Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M9gCBWHmo_OgUAn3JYLEBIVqcn0.roa
File: M9gCBWHmo_OgUAn3JYLEBIVqcn0.roa (raw, json)
Hash identifier: swl94Jf1Me8hfUd8hnHsRc3es8ek22c2VeffZOAdE10=
Subject key identifier: 33:D8:02:05:61:E6:A3:F3:A0:50:09:F7:25:82:C4:04:85:6A:72:7D
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841931387D455C93D6F601ABF7ED48408D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M9gCBWHmo_OgUAn3JYLEBIVqcn0.roa
Signing time: Thu 27 Oct 2022 11:26:06 +0000
ROA not before: Thu 27 Oct 2022 11:26:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56679
IP address blocks: 81.3.154.0/24 maxlen: 24
84.204.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:31:38:7d:45:5c:93:d6:f6:01:ab:f7:ed:48:40:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 27 11:26:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d8020561e6a3f3a05009f72582c404856a727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:3b:72:9d:8b:b1:29:b6:26:37:e4:04:e0:
20:80:80:70:92:4a:e4:15:c4:23:de:8e:1a:f6:df:
bc:29:57:7e:e7:35:68:d9:50:45:63:1c:b6:13:bb:
8e:75:d3:2e:bb:24:38:57:e0:2f:de:89:3c:ff:52:
59:8c:f7:51:e9:73:19:ea:a5:53:46:d2:68:b0:fd:
a2:1c:06:7b:fb:77:68:08:1a:79:af:c3:40:63:96:
28:be:8e:49:fb:0e:22:32:61:e5:33:77:b0:69:47:
96:7a:5d:5b:18:b5:61:94:e0:ee:18:87:48:07:e9:
d9:50:b7:f5:2d:54:7c:5b:ac:1e:e1:89:4f:f1:ee:
6a:24:dd:6f:fe:0b:86:c6:5b:a8:74:40:7e:0b:65:
ac:d7:ab:88:2d:fd:ed:73:4f:f8:16:2a:a8:9c:a5:
73:84:fa:e4:b3:58:dc:34:2f:20:83:02:e8:53:07:
7f:9e:5a:c1:a2:d3:4f:99:e3:e5:98:de:81:1c:e8:
5c:e8:a4:70:3b:81:6e:ec:6a:12:fa:dd:64:4a:f6:
df:75:62:bf:fe:9d:5d:ed:21:13:ea:56:5b:ed:b4:
56:e8:62:84:16:c4:8a:f0:4e:a8:98:8c:76:bf:f6:
d4:b8:e1:ad:86:e8:a4:f0:f1:22:64:60:73:96:9b:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:02:05:61:E6:A3:F3:A0:50:09:F7:25:82:C4:04:85:6A:72:7D
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/M9gCBWHmo_OgUAn3JYLEBIVqcn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.154.0/24
84.204.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:32:29:1f:c2:17:4b:81:09:b2:69:65:86:08:8a:ee:b6:4f:
31:09:0a:36:11:e8:8e:43:a3:ca:ec:16:84:eb:d8:f4:de:ed:
e1:6d:da:43:d8:85:5b:ea:a1:ff:d4:db:be:f3:62:4a:72:d7:
53:d9:d7:87:7a:92:93:97:17:13:95:6c:52:01:94:53:ca:b4:
4f:36:d6:3f:5b:0f:d3:bf:40:9f:a8:1b:9c:5e:f1:a6:18:19:
d5:66:27:c7:53:ec:b5:21:1c:34:f3:fb:44:61:7c:94:91:06:
0b:06:b2:f6:4c:b2:3f:29:15:0b:79:ab:69:dd:09:ff:23:75:
87:11:2e:19:44:2b:8d:38:ab:59:bc:0c:a9:42:5c:fd:6c:fd:
57:46:35:1c:59:18:36:b9:ab:a1:c7:bf:40:02:ff:a5:90:63:
18:8c:d2:9b:ad:06:4d:ef:2f:ab:43:23:60:a5:ce:6a:5d:a0:
c9:eb:97:95:d2:d4:35:d4:71:52:f1:08:5a:7d:ac:3a:26:f9:
96:3e:07:86:70:04:ee:99:85:30:fb:33:4c:da:4c:82:bd:8e:
a4:c4:75:28:9a:c9:b0:cf:99:cd:79:8d:32:68:12:a2:9d:a7:
52:14:02:4a:0e:0b:52:4a:e3:ee:91:9a:17:7f:26:fb:76:2e:
c6:68:13:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQZMTh9RVyT1vYBq/ftSECNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI3MTEyNjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Q4MDIwNTYxZTZhM2YzYTA1MDA5ZjcyNTgyYzQwNDg1NmE3MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp907cp2LsSm2JjfkBOAggIBwkkrk
FcQj3o4a9t+8KVd+5zVo2VBFYxy2E7uOddMuuyQ4V+Av3ok8/1JZjPdR6XMZ6qVT
RtJosP2iHAZ7+3doCBp5r8NAY5Yovo5J+w4iMmHlM3ewaUeWel1bGLVhlODuGIdI
B+nZULf1LVR8W6we4YlP8e5qJN1v/guGxluodEB+C2Ws16uILf3tc0/4FiqonKVz
hPrks1jcNC8ggwLoUwd/nlrBotNPmePlmN6BHOhc6KRwO4Fu7GoS+t1kSvbfdWK/
/p1d7SET6lZb7bRW6GKEFsSK8E6omIx2v/bUuOGthuik8PEiZGBzlpsV4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDPYAgVh5qPzoFAJ9yWCxASFanJ9MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvTTlnQ0JXSG1vX09nVUFuM0pZTEVCSVZxY24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQOaAwQA
VMyUMA0GCSqGSIb3DQEBCwUAA4IBAQBCMikfwhdLgQmyaWWGCIrutk8xCQo2EeiO
Q6PK7BaE69j03u3hbdpD2IVb6qH/1Nu+82JKctdT2deHepKTlxcTlWxSAZRTyrRP
NtY/Ww/Tv0CfqBucXvGmGBnVZifHU+y1IRw08/tEYXyUkQYLBrL2TLI/KRULeatp
3Qn/I3WHES4ZRCuNOKtZvAypQlz9bP1XRjUcWRg2uauhx79AAv+lkGMYjNKbrQZN
7y+rQyNgpc5qXaDJ65eV0tQ11HFS8Qhafaw6JvmWPgeGcATumYUw+zNM2kyCvY6k
xHUomsmwz5nNeY0yaBKinadSFAJKDgtSSuPukZoXfyb7di7GaBMo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:34 2024 by rpki-client on console-ams.rpki-client.org