Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/DBCvDXXHU11z6qkrvdWukWI0uJY.roa
File: DBCvDXXHU11z6qkrvdWukWI0uJY.roa (raw, json)
Hash identifier: UwKBQohvOO5v/wKz8DqJxd1gG+p5jB0ijthWTjYA/Ro=
Subject key identifier: 0C:10:AF:0D:75:C7:53:5D:73:EA:A9:2B:BD:D5:AE:91:62:34:B8:96
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 06CD3777
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/DBCvDXXHU11z6qkrvdWukWI0uJY.roa
Signing time: Sat 01 Jan 2022 09:03:47 +0000
ROA not before: Sat 01 Jan 2022 09:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22351
IP address blocks: 91.232.198.0/24 maxlen: 24
185.87.144.0/22 maxlen: 22
91.232.208.0/24 maxlen: 24
91.232.235.0/24 maxlen: 24
91.232.129.0/24 maxlen: 24
80.73.219.0/24 maxlen: 24
80.73.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114112375 (0x6cd3777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jan 1 09:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c10af0d75c7535d73eaa92bbdd5ae916234b896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:1a:8f:9c:0e:1f:f1:d9:11:6f:f4:d4:fe:
d7:8b:9e:6e:71:4d:5d:a2:e5:bb:ba:4a:eb:93:ba:
f9:c1:6b:54:4a:20:7b:67:70:3d:4f:fb:6f:fa:d3:
50:e7:ea:04:9b:2c:ec:7b:77:ea:08:ca:11:55:7c:
77:c1:e6:12:9d:20:be:22:10:76:eb:3d:a4:dc:ab:
dc:ac:f6:88:d8:96:fa:46:00:50:59:24:c9:b9:61:
fe:40:8a:7c:b3:29:f2:7a:80:08:3c:ff:ad:19:19:
6b:89:12:15:0f:49:30:ad:cd:7e:ed:00:e4:fa:dd:
e1:a0:01:3d:4b:45:2b:68:08:ee:04:76:1b:d1:f9:
85:16:20:f0:d6:5a:06:b1:ae:d1:68:49:8f:03:b5:
51:50:58:3f:0d:21:86:5e:de:4c:7d:13:f7:aa:00:
c2:74:68:9f:e4:1b:d1:8c:90:5b:3f:0e:34:eb:2a:
bf:99:b0:cc:d9:5d:72:bc:96:cb:e2:b9:74:cb:78:
70:2b:19:af:21:21:f2:7f:1c:04:ab:94:84:b6:db:
e0:09:6b:a6:00:f0:b4:6a:67:16:f7:90:7a:59:f8:
60:bc:9c:51:b1:18:a8:ef:56:8a:bf:c1:80:e1:be:
8e:74:3a:75:7e:ac:b0:f0:30:bf:65:ea:b0:44:fd:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:AF:0D:75:C7:53:5D:73:EA:A9:2B:BD:D5:AE:91:62:34:B8:96
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/DBCvDXXHU11z6qkrvdWukWI0uJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.219.0-80.73.220.255
91.232.129.0/24
91.232.198.0/24
91.232.208.0/24
91.232.235.0/24
185.87.144.0/22
Signature Algorithm: sha256WithRSAEncryption
56:ff:77:8c:d1:94:ab:57:b6:70:09:66:fa:91:bc:b7:cf:45:
6a:2f:fd:2e:4b:90:ee:1f:08:58:a5:f1:91:40:62:f5:64:16:
06:ee:4a:36:1b:4f:ed:40:66:d7:08:c1:aa:1f:55:87:f2:aa:
3d:52:8d:49:fd:ee:7e:71:b6:01:b7:b0:4b:4f:5d:78:98:c2:
51:8e:17:81:28:4a:b1:85:d3:92:70:de:b3:89:38:b7:2b:d0:
d7:98:aa:58:62:3b:18:65:8a:db:6c:de:50:0a:e0:73:78:b8:
75:4b:37:b9:c2:08:20:e9:c3:79:45:31:ea:1d:fe:cc:e9:77:
51:9f:d6:48:c7:04:12:ca:c3:6c:63:61:88:76:2e:37:54:5c:
b2:d6:6c:b0:99:8f:2f:e1:d7:1f:43:04:ea:1e:f5:5a:04:55:
c1:c6:2f:11:84:7c:bb:d4:49:c7:70:42:5b:21:a8:76:02:14:
1f:97:c4:a8:bc:87:37:7f:54:27:ab:fd:ae:ef:23:02:6d:a5:
15:ba:1b:3a:87:84:44:6b:a1:ad:f0:51:b6:0c:37:22:9b:96:
10:a5:34:d2:84:92:dc:04:df:b6:cd:96:30:42:3b:24:25:eb:
a2:fe:8b:59:93:f9:71:7f:ab:ce:73:45:4c:bb:ab:a5:5c:39:
d4:40:be:c6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEBs03dzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2IwMjAzMDg4NjVjMzM2MGRhYjE5ZjNhNTcwMzM0MTg2NGU5ZjUwMB4XDTIyMDEw
MTA5MDM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGMxMGFmMGQ3NWM3
NTM1ZDczZWFhOTJiYmRkNWFlOTE2MjM0Yjg5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHCGo+cDh/x2RFv9NT+14uebnFNXaLlu7pK65O6+cFrVEog
e2dwPU/7b/rTUOfqBJss7Ht36gjKEVV8d8HmEp0gviIQdus9pNyr3Kz2iNiW+kYA
UFkkyblh/kCKfLMp8nqACDz/rRkZa4kSFQ9JMK3Nfu0A5Prd4aABPUtFK2gI7gR2
G9H5hRYg8NZaBrGu0WhJjwO1UVBYPw0hhl7eTH0T96oAwnRon+Qb0YyQWz8ONOsq
v5mwzNldcryWy+K5dMt4cCsZryEh8n8cBKuUhLbb4AlrpgDwtGpnFveQeln4YLyc
UbEYqO9Wir/BgOG+jnQ6dX6ssPAwv2XqsET9LH8CAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBQMEK8NdcdTXXPqqSu91a6RYjS4ljAfBgNVHSMEGDAWgBR3sCAwiGXDNg2r
GfOlcDNBhk6fUDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q3QWdNSWhsd3pZTnF4bnpwWEF6UVlaT24xQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvZDJhYWIwLTgzNjMtNGIxNC05Y2MyLWM4YmI4ZWEzOTgwNC8x
L0RCQ3ZEWFhIVTExejZxa3J2ZFd1a1dJMHVKWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
ZDJhYWIwLTgzNjMtNGIxNC05Y2MyLWM4YmI4ZWEzOTgwNC8xL2Q3QWdNSWhsd3pZ
TnF4bnpwWEF6UVlaT24xQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLDAMAwQAUEnbAwQAUEncAwQAW+iBAwQA
W+jGAwQAW+jQAwQAW+jrAwQCuVeQMA0GCSqGSIb3DQEBCwUAA4IBAQBW/3eM0ZSr
V7ZwCWb6kby3z0VqL/0uS5DuHwhYpfGRQGL1ZBYG7ko2G0/tQGbXCMGqH1WH8qo9
Uo1J/e5+cbYBt7BLT114mMJRjheBKEqxhdOScN6ziTi3K9DXmKpYYjsYZYrbbN5Q
CuBzeLh1Sze5wggg6cN5RTHqHf7M6XdRn9ZIxwQSysNsY2GIdi43VFyy1mywmY8v
4dcfQwTqHvVaBFXBxi8RhHy71EnHcEJbIah2AhQfl8SovIc3f1Qnq/2u7yMCbaUV
uhs6h4REa6Gt8FG2DDcim5YQpTTShJLcBN+2zZYwQjskJeui/otZk/lxf6vOc0VM
u6ulXDnUQL7G
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:48 2025 by rpki-client