Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203231383539.roa
File: 37372e38332e3130342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: nK1ZyBj+LQodzHDRtRBh3CB05YAggoeVHYiWckb7E7Q=
Subject key identifier: 81:6E:5A:BB:21:F4:57:75:AC:64:72:B2:20:B2:6C:8D:1B:65:1E:23
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 78CBF2146411EA589C03D063AF9E3844B10B9950
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203231383539.roa
Signing time: Tue 26 Dec 2023 02:42:11 +0000
ROA not before: Tue 26 Dec 2023 02:37:11 +0000
ROA not after: Tue 24 Dec 2024 02:42:11 +0000
asID: 21859
IP address blocks: 77.83.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cb:f2:14:64:11:ea:58:9c:03:d0:63:af:9e:38:44:b1:0b:99:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Dec 26 02:37:11 2023 GMT
Not After : Dec 24 02:42:11 2024 GMT
Subject: CN=816E5ABB21F45775AC6472B220B26C8D1B651E23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:07:d5:30:35:0e:34:76:0b:c7:04:3e:22:
fd:d3:8b:b1:7b:ff:63:dc:16:b9:2f:39:0f:0b:89:
54:b0:ca:b1:07:e0:91:e3:55:b1:67:d5:a1:53:b2:
63:6c:2e:45:61:0c:d8:e2:8b:e9:f0:5a:16:0b:83:
36:12:5a:45:97:81:f6:43:2b:90:41:22:07:3a:1f:
fc:46:a1:13:ed:2c:95:64:18:b9:dc:94:d0:52:78:
74:3f:81:9d:61:a3:8b:43:40:a7:92:4b:c0:50:bd:
88:e5:c3:1c:db:1e:b6:d9:94:53:b2:40:0a:2e:03:
63:d2:15:2a:5d:bb:a8:d5:8e:51:8d:3d:7a:80:a2:
75:b4:0c:4c:ab:6c:90:ea:de:b2:02:a0:f6:b5:ee:
ba:64:50:0c:77:66:1a:e5:ad:12:0a:ad:44:65:c8:
3f:0a:28:98:02:a3:8a:ae:f9:e3:70:b6:d4:c6:41:
32:8c:5f:7f:28:92:4c:5f:b1:bb:d0:97:b8:13:96:
86:61:ec:c1:0f:b8:44:a5:a9:54:67:ea:83:c4:2f:
6d:5c:b3:da:4e:b1:12:44:0e:62:51:85:12:f2:31:
cb:46:cc:69:01:31:b1:67:6f:3e:19:af:b6:cf:da:
da:38:07:12:60:c8:4c:2b:26:67:9c:89:30:59:60:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6E:5A:BB:21:F4:57:75:AC:64:72:B2:20:B2:6C:8D:1B:65:1E:23
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5a:78:62:da:0a:c3:92:02:26:1f:cf:19:b0:67:1d:c3:1f:
91:47:f4:70:fb:ea:87:9c:d8:0a:f5:ad:a5:54:af:6d:6b:b7:
52:bb:1a:77:52:23:d4:20:5a:56:da:2b:ac:8f:ab:26:c7:0d:
0e:a7:4c:e2:e4:0c:2e:d1:37:c3:3c:97:57:4a:51:fc:87:99:
5c:8b:4d:df:b4:9f:cb:61:c5:4c:bf:5d:d7:7d:8e:e0:99:6f:
13:fa:c2:50:75:e6:0c:3b:3b:00:c3:92:9d:84:f2:83:52:7e:
d9:b9:84:f5:2f:6d:40:7e:24:ab:3b:28:56:78:0f:b5:11:22:
5c:0c:b6:17:37:2c:43:63:a9:eb:65:57:d0:26:49:c6:be:3f:
e2:c1:d9:ed:c1:41:b5:e2:92:cf:17:d5:67:1b:9a:58:38:2b:
1e:66:e0:a2:5c:32:b6:51:19:35:fd:ed:de:12:d5:44:a6:46:
40:ba:ee:05:c6:83:55:44:a2:b2:ce:ac:9a:37:9a:2e:1c:ba:
4f:7c:0c:63:13:df:d4:bc:02:03:cc:e7:93:0f:c1:2a:d0:7c:
04:1c:aa:a9:24:91:0d:49:b7:33:7d:6e:da:95:b2:16:3a:76:
b1:0c:4f:41:ac:f6:08:7b:10:79:2d:55:bb:0d:12:30:85:ce:
f5:37:b6:8d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeMvyFGQR6licA9Bjr544RLELmVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yMzEyMjYwMjM3MTFaFw0yNDEyMjQwMjQyMTFaMDMxMTAvBgNV
BAMTKDgxNkU1QUJCMjFGNDU3NzVBQzY0NzJCMjIwQjI2QzhEMUI2NTFFMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rwfVMDUONHYLxwQ+Iv3Ti7F7
/2PcFrkvOQ8LiVSwyrEH4JHjVbFn1aFTsmNsLkVhDNjii+nwWhYLgzYSWkWXgfZD
K5BBIgc6H/xGoRPtLJVkGLnclNBSeHQ/gZ1ho4tDQKeSS8BQvYjlwxzbHrbZlFOy
QAouA2PSFSpdu6jVjlGNPXqAonW0DEyrbJDq3rICoPa17rpkUAx3ZhrlrRIKrURl
yD8KKJgCo4qu+eNwttTGQTKMX38okkxfsbvQl7gTloZh7MEPuESlqVRn6oPEL21c
s9pOsRJEDmJRhRLyMctGzGkBMbFnbz4Zr7bP2to4BxJgyEwrJmeciTBZYL2bAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUgW5auyH0V3WsZHKyILJsjRtlHiMwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1T
aDANBgkqhkiG9w0BAQsFAAOCAQEAklp4YtoKw5ICJh/PGbBnHcMfkUf0cPvqh5zY
CvWtpVSvbWu3Ursad1Ij1CBaVtorrI+rJscNDqdM4uQMLtE3wzyXV0pR/IeZXItN
37Sfy2HFTL9d132O4JlvE/rCUHXmDDs7AMOSnYTyg1J+2bmE9S9tQH4kqzsoVngP
tREiXAy2FzcsQ2Op62VX0CZJxr4/4sHZ7cFBteKSzxfVZxuaWDgrHmbgolwytlEZ
Nf3t3hLVRKZGQLruBcaDVUSiss6smjeaLhy6T3wMYxPf1LwCA8znkw/BKtB8BByq
qSSRDUm3M31u2pWyFjp2sQxPQaz2CHsQeS1Vuw0SMIXO9Te2jQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:21 2025 by rpki-client