Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/oD25I1T1QBmbZvc25WcC8vpCR3U.roa
File: oD25I1T1QBmbZvc25WcC8vpCR3U.roa (raw, json)
Hash identifier: yp2SRKxjVe7/dRnXubXgCJE6xz9mX+7Ga16xdY3JCnA=
Subject key identifier: A0:3D:B9:23:54:F5:40:19:9B:66:F7:36:E5:67:02:F2:FA:42:47:75
Certificate issuer: /CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Certificate serial: 01837934D24407F92022088A9A8A65DEFCFD
Authority key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/oD25I1T1QBmbZvc25WcC8vpCR3U.roa
Signing time: Mon 26 Sep 2022 09:50:48 +0000
ROA not before: Mon 26 Sep 2022 09:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:34:d2:44:07:f9:20:22:08:8a:9a:8a:65:de:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Validity
Not Before: Sep 26 09:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a03db92354f540199b66f736e56702f2fa424775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:f9:27:da:12:98:d2:e6:91:57:4d:22:98:
97:eb:87:c3:cd:c5:86:45:52:b0:a4:39:6b:a0:d0:
61:88:bd:c5:e7:d0:82:2a:5f:ce:6b:2e:ae:bf:a9:
3b:ff:9f:60:7d:bc:2e:a1:dd:51:15:6a:9b:00:26:
16:24:9f:05:f3:2a:08:e8:29:70:41:99:a4:ae:df:
61:3d:01:fc:8a:60:a3:73:c3:c8:76:01:72:db:fa:
53:f8:61:52:07:a2:4f:a9:54:4c:39:a0:77:bd:c6:
e6:b9:04:76:20:31:9f:2b:db:85:d4:e5:e7:9c:25:
7b:89:d4:ee:1e:47:8f:32:97:06:c2:46:70:fa:b9:
17:08:0f:f9:58:11:7e:1c:d2:3c:88:13:c5:69:39:
5b:9a:95:2a:40:b0:4c:79:fe:f1:54:8f:d2:b2:45:
11:1c:41:55:7e:5c:6e:73:e8:d3:97:59:75:22:8e:
9a:00:3b:58:a0:78:48:37:6f:03:c2:07:0d:dc:93:
ef:11:fc:21:99:37:bb:b0:9a:24:eb:c0:19:48:81:
b3:29:af:b4:15:0b:77:59:9d:98:1b:5b:f5:0b:a7:
a8:b5:0f:4a:96:78:cc:f7:16:5a:01:da:7c:7e:b7:
90:ec:3d:aa:9f:4e:28:fb:e7:ee:32:ac:f7:d1:de:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3D:B9:23:54:F5:40:19:9B:66:F7:36:E5:67:02:F2:FA:42:47:75
X509v3 Authority Key Identifier:
keyid:08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/oD25I1T1QBmbZvc25WcC8vpCR3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1d:c0:01:db:8f:a4:fb:48:9a:5d:c4:cd:df:8b:7e:74:ac:
ea:88:0d:3d:6f:7a:e4:27:08:f2:70:ac:b7:ec:8c:a6:f5:76:
d2:50:40:b1:35:3c:61:5c:03:1c:dd:11:b2:e8:45:3a:b8:4d:
e6:01:24:8a:86:a9:d1:4f:31:cd:d4:11:d6:9b:8f:d8:d3:d9:
e2:71:da:41:db:77:a0:c8:07:f9:41:0d:1b:20:0d:bf:13:dc:
d1:6a:2e:8c:30:45:6c:f4:53:0a:73:bc:dc:81:be:8f:65:01:
c2:e2:54:b2:56:d3:8c:3a:98:ae:e1:48:96:d4:4e:57:bc:13:
70:cf:b9:6b:be:82:5a:68:ba:0e:75:24:a8:65:bf:78:4d:c4:
be:e2:90:79:75:2f:9d:95:66:63:b9:b9:1d:c4:09:73:54:61:
87:76:4b:5c:2e:8d:9d:b7:88:1f:1e:c4:8a:fb:83:a3:f9:96:
38:32:b6:b6:82:c6:aa:d2:05:20:fe:f1:e1:29:47:11:1d:3a:
65:b4:82:9c:b7:88:db:ce:8a:02:ad:d7:09:5d:41:32:b5:af:
6d:e7:29:70:01:c6:ff:d0:fa:e3:d9:f3:91:6a:2b:57:46:41:
97:45:3c:4b:40:3a:59:35:c0:41:6c:18:42:27:bf:41:66:76:
99:26:62:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYN5NNJEB/kgIgiKmopl3vz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODFjMjZlZmQ3NjcxZjI3MmRjNGZlN2Q0M2VjYzk5OGE1
YzBjZjIwHhcNMjIwOTI2MDk1MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDNkYjkyMzU0ZjU0MDE5OWI2NmY3MzZlNTY3MDJmMmZhNDI0Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A35J9oSmNLmkVdNIpiX64fDzcWG
RVKwpDlroNBhiL3F59CCKl/Oay6uv6k7/59gfbwuod1RFWqbACYWJJ8F8yoI6Clw
QZmkrt9hPQH8imCjc8PIdgFy2/pT+GFSB6JPqVRMOaB3vcbmuQR2IDGfK9uF1OXn
nCV7idTuHkePMpcGwkZw+rkXCA/5WBF+HNI8iBPFaTlbmpUqQLBMef7xVI/SskUR
HEFVflxuc+jTl1l1Io6aADtYoHhIN28DwgcN3JPvEfwhmTe7sJok68AZSIGzKa+0
FQt3WZ2YG1v1C6eotQ9KlnjM9xZaAdp8freQ7D2qn04o++fuMqz30d7TowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKA9uSNU9UAZm2b3NuVnAvL6Qkd1MB8GA1UdIwQY
MBaAFAiBwm79dnHyctxP59Q+zJmKXAzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lIQ2J2MTJjZkp5M0VfbjFEN01tWXBjRFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82NDVmYjYtOGVkZi00YTc1LWJiYzEt
YWUxM2VlZjRmMTJlLzEvb0QyNUkxVDFRQm1iWnZjMjVXY0M4dnBDUjNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82NDVmYjYtOGVkZi00YTc1LWJiYzEtYWUxM2VlZjRmMTJl
LzEvQ0lIQ2J2MTJjZkp5M0VfbjFEN01tWXBjRFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbwMA0G
CSqGSIb3DQEBCwUAA4IBAQCrHcAB24+k+0iaXcTN34t+dKzqiA09b3rkJwjycKy3
7Iym9XbSUECxNTxhXAMc3RGy6EU6uE3mASSKhqnRTzHN1BHWm4/Y09nicdpB23eg
yAf5QQ0bIA2/E9zRai6MMEVs9FMKc7zcgb6PZQHC4lSyVtOMOpiu4UiW1E5XvBNw
z7lrvoJaaLoOdSSoZb94TcS+4pB5dS+dlWZjubkdxAlzVGGHdktcLo2dt4gfHsSK
+4Oj+ZY4Mra2gsaq0gUg/vHhKUcRHTpltIKct4jbzooCrdcJXUEyta9t5ylwAcb/
0Prj2fORaitXRkGXRTxLQDpZNcBBbBhCJ79BZnaZJmLS
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:45 2023 by rpki-client on console-ams.rpki-client.org