Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MrNBYqFyH7QfQvF162_w7Jk7fH0.roa
File: MrNBYqFyH7QfQvF162_w7Jk7fH0.roa (raw, json)
Hash identifier: Tg3BjTH6RRTdDkd1S9E1OjF5NmYD+oINT2GAB9jQNWc=
Subject key identifier: 32:B3:41:62:A1:72:1F:B4:1F:42:F1:75:EB:6F:F0:EC:99:3B:7C:7D
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 01850349B614E2F34C5FDDD2E0AE0A7D318B
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MrNBYqFyH7QfQvF162_w7Jk7fH0.roa
Signing time: Sun 11 Dec 2022 22:24:00 +0000
ROA not before: Sun 11 Dec 2022 22:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:03:49:b6:14:e2:f3:4c:5f:dd:d2:e0:ae:0a:7d:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Dec 11 22:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32b34162a1721fb41f42f175eb6ff0ec993b7c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:3f:ae:d9:2f:0c:ae:4a:32:0a:11:33:4d:
61:fc:e5:2d:dd:1c:8b:f4:4f:7e:fe:b0:e7:0d:c5:
61:d5:55:12:6a:59:f0:3a:07:bf:8e:bf:66:f6:c0:
b9:ca:e0:db:1f:ca:e7:e4:5f:92:87:f1:b6:50:53:
6f:e6:d3:79:91:dd:eb:e8:2a:1b:58:1e:b1:53:78:
b3:14:5e:3e:37:d6:d5:22:d6:38:bc:dc:4a:c2:56:
75:46:3f:bf:a9:bf:e9:9e:b1:36:9c:e9:18:cc:23:
73:38:78:8a:09:12:cb:7c:23:30:9e:e6:9f:79:11:
b3:61:e4:05:dd:a1:e4:b7:dc:fd:1b:fc:52:96:01:
0a:d1:cb:ca:95:10:67:07:8a:e9:6f:ee:97:4b:e0:
45:6d:c6:d5:e3:6f:a7:2b:25:0a:c9:0b:d7:ed:53:
b9:b6:dd:fa:82:b0:9b:19:9b:12:54:18:4a:4b:26:
cc:01:38:ce:89:1e:ad:d3:c9:dc:27:88:61:45:b2:
f0:4a:42:31:85:3d:31:1e:21:74:c7:14:ac:86:4c:
22:4b:c9:a4:75:fc:7c:a8:8f:73:1f:86:ac:7d:fe:
44:56:6b:eb:22:14:05:be:a8:c7:32:fc:26:8d:f7:
28:2b:cb:b8:63:75:ab:44:ae:85:8e:29:02:b8:62:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B3:41:62:A1:72:1F:B4:1F:42:F1:75:EB:6F:F0:EC:99:3B:7C:7D
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/MrNBYqFyH7QfQvF162_w7Jk7fH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:5b:e8:f3:64:06:df:75:12:27:84:19:7b:7e:04:dc:6e:bb:
80:b6:1e:43:d3:1f:6c:d5:e4:28:30:d5:f7:3c:fa:dd:94:c1:
4a:19:61:9e:21:bc:d9:3b:b9:d4:cf:fa:2b:6c:5d:98:f7:95:
45:1a:a0:cd:eb:7d:46:44:c2:4b:b9:60:3f:62:dc:96:1d:e2:
5c:81:ce:a4:67:de:31:31:ff:a9:b8:36:a4:e4:67:3b:77:32:
f8:33:4d:d8:71:4c:57:de:57:05:e7:aa:4a:fa:fc:6b:20:de:
d0:4d:c8:8d:cb:38:33:44:4d:5d:c3:60:94:71:17:72:30:2f:
be:7b:da:16:82:fe:64:32:54:08:45:1e:2a:08:c7:a4:bc:ba:
1c:f0:86:52:68:09:2b:96:cd:6f:2b:05:25:fc:16:78:7e:98:
bc:b7:74:5e:51:5b:ee:ad:41:22:9c:76:06:0b:f7:76:96:b4:
d9:fb:b1:88:43:b1:d4:6e:90:0b:85:6d:f2:2b:ff:d2:5a:ad:
83:e8:80:42:5b:c8:0e:1b:81:59:4d:8f:cd:69:1a:00:85:7b:
b2:18:a1:6a:b6:9d:dd:97:6c:58:77:b6:fc:bd:dc:c2:96:aa:
96:48:89:c2:21:a9:1f:6a:49:6f:e7:d8:9b:2a:d3:34:41:79:
c0:42:a3:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUDSbYU4vNMX93S4K4KfTGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjIxMjExMjIyNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmIzNDE2MmExNzIxZmI0MWY0MmYxNzVlYjZmZjBlYzk5M2I3YzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJs/rtkvDK5KMgoRM01h/OUt3RyL
9E9+/rDnDcVh1VUSalnwOge/jr9m9sC5yuDbH8rn5F+Sh/G2UFNv5tN5kd3r6Cob
WB6xU3izFF4+N9bVItY4vNxKwlZ1Rj+/qb/pnrE2nOkYzCNzOHiKCRLLfCMwnuaf
eRGzYeQF3aHkt9z9G/xSlgEK0cvKlRBnB4rpb+6XS+BFbcbV42+nKyUKyQvX7VO5
tt36grCbGZsSVBhKSybMATjOiR6t08ncJ4hhRbLwSkIxhT0xHiF0xxSshkwiS8mk
dfx8qI9zH4asff5EVmvrIhQFvqjHMvwmjfcoK8u4Y3WrRK6FjikCuGLVHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDKzQWKhch+0H0Lxdetv8OyZO3x9MB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvTXJOQllxRnlIN1FmUXZGMTYyX3c3Sms3ZkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTVFQMA0G
CSqGSIb3DQEBCwUAA4IBAQCLW+jzZAbfdRInhBl7fgTcbruAth5D0x9s1eQoMNX3
PPrdlMFKGWGeIbzZO7nUz/orbF2Y95VFGqDN631GRMJLuWA/YtyWHeJcgc6kZ94x
Mf+puDak5Gc7dzL4M03YcUxX3lcF56pK+vxrIN7QTciNyzgzRE1dw2CUcRdyMC++
e9oWgv5kMlQIRR4qCMekvLoc8IZSaAkrls1vKwUl/BZ4fpi8t3ReUVvurUEinHYG
C/d2lrTZ+7GIQ7HUbpALhW3yK//SWq2D6IBCW8gOG4FZTY/NaRoAhXuyGKFqtp3d
l2xYd7b8vdzClqqWSInCIakfaklv59ibKtM0QXnAQqOn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org