Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/DNOR6bHIVw9UHpo_gku9Esr3ksI.roa
File: DNOR6bHIVw9UHpo_gku9Esr3ksI.roa (raw, json)
Hash identifier: GmGquHo755QNKemgIx3zZptC41yj9zmUH9+PJvQwiQY=
Subject key identifier: 0C:D3:91:E9:B1:C8:57:0F:54:1E:9A:3F:82:4B:BD:12:CA:F7:92:C2
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 0185739F14C49BD4AEED3EE716B192C08A9F
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/DNOR6bHIVw9UHpo_gku9Esr3ksI.roa
Signing time: Mon 02 Jan 2023 17:54:43 +0000
ROA not before: Mon 02 Jan 2023 17:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42713
IP address blocks: 77.244.144.0/24 maxlen: 24
77.244.144.0/22 maxlen: 24
77.244.145.0/24 maxlen: 24
77.244.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:14:c4:9b:d4:ae:ed:3e:e7:16:b1:92:c0:8a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Jan 2 17:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd391e9b1c8570f541e9a3f824bbd12caf792c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c0:eb:c8:68:2a:df:34:89:80:da:82:ea:14:
b9:80:9f:46:3b:a0:e3:42:16:d2:24:67:59:e1:d8:
5f:9e:6c:c1:7a:f2:cb:b2:cb:a4:db:3d:b1:f8:17:
c1:ff:83:35:43:cf:08:97:e5:3d:d4:f7:f0:76:7c:
93:fb:62:d3:e1:b6:33:f3:2b:aa:a3:6d:99:bf:09:
f7:cd:0e:08:99:af:ec:79:e1:81:60:50:f0:16:ef:
5c:1c:2b:74:ec:48:52:bd:66:ae:c5:aa:05:0b:e4:
2d:35:f5:9d:a3:1b:ed:d7:1e:b1:ec:af:63:0e:ad:
4a:19:0c:a6:cc:04:a3:4c:b6:bc:ba:20:6b:40:f4:
fe:e9:ab:4a:70:d3:93:09:e7:f7:2d:1d:53:46:62:
b3:92:86:5e:1d:5b:20:36:74:16:a3:53:97:5a:d1:
63:33:fe:43:0b:6f:af:50:ec:17:11:a1:48:7a:5f:
80:45:29:13:b3:90:13:e3:d1:57:46:70:7a:3d:5b:
e4:87:a4:e6:45:8e:96:1d:38:46:24:25:10:b0:df:
54:96:c9:bb:ed:86:23:74:b5:19:b9:63:43:d6:0b:
38:66:42:a0:fa:b1:43:98:62:07:94:a0:5b:de:48:
33:c4:4b:d0:7b:f5:ef:e9:02:5f:4c:fc:5f:ee:88:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:91:E9:B1:C8:57:0F:54:1E:9A:3F:82:4B:BD:12:CA:F7:92:C2
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/DNOR6bHIVw9UHpo_gku9Esr3ksI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
28:11:c3:2d:e7:19:41:da:37:8d:5d:9c:6e:b5:35:20:cb:c4:
52:84:6f:8c:c0:a2:e3:5e:c8:91:3d:9b:7e:f2:54:44:85:38:
af:8a:4f:69:67:09:84:36:d4:74:c6:f9:dd:c6:6b:95:0d:4f:
d2:cd:43:64:71:3e:80:16:b0:6c:1e:85:3e:df:ea:c5:7b:00:
3e:32:cf:cc:b4:79:af:65:18:45:27:9f:bd:4c:3c:90:00:e2:
51:94:af:7c:93:32:34:23:b0:c5:c5:7d:e8:93:63:fe:62:af:
01:a7:15:ef:5b:fa:77:df:0d:9a:25:63:de:c8:79:98:52:47:
3c:87:59:55:77:58:4b:2f:b7:3a:c3:8c:cf:b7:b8:4b:ba:2f:
6a:9f:d1:15:4b:24:44:e0:91:0e:9c:53:3f:d1:1c:fd:9b:e9:
b2:83:d5:78:e6:5a:30:df:1a:0b:b8:4d:a6:6d:45:ae:23:e2:
f2:e9:ea:37:12:76:c5:fd:0e:65:bd:2c:b7:ac:60:1b:eb:0c:
d0:f6:05:91:3a:fa:36:20:06:c5:30:e4:5d:0d:b2:d5:3a:4b:
2c:3d:fd:14:3e:0b:3c:90:f2:56:d4:77:c7:c3:84:2b:ff:9c:
b6:7f:6e:f0:d7:0b:7c:c3:d0:49:39:3f:66:9e:23:26:a2:b5:
bc:92:59:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVznxTEm9Su7T7nFrGSwIqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNWQ4NTY5ODhjNjJhNjAyMDczZWMyOTM4NTgxZGQ0YTU4
NmZiOGYwHhcNMjMwMTAyMTc1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2QzOTFlOWIxYzg1NzBmNTQxZTlhM2Y4MjRiYmQxMmNhZjc5MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8DryGgq3zSJgNqC6hS5gJ9GO6Dj
QhbSJGdZ4dhfnmzBevLLssuk2z2x+BfB/4M1Q88Il+U91PfwdnyT+2LT4bYz8yuq
o22Zvwn3zQ4Ima/seeGBYFDwFu9cHCt07EhSvWauxaoFC+QtNfWdoxvt1x6x7K9j
Dq1KGQymzASjTLa8uiBrQPT+6atKcNOTCef3LR1TRmKzkoZeHVsgNnQWo1OXWtFj
M/5DC2+vUOwXEaFIel+ARSkTs5AT49FXRnB6PVvkh6TmRY6WHThGJCUQsN9Ulsm7
7YYjdLUZuWND1gs4ZkKg+rFDmGIHlKBb3kgzxEvQe/Xv6QJfTPxf7oiElQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzTkemxyFcPVB6aP4JLvRLK95LCMB8GA1UdIwQY
MBaAFLJdhWmIxipgIHPsKThYHdSlhvuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYt
OWQwODIxMTdkOGMxLzEvRE5PUjZiSElWdzlVSHBvX2drdTlFc3Iza3NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYzk4ODgtYmYwYS00YmZkLTk0OTYtOWQwODIxMTdkOGMx
LzEvc2wyRmFZakdLbUFnYy13cE9GZ2QxS1dHLTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTfSQMA0G
CSqGSIb3DQEBCwUAA4IBAQAoEcMt5xlB2jeNXZxutTUgy8RShG+MwKLjXsiRPZt+
8lREhTivik9pZwmENtR0xvndxmuVDU/SzUNkcT6AFrBsHoU+3+rFewA+Ms/MtHmv
ZRhFJ5+9TDyQAOJRlK98kzI0I7DFxX3ok2P+Yq8BpxXvW/p33w2aJWPeyHmYUkc8
h1lVd1hLL7c6w4zPt7hLui9qn9EVSyRE4JEOnFM/0Rz9m+myg9V45low3xoLuE2m
bUWuI+Ly6eo3EnbF/Q5lvSy3rGAb6wzQ9gWROvo2IAbFMORdDbLVOkssPf0UPgs8
kPJW1HfHw4Qr/5y2f27w1wt8w9BJOT9mniMmorW8klnJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:09 2025 by rpki-client