22:
36:09:48:87:d6:03:22:1f:6f:8a:ca:c5:08:b1:d4:
59:4b:00:a4:e7:79:32:31:1e:81:da:1d:70:57:46:
a0:11:d7:13:2a:1a:fc:3a:97:f4:6a:76:a3:db:a8:
1b:b7:44:83:4d:0b:69:62:38:2a:70:0b:4d:2f:c0:
e5:33:30:ab:09:7c:2c:48:0d:b0:7b:a6:fd:a2:1f:
75:b3:9c:b9:ac:e4:d0:82:ab:d0:1f:d6:89:6a:17:
e8:0b:e7:37:3f:3b:71:25:52:eb:cd:cd:04:15:65:
b4:c3:f7:60:79:37:05:cb:9c:51:a0:25:e2:15:39:
07:37:71:55:c2:89:ab:06:b1:fe:be:e0:ea:b5:00:
49:03:4f:4e:11:e8:ec:bc:10:27:b4:cc:2e:37:0e:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:E0:8D:66:B0:51:24:9D:EB:8F:00:2C:77:9A:E2:66:DA:06:67
X509v3 Authority Key Identifier:
keyid:E7:D3:E4:63:F1:1C:CA:D0:55:D1:66:2E:00:8C:2A:94:F4:2D:E9:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59PkY_EcytBV0WYuAIwqlPQt6d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/trrgjWawUSSd648ALHea4mbaBmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8a6b6e-9bb7-45fc-97be-22b8498b515b/1/59PkY_EcytBV0WYuAIwqlPQt6d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.80.0/20
194.187.16.0/22
IPv6:
2001:67c:31c::/48
Signature Algorithm: sha256WithRSAEncryption
6c:4c:77:bf:10:d4:31:c6:30:48:12:1b:6b:0d:24:69:93:ab:
37:ab:05:05:be:91:8f:71:a1:33:41:10:97:c3:a8:1a:29:f8:
f2:51:ba:a1:66:cd:aa:38:6b:2e:23:5d:a5:66:88:49:72:88:
0d:03:53:b4:10:b1:b1:50:2d:b4:a4:a3:82:f9:ef:48:e0:3f:
5e:69:0d:11:1b:fc:f4:69:eb:c3:be:88:cb:ea:28:d6:f5:fb:
eb:b4:d7:dd:0a:14:a9:34:a1:36:e5:0f:31:cd:3f:30:dc:76:
af:72:9d:3b:88:b6:0c:e2:33:6a:94:d4:89:60:70:ec:5c:e1:
88:98:7d:bc:7d:36:91:75:77:75:24:b8:9f:9d:ec:0e:c6:93:
3b:da:77:18:96:c8:7d:e7:4d:ce:d3:3b:1d:d6:cd:62:4b:b2:
d0:6d:a6:94:fd:04:b0:f5:fb:1f:57:5d:bf:7e:3d:20:65:21:
27:14:16:f5:11:30:16:c5:14:61:6c:89:07:f2:2c:be:8f:68:
2e:53:52:ad:57:ae:bf:aa:27:d9:c0:5d:f0:e4:f7:67:24:34:
e6:f6:4a:51:fe:b9:b4:9d:dc:0d:6f:63:ef:70:4b:e2:f7:6b:
05:11:da:75:10:ce:e8:d7:66:98:0e:0c:1a:ef:44:dc:fb:bd:
13:49:79:57
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEBLA0IjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2QzZTQ2M2YxMWNjYWQwNTVkMTY2MmUwMDhjMmE5NGY0MmRlOWRlMB4XDTIyMDEw
MTA0NTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjZiYWUwOGQ2NmIw
NTEyNDlkZWI4ZjAwMmM3NzlhZTI2NmRhMDY2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMJ4bnCRb+NWRQGZ9/4ivAH6RSD3cCSTohnoG+Iyh+egN6Il
Rmtkl2BL8QK2rn7HAd49gL29IUrknyvnaqORWn1RMJHR61TuZ9IZUWhu+KZ7EZD5
IO8+5P1JaD0Gp7RCaYZyvDTgLw8iNglIh9YDIh9visrFCLHUWUsApOd5MjEegdod
cFdGoBHXEyoa/DqX9Gp2o9uoG7dEg00LaWI4KnALTS/A5TMwqwl8LEgNsHum/aIf
dbOcuazk0IKr0B/WiWoX6AvnNz87cSVS683NBBVltMP3YHk3BcucUaAl4hU5Bzdx
VcKJqwax/r7g6rUASQNPThHo7LwQJ7TMLjcOj/MCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBS2uuCNZrBRJJ3rjwAsd5riZtoGZzAfBgNVHSMEGDAWgBTn0+Rj8RzK0FXR
Zi4AjCqU9C3p3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzU5UGtZX0VjeXRCVjBXWXVBSXdxbFBRdDZkNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvOGE2YjZlLTliYjctNDVmYy05N2JlLTIyYjg0OThiNTE1Yi8x
L3RycmdqV2F3VVNTZDY0OEFMSGVhNG1iYUJtYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
OGE2YjZlLTliYjctNDVmYy05N2JlLTIyYjg0OThiNTE1Yi8xLzU5UGtZX0VjeXRC
VjBXWXVBSXdxbFBRdDZkNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEBE9uUAMEAsK7EDAPBAIAAjAJAwcA
IAEGfAMcMA0GCSqGSIb3DQEBCwUAA4IBAQBsTHe/ENQxxjBIEhtrDSRpk6s3qwUF
vpGPcaEzQRCXw6gaKfjyUbqhZs2qOGsuI12lZohJcogNA1O0ELGxUC20pKOC+e9I
4D9eaQ0RG/z0aevDvojL6ijW9fvrtNfdChSpNKE25Q8xzT8w3Havcp07iLYM4jNq
lNSJYHDsXOGImH28fTaRdXd1JLifnewOxpM72ncYlsh9503O0zsd1s1iS7LQbaaU
/QSw9fsfV12/fj0gZSEnFBb1ETAWxRRhbIkH8iy+j2guU1KtV66/qifZwF3w5Pdn
JDTm9kpR/rm0ndwNb2PvcEvi92sFEdp1EM7o12aYDgwa70Tc+70TSXlX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:07 2023 by rpki-client on console-ams.rpki-client.org