Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/yZJHWLOFdGoxbhWGF9b1barJLp0.roa
File: yZJHWLOFdGoxbhWGF9b1barJLp0.roa (raw, json)
Hash identifier: xMsDZ8GMRpSShb2AhopmsF6tu8t2uc7R/RyeEqKmxu8=
Subject key identifier: C9:92:47:58:B3:85:74:6A:31:6E:15:86:17:D6:F5:6D:AA:C9:2E:9D
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 7B04D5
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/yZJHWLOFdGoxbhWGF9b1barJLp0.roa
Signing time: Sat 01 Jan 2022 01:57:16 +0000
ROA not before: Sat 01 Jan 2022 01:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57840
IP address blocks: 37.209.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8062165 (0x7b04d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 01:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9924758b385746a316e158617d6f56daac92e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:e7:44:71:d7:d7:2d:be:3a:74:2a:8e:99:
83:b1:26:f3:35:94:aa:41:b8:67:59:54:1b:fd:e8:
6c:ac:c2:6e:37:e1:35:41:c4:96:2f:68:6b:cc:08:
ff:80:86:3c:75:35:66:1b:06:22:26:01:6f:55:ce:
29:af:4c:78:a4:05:df:83:7b:f5:f5:9c:d0:30:ca:
96:41:b1:e3:b2:81:ea:3e:32:99:25:1a:77:76:4f:
49:54:09:87:4f:55:34:bd:d8:d5:4c:b4:09:1d:c9:
a2:db:00:cc:ec:01:b3:5e:12:f4:a2:7c:20:fc:c4:
5b:bb:6f:01:14:f1:64:ea:b2:8e:ce:66:f1:a4:18:
78:4a:90:59:0d:23:34:bc:54:f4:3d:ba:a9:8f:4d:
64:79:7b:eb:b7:f8:2a:df:c6:2d:be:7d:12:aa:84:
b4:59:de:74:65:67:5e:f2:a9:8f:83:fa:ab:51:34:
00:15:86:79:6f:9d:18:cc:c1:9e:70:0b:bf:27:de:
20:7b:56:16:33:bc:06:5d:66:e2:98:84:79:c0:7d:
1d:44:8f:3a:e4:58:85:e3:06:70:5f:79:fa:40:e9:
ef:4d:15:dc:56:7a:54:bd:95:e6:94:31:0a:04:bd:
e4:43:86:a3:48:31:56:43:ed:4a:2f:73:44:c8:98:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:92:47:58:B3:85:74:6A:31:6E:15:86:17:D6:F5:6D:AA:C9:2E:9D
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/yZJHWLOFdGoxbhWGF9b1barJLp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.175.0/24
Signature Algorithm: sha256WithRSAEncryption
16:5e:65:77:84:40:06:c4:8d:28:7b:c9:89:25:a4:81:94:ee:
44:ce:8b:06:80:a0:a7:c4:86:1d:13:bb:6a:05:7c:c9:2a:0e:
6d:f2:29:55:2e:70:e8:dc:0a:79:84:ab:e1:74:b8:96:e0:e0:
cb:f4:4a:fc:59:c6:d0:1c:b9:61:87:24:b5:8f:55:7f:07:5a:
bc:d5:c8:6a:2b:d4:e3:29:72:8d:79:2c:d3:5a:12:a4:82:ca:
33:3d:bc:88:b4:09:93:f4:cb:56:e5:0f:23:cc:91:61:2a:2d:
4f:99:5e:dc:32:25:d3:f4:64:a4:e3:b8:9c:33:b1:c7:db:2b:
18:6d:57:13:ca:d4:e4:2c:03:a3:17:83:9b:49:f8:99:22:96:
88:3e:65:38:7f:88:b0:28:76:6e:a8:da:2f:62:c6:50:2e:8b:
4d:46:30:65:ca:22:03:52:ae:f3:93:db:11:f0:e3:54:ab:1e:
ea:49:a7:a5:2b:02:2b:c8:3f:43:bf:a4:54:8b:7d:f6:2c:25:
d9:33:67:7d:7e:00:f2:ce:91:b0:aa:e6:e5:e7:36:f1:e8:e0:
d5:5d:0a:07:da:5b:05:52:aa:a1:60:5b:45:fc:e5:f0:9b:92:
bb:e3:17:87:88:a5:33:e1:d8:3e:62:df:b7:27:5a:cf:b0:6d:
62:00:ce:06
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDewTVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
ODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1ZmY0ODUwHhcNMjIwMTAx
MDE1NzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjOTkyNDc1OGIzODU3
NDZhMzE2ZTE1ODYxN2Q2ZjU2ZGFhYzkyZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqSPnRHHX1y2+OnQqjpmDsSbzNZSqQbhnWVQb/ehsrMJuN+E1
QcSWL2hrzAj/gIY8dTVmGwYiJgFvVc4pr0x4pAXfg3v19ZzQMMqWQbHjsoHqPjKZ
JRp3dk9JVAmHT1U0vdjVTLQJHcmi2wDM7AGzXhL0onwg/MRbu28BFPFk6rKOzmbx
pBh4SpBZDSM0vFT0Pbqpj01keXvrt/gq38Ytvn0SqoS0Wd50ZWde8qmPg/qrUTQA
FYZ5b50YzMGecAu/J94ge1YWM7wGXWbimIR5wH0dRI865FiF4wZwX3n6QOnvTRXc
VnpUvZXmlDEKBL3kQ4ajSDFWQ+1KL3NEyJjCCQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMmSR1izhXRqMW4VhhfW9W2qyS6dMB8GA1UdIwQYMBaAFF2I5PejAkEsMWo7
tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJkLzEv
eVpKSFdMT0ZkR294YmhXR0Y5YjFiYXJKTHAwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83
NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJkLzEvWFlqazk2TUNRU3d4
YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJdGvMA0GCSqGSIb3DQEBCwUAA4IB
AQAWXmV3hEAGxI0oe8mJJaSBlO5EzosGgKCnxIYdE7tqBXzJKg5t8ilVLnDo3Ap5
hKvhdLiW4ODL9Er8WcbQHLlhhyS1j1V/B1q81chqK9TjKXKNeSzTWhKkgsozPbyI
tAmT9MtW5Q8jzJFhKi1PmV7cMiXT9GSk47icM7HH2ysYbVcTytTkLAOjF4ObSfiZ
IpaIPmU4f4iwKHZuqNovYsZQLotNRjBlyiIDUq7zk9sR8ONUqx7qSaelKwIryD9D
v6RUi332LCXZM2d9fgDyzpGwqubl5zbx6ODVXQoH2lsFUqqhYFtF/OXwm5K74xeH
iKUz4dg+Yt+3J1rPsG1iAM4G
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net