Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/ycsGRZs1lTYWzkg4yFIl5O2jfvg.roa
File: ycsGRZs1lTYWzkg4yFIl5O2jfvg.roa (raw, json)
Hash identifier: nn0YSUNHZCRktaOTqKx/s7OkLc3reATVlG2xZEUG2nI=
Subject key identifier: C9:CB:06:45:9B:35:95:36:16:CE:48:38:C8:52:25:E4:ED:A3:7E:F8
Certificate issuer: /CN=b25d856988c62a602073ec2938581dd4a586fb8f
Certificate serial: 1414E8AB
Authority key identifier: B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/ycsGRZs1lTYWzkg4yFIl5O2jfvg.roa
Signing time: Sat 01 Jan 2022 00:53:39 +0000
ROA not before: Sat 01 Jan 2022 00:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42713
IP address blocks: 77.244.144.0/24 maxlen: 24
77.244.144.0/22 maxlen: 24
77.244.145.0/24 maxlen: 24
77.244.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336914603 (0x1414e8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25d856988c62a602073ec2938581dd4a586fb8f
Validity
Not Before: Jan 1 00:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9cb06459b35953616ce4838c85225e4eda37ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:81:8b:b4:e1:16:56:ae:fd:63:3e:20:31:
01:65:f4:57:56:8b:91:0e:d3:7a:eb:62:4f:73:c4:
53:c4:44:8b:b2:60:e2:92:ea:79:62:55:e1:5e:ff:
71:89:68:77:12:5c:e8:03:b6:31:76:67:c5:63:09:
ab:02:e6:82:7f:ef:2c:62:d9:ac:f2:7c:58:13:df:
ac:81:a4:b7:85:5c:0a:96:52:92:6c:79:44:33:e9:
25:18:9f:62:47:51:a0:ff:3e:5f:7d:e5:f5:ab:a7:
14:53:70:68:2a:0e:1f:a3:44:cd:9f:3c:b5:39:7b:
e5:c1:5e:4b:fe:8b:c7:5f:8b:f6:2b:1f:83:b4:34:
00:60:6f:db:da:9f:52:8b:a1:5d:16:a1:82:bf:d9:
c1:85:f8:2e:1e:1c:6a:0b:c9:b5:ae:77:08:9e:db:
66:9e:4b:36:c6:77:11:84:78:17:87:bd:1a:b7:60:
4c:53:5b:77:65:b6:09:15:dc:c4:cd:86:71:1e:d1:
ff:80:4c:d4:1b:44:f4:30:2d:e6:47:69:47:1e:5f:
5d:61:ff:d2:a9:af:6b:68:e4:58:99:f2:79:4d:3c:
56:d1:68:a7:b5:87:ea:40:d5:96:be:1a:fd:71:71:
2e:88:c2:0c:65:1b:88:c5:65:36:f3:21:3d:86:53:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:06:45:9B:35:95:36:16:CE:48:38:C8:52:25:E4:ED:A3:7E:F8
X509v3 Authority Key Identifier:
keyid:B2:5D:85:69:88:C6:2A:60:20:73:EC:29:38:58:1D:D4:A5:86:FB:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl2FaYjGKmAgc-wpOFgd1KWG-48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/ycsGRZs1lTYWzkg4yFIl5O2jfvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bc9888-bf0a-4bfd-9496-9d082117d8c1/1/sl2FaYjGKmAgc-wpOFgd1KWG-48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:65:12:a5:1e:65:b0:fc:97:87:af:83:71:9c:fa:30:5c:0b:
06:16:31:a4:b9:90:a1:f9:2c:95:2a:84:ed:47:cc:88:d1:06:
f1:c7:2e:e5:d7:a4:5d:f7:f2:3d:00:af:7e:85:65:72:c3:19:
4d:c4:49:42:8d:93:8a:4d:ad:6d:3c:42:09:f7:62:67:7b:f2:
08:de:d1:3b:4c:72:c4:f4:8e:90:20:c9:46:0b:0b:95:2d:1d:
b7:33:3b:c5:c4:1d:39:1b:28:c5:d3:5a:91:87:8a:09:61:e0:
dd:65:48:95:a3:62:17:1a:97:67:b5:33:f4:63:fd:cd:e9:44:
9b:f0:a0:76:76:e6:6c:fe:5d:cc:40:d8:06:86:97:83:65:05:
c9:37:0d:3f:c7:e1:fe:e0:de:fa:e1:90:c3:07:49:01:94:62:
3b:5b:1b:2b:d3:31:2e:29:18:ae:6d:a2:e4:ba:a0:98:c7:8d:
45:2e:ef:9d:f3:c5:af:df:8b:07:b6:39:21:ac:8a:93:a2:a3:
2a:af:20:0f:02:f4:9c:70:a3:8f:77:3d:71:7e:34:a6:9b:7f:
4b:d6:51:a9:45:00:d7:60:23:5f:11:72:05:17:6c:b5:87:c8:
d1:ca:68:02:b8:d3:12:4e:f4:5a:f9:4a:ba:c5:84:8b:c5:11:
4c:cc:43:93
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFBToqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MjVkODU2OTg4YzYyYTYwMjA3M2VjMjkzODU4MWRkNGE1ODZmYjhmMB4XDTIyMDEw
MTAwNTMzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzljYjA2NDU5YjM1
OTUzNjE2Y2U0ODM4Yzg1MjI1ZTRlZGEzN2VmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALUzgYu04RZWrv1jPiAxAWX0V1aLkQ7TeutiT3PEU8REi7Jg
4pLqeWJV4V7/cYlodxJc6AO2MXZnxWMJqwLmgn/vLGLZrPJ8WBPfrIGkt4VcCpZS
kmx5RDPpJRifYkdRoP8+X33l9aunFFNwaCoOH6NEzZ88tTl75cFeS/6Lx1+L9isf
g7Q0AGBv29qfUouhXRahgr/ZwYX4Lh4cagvJta53CJ7bZp5LNsZ3EYR4F4e9Grdg
TFNbd2W2CRXcxM2GcR7R/4BM1BtE9DAt5kdpRx5fXWH/0qmva2jkWJnyeU08VtFo
p7WH6kDVlr4a/XFxLojCDGUbiMVlNvMhPYZTp/kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTJywZFmzWVNhbOSDjIUiXk7aN++DAfBgNVHSMEGDAWgBSyXYVpiMYqYCBz
7Ck4WB3UpYb7jzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NsMkZhWWpHS21BZ2Mtd3BPRmdkMUtXRy00OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjMvYmM5ODg4LWJmMGEtNGJmZC05NDk2LTlkMDgyMTE3ZDhjMS8x
L3ljc0dSWnMxbFRZV3prZzR5RklsNU8yamZ2Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMv
YmM5ODg4LWJmMGEtNGJmZC05NDk2LTlkMDgyMTE3ZDhjMS8xL3NsMkZhWWpHS21B
Z2Mtd3BPRmdkMUtXRy00OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAk30kDANBgkqhkiG9w0BAQsFAAOC
AQEATGUSpR5lsPyXh6+DcZz6MFwLBhYxpLmQofkslSqE7UfMiNEG8ccu5dekXffy
PQCvfoVlcsMZTcRJQo2Tik2tbTxCCfdiZ3vyCN7RO0xyxPSOkCDJRgsLlS0dtzM7
xcQdORsoxdNakYeKCWHg3WVIlaNiFxqXZ7Uz9GP9zelEm/CgdnbmbP5dzEDYBoaX
g2UFyTcNP8fh/uDe+uGQwwdJAZRiO1sbK9MxLikYrm2i5LqgmMeNRS7vnfPFr9+L
B7Y5IayKk6KjKq8gDwL0nHCjj3c9cX40ppt/S9ZRqUUA12AjXxFyBRdstYfI0cpo
ArjTEk70WvlKusWEi8URTMxDkw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:33 2023 by rpki-client on console.sobornost.net