Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9jM1w-YggGp_5FQ3pcV5dvn2mH4.roa
File: 9jM1w-YggGp_5FQ3pcV5dvn2mH4.roa (raw, json)
Hash identifier: 3oxs7d+FTLNZiFTfdmrUY6dtRjX7GdxEtGAMPdsEn4g=
Subject key identifier: F6:33:35:C3:E6:20:80:6A:7F:E4:54:37:A5:C5:79:76:F9:F6:98:7E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184141F64E5836A48D25A7DC482B9DF92FA
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9jM1w-YggGp_5FQ3pcV5dvn2mH4.roa
Signing time: Wed 26 Oct 2022 11:48:32 +0000
ROA not before: Wed 26 Oct 2022 11:48:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31261
IP address blocks: 77.74.79.0/24 maxlen: 24
5.8.177.0/24 maxlen: 24
37.16.80.0/22 maxlen: 22
77.242.15.0/24 maxlen: 24
77.74.72.0/22 maxlen: 22
77.220.211.0/24 maxlen: 24
77.74.78.0/24 maxlen: 24
77.220.209.0/24 maxlen: 24
77.74.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:1f:64:e5:83:6a:48:d2:5a:7d:c4:82:b9:df:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 11:48:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f63335c3e620806a7fe45437a5c57976f9f6987e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6c:dc:d2:aa:46:d6:d3:85:b6:d1:a1:73:f9:
bc:6a:03:ce:88:63:90:73:fa:6d:aa:4a:e2:79:21:
78:eb:ab:53:64:b6:64:47:e2:8e:06:c6:2a:a5:65:
5e:d4:51:4a:aa:6f:37:44:f7:7a:5d:03:d4:67:23:
5a:2b:03:7d:50:6a:7c:2c:2b:67:8c:0a:ee:dd:86:
d0:f7:c2:05:de:25:ed:b5:c1:b5:e7:98:55:34:95:
55:30:76:e5:7a:54:fe:2a:a1:7b:29:9c:be:f6:53:
03:18:47:7f:fb:75:53:01:0d:51:42:e8:8f:88:63:
b2:5c:e9:43:ea:00:39:bf:28:92:45:19:47:6a:d1:
a2:df:2a:1d:ea:a6:86:df:9b:26:65:86:9a:ee:e1:
d3:79:c2:df:62:25:76:7d:a7:c6:97:25:ca:65:3e:
8a:97:8c:ef:42:a8:a3:18:8c:68:ce:57:f9:c2:d6:
2f:a6:96:f0:aa:38:fe:ae:00:f9:b4:6c:73:1e:a6:
94:95:e0:8f:f2:8c:fd:75:ca:2a:5a:7d:0b:14:48:
0d:97:3f:34:71:1d:12:7c:ca:6a:2e:64:31:07:59:
22:a4:58:9a:79:29:7f:83:18:b9:94:e9:07:b5:a4:
8c:d9:70:c6:d4:c4:7f:03:cd:52:1b:08:03:25:04:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:35:C3:E6:20:80:6A:7F:E4:54:37:A5:C5:79:76:F9:F6:98:7E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9jM1w-YggGp_5FQ3pcV5dvn2mH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
77.74.72.0/22
77.74.77.0-77.74.79.255
77.220.209.0/24
77.220.211.0/24
77.242.15.0/24
Signature Algorithm: sha256WithRSAEncryption
05:1e:01:e0:6b:ad:24:50:e8:0a:f3:b2:e4:3f:cb:c5:62:ba:
bc:cd:cf:d9:96:c8:c9:ff:7f:c0:e3:16:c4:77:65:a4:89:0d:
64:7d:56:9b:2d:f3:5d:52:f9:9f:67:e4:11:48:b5:92:43:28:
ba:be:1d:35:a0:a4:28:c6:11:ff:c5:d9:76:d1:0a:5c:39:82:
5c:a0:0c:52:61:75:1c:26:91:01:63:86:b3:88:28:d0:02:72:
65:0d:06:7e:d1:e5:64:0e:f0:77:fb:c8:ee:39:51:27:16:59:
85:ed:56:c9:32:6d:7d:00:ea:d4:c1:4c:5c:88:58:1b:b3:0f:
57:c9:97:a2:44:b3:86:8a:57:01:74:a7:48:dc:fd:7e:b4:5f:
84:da:9b:3a:ea:2c:2a:0f:44:d3:d8:d7:2d:38:98:18:4c:1d:
b5:22:80:94:b5:5b:38:d9:66:36:9a:5c:70:d1:d7:81:d3:9c:
7f:a4:66:7f:9a:2e:de:61:9d:05:ad:3b:7a:9c:91:c5:9a:24:
d7:f7:95:57:21:40:62:b3:92:8a:90:03:ae:3f:89:40:b1:a3:
f7:cf:af:b9:bf:bd:4f:49:52:c2:bc:f9:b3:79:67:7a:a6:2e:
36:66:04:aa:0d:1f:43:31:1b:fe:72:ff:6d:6c:66:c4:93:73:
c6:72:3a:41
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYQUH2Tlg2pI0lp9xIK535L6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTE0ODMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjMzMzVjM2U2MjA4MDZhN2ZlNDU0MzdhNWM1Nzk3NmY5ZjY5ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWzc0qpG1tOFttGhc/m8agPOiGOQ
c/ptqkrieSF466tTZLZkR+KOBsYqpWVe1FFKqm83RPd6XQPUZyNaKwN9UGp8LCtn
jAru3YbQ98IF3iXttcG155hVNJVVMHblelT+KqF7KZy+9lMDGEd/+3VTAQ1RQuiP
iGOyXOlD6gA5vyiSRRlHatGi3yod6qaG35smZYaa7uHTecLfYiV2fafGlyXKZT6K
l4zvQqijGIxozlf5wtYvppbwqjj+rgD5tGxzHqaUleCP8oz9dcoqWn0LFEgNlz80
cR0SfMpqLmQxB1kipFiaeSl/gxi5lOkHtaSM2XDG1MR/A81SGwgDJQR5NQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPYzNcPmIIBqf+RUN6XFeXb59ph+MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOWpNMXctWWdnR3BfNUZRM3BjVjVkdm4ybUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQABQixAwQC
JRBQAwQCTUpIMAwDBABNSk0DBARNSkADBABN3NEDBABN3NMDBABN8g8wDQYJKoZI
hvcNAQELBQADggEBAAUeAeBrrSRQ6ArzsuQ/y8ViurzNz9mWyMn/f8DjFsR3ZaSJ
DWR9Vpst811S+Z9n5BFItZJDKLq+HTWgpCjGEf/F2XbRClw5glygDFJhdRwmkQFj
hrOIKNACcmUNBn7R5WQO8Hf7yO45UScWWYXtVskybX0A6tTBTFyIWBuzD1fJl6JE
s4aKVwF0p0jc/X60X4TamzrqLCoPRNPY1y04mBhMHbUigJS1WzjZZjaaXHDR14HT
nH+kZn+aLt5hnQWtO3qckcWaJNf3lVchQGKzkoqQA64/iUCxo/fPr7m/vU9JUsK8
+bN5Z3qmLjZmBKoNH0MxG/5y/21sZsSTc8ZyOkE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org