Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TASVB_KuWWkC6PBAwSkmv3vNjao.roa
File: TASVB_KuWWkC6PBAwSkmv3vNjao.roa (raw, json)
Hash identifier: yIPmAIYslsw6iwLmvSXVacHfv/jkC7OIPPp+F+2qKE0=
Subject key identifier: 4C:04:95:07:F2:AE:59:69:02:E8:F0:40:C1:29:26:BF:7B:CD:8D:AA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018414088409414EF047007F4BC16D72B4C0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TASVB_KuWWkC6PBAwSkmv3vNjao.roa
Signing time: Wed 26 Oct 2022 11:23:33 +0000
ROA not before: Wed 26 Oct 2022 11:23:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206850
IP address blocks: 77.74.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:08:84:09:41:4e:f0:47:00:7f:4b:c1:6d:72:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 11:23:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c049507f2ae596902e8f040c12926bf7bcd8daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:da:d6:5e:a3:57:52:f0:f0:99:ef:37:ec:
cb:a9:63:d7:44:55:eb:6f:2b:39:a7:75:6f:12:16:
a7:7a:77:22:c2:a8:39:80:77:06:41:a2:10:02:f3:
d6:e8:7a:8e:a9:69:b1:3e:f2:01:e2:2d:56:df:72:
39:a0:c7:48:7e:8e:0b:70:5d:50:fa:7e:30:61:a6:
e8:74:b0:c9:27:af:ba:ae:ae:f4:05:74:8d:b2:7e:
67:c3:88:14:43:3e:95:64:eb:59:d8:5f:a8:0d:e0:
51:38:7d:8f:b5:fd:0b:ed:e2:da:3f:3c:a7:47:03:
ce:59:8e:db:ec:dc:53:22:cd:28:dd:b6:24:95:5f:
0e:59:81:3f:68:b4:8c:f0:cd:6f:91:d5:f8:bc:54:
14:3f:63:69:34:bd:b1:c0:98:64:80:f1:c7:57:6e:
a5:c4:60:af:41:2a:a7:db:d0:7c:78:97:cb:2a:6c:
3e:61:82:2f:93:ba:8e:64:1b:b4:f4:e3:3e:45:a4:
0a:d6:d4:ea:75:14:a0:b3:79:2e:59:12:6c:eb:5f:
11:46:d6:bb:96:16:8b:76:e7:2f:e5:f2:39:17:08:
60:b3:12:df:6d:1d:c4:85:02:2c:65:97:83:43:05:
58:3a:12:df:54:69:9e:86:e7:83:13:5c:82:96:7c:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:95:07:F2:AE:59:69:02:E8:F0:40:C1:29:26:BF:7B:CD:8D:AA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TASVB_KuWWkC6PBAwSkmv3vNjao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.76.0/24
Signature Algorithm: sha256WithRSAEncryption
57:24:75:47:8c:4b:25:a4:b6:8d:27:dc:46:58:e2:a7:1b:c2:
f9:14:5b:21:9e:2c:d4:52:3c:d7:69:a5:aa:03:65:b7:c1:6c:
6f:18:56:77:02:90:4f:97:ce:64:15:d1:8b:1f:69:d3:21:eb:
37:b6:7e:8b:f9:c1:ff:78:52:ae:34:da:3d:fc:b7:54:e0:a0:
f3:7e:d0:55:1f:4d:40:50:46:9e:3b:22:1f:63:c4:52:ed:73:
38:eb:a9:58:36:ff:04:4c:56:e4:33:dc:9f:1b:bc:55:dc:81:
d0:be:52:d9:cb:31:85:c6:bf:13:87:68:4a:73:b7:bd:00:45:
11:3a:ec:56:99:ec:90:56:fa:8b:86:3d:47:c0:47:38:51:6f:
ae:14:b7:02:5e:69:78:4a:17:d8:c3:d2:a7:e3:9d:e3:e7:29:
6d:ac:63:82:b5:27:e3:7f:bc:1c:b6:9c:f6:0f:d8:72:0e:d8:
6a:cc:87:78:a8:81:66:2b:1e:2c:95:21:f2:40:2b:57:ef:72:
88:00:d9:cc:d8:c6:ea:3e:41:71:f7:ac:ed:1a:99:75:f2:27:
3c:c3:89:86:54:52:ff:4d:ca:72:39:e9:cd:f6:7e:d1:cd:91:
73:ff:a5:77:04:66:b2:d3:89:33:94:e0:9e:2d:7a:81:04:52:
9d:bd:a9:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQUCIQJQU7wRwB/S8FtcrTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI2MTEyMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzA0OTUwN2YyYWU1OTY5MDJlOGYwNDBjMTI5MjZiZjdiY2Q4ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj3a1l6jV1Lw8JnvN+zLqWPXRFXr
bys5p3VvEhanenciwqg5gHcGQaIQAvPW6HqOqWmxPvIB4i1W33I5oMdIfo4LcF1Q
+n4wYabodLDJJ6+6rq70BXSNsn5nw4gUQz6VZOtZ2F+oDeBROH2Ptf0L7eLaPzyn
RwPOWY7b7NxTIs0o3bYklV8OWYE/aLSM8M1vkdX4vFQUP2NpNL2xwJhkgPHHV26l
xGCvQSqn29B8eJfLKmw+YYIvk7qOZBu09OM+RaQK1tTqdRSgs3kuWRJs618RRta7
lhaLducv5fI5FwhgsxLfbR3EhQIsZZeDQwVYOhLfVGmehueDE1yClnxhzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwElQfyrllpAujwQMEpJr97zY2qMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvVEFTVkJfS3VXV2tDNlBCQXdTa212M3ZOamFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUpMMA0G
CSqGSIb3DQEBCwUAA4IBAQBXJHVHjEslpLaNJ9xGWOKnG8L5FFshnizUUjzXaaWq
A2W3wWxvGFZ3ApBPl85kFdGLH2nTIes3tn6L+cH/eFKuNNo9/LdU4KDzftBVH01A
UEaeOyIfY8RS7XM466lYNv8ETFbkM9yfG7xV3IHQvlLZyzGFxr8Th2hKc7e9AEUR
OuxWmeyQVvqLhj1HwEc4UW+uFLcCXml4ShfYw9Kn453j5yltrGOCtSfjf7wctpz2
D9hyDthqzId4qIFmKx4slSHyQCtX73KIANnM2MbqPkFx96ztGpl18ic8w4mGVFL/
TcpyOenN9n7RzZFz/6V3BGay04kzlOCeLXqBBFKdvalp
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:31:26 2025 by rpki-client