Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/dXvE4kbu6fNpDiyxTt24WM8XV5k.roa
File: dXvE4kbu6fNpDiyxTt24WM8XV5k.roa (raw, json)
Hash identifier: zODPg9BGgFOcG4GMscHP0Pa9c0nNz1g98dfGxqotxn8=
Subject key identifier: 75:7B:C4:E2:46:EE:E9:F3:69:0E:2C:B1:4E:DD:B8:58:CF:17:57:99
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 094DF5F4
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/dXvE4kbu6fNpDiyxTt24WM8XV5k.roa
Signing time: Sat 01 Jan 2022 10:59:56 +0000
ROA not before: Sat 01 Jan 2022 10:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25386
IP address blocks: 62.80.160.0/19 maxlen: 20
185.117.240.0/22 maxlen: 23
2a06:9000::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156104180 (0x94df5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 1 10:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=757bc4e246eee9f3690e2cb14eddb858cf175799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:17:c8:ec:e5:5c:b6:50:c0:76:43:72:c0:
40:95:eb:ac:ec:36:a9:3f:c5:8f:7c:7d:47:d0:ca:
b3:a9:94:8f:c4:91:36:c8:99:75:61:c9:55:b9:98:
00:ea:d1:95:e6:71:93:7b:5b:a9:9a:64:77:bc:d0:
1a:86:59:53:52:ea:64:a4:c0:d3:12:56:b2:1e:7e:
52:87:6e:fc:a7:c4:f2:91:0f:89:fb:c0:df:f7:d0:
d5:ba:69:c0:c6:c0:6a:8b:af:69:ef:8c:7a:31:24:
f7:e3:e0:91:20:f5:42:ea:0f:d2:df:02:48:31:74:
d8:7a:b2:ca:28:67:ed:75:69:37:00:82:be:62:7f:
b6:73:f9:0f:ef:6f:b5:2f:49:70:8f:0d:c9:f6:2f:
cf:76:16:63:b3:93:e0:72:8b:67:94:eb:04:a6:93:
34:d6:b2:c5:74:c9:87:68:64:cd:79:36:3c:d9:a5:
42:1e:b1:61:14:10:2c:c1:20:fa:69:f2:70:08:4f:
d1:d1:0f:f4:f3:4b:a5:63:e7:76:09:04:0c:57:2b:
ac:2c:98:03:e0:44:ec:f8:d6:d2:5c:1b:c8:43:00:
4b:9d:d9:44:45:ad:e6:4c:b5:fa:f2:be:b4:2e:2d:
12:b0:d9:f8:73:a7:c1:97:a2:82:4f:c9:07:86:a3:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:C4:E2:46:EE:E9:F3:69:0E:2C:B1:4E:DD:B8:58:CF:17:57:99
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/dXvE4kbu6fNpDiyxTt24WM8XV5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
Signature Algorithm: sha256WithRSAEncryption
af:59:f7:f4:8b:73:8b:19:78:92:21:ac:78:cd:dc:c4:f1:73:
26:b0:93:32:66:7c:44:34:e9:1f:3e:c4:72:57:86:8c:3e:a3:
7e:9f:13:1f:bf:a3:a4:76:74:f1:20:4f:ed:d2:17:59:e9:d7:
7a:ee:a0:58:38:34:24:d0:49:65:f0:1f:a9:2d:75:ea:c4:46:
a0:80:01:e1:1b:3a:31:76:15:e2:cb:d4:21:e8:75:37:54:02:
be:e9:52:fb:a0:a8:10:24:3a:58:5c:81:40:18:e3:43:e0:9b:
ce:ec:b6:01:51:0d:2c:86:57:78:84:36:02:a5:e2:63:bb:10:
09:2a:cd:ed:9b:22:0a:db:49:e2:29:eb:25:6c:dc:05:4e:97:
47:62:7b:7a:d1:d7:02:c0:f2:af:52:a6:fe:b1:81:4e:bc:22:
3c:8e:46:f6:78:79:80:ca:a2:02:d6:1e:9c:68:2c:93:37:49:
de:04:4d:7a:b4:16:6f:06:d8:4a:4b:90:8b:1d:f6:62:86:63:
f0:34:6e:e3:a1:dd:5f:57:ca:7a:2e:6b:1e:c4:2d:c6:72:f9:
3c:5d:cb:f0:d1:d2:01:6a:ee:65:7a:30:27:8e:ab:17:4e:f4:
79:a2:8e:d2:c7:c6:a3:bc:a8:82:8c:9e:18:69:a0:13:6e:3d:
18:bf:d5:61
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECU319DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZGJkOGU5OWY4MjdmZjk1ZDI4MWQ0ZmY3YmMyN2YwNDVmYWJmMTA1MB4XDTIyMDEw
MTEwNTk1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzU3YmM0ZTI0NmVl
ZTlmMzY5MGUyY2IxNGVkZGI4NThjZjE3NTc5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK7KF8js5Vy2UMB2Q3LAQJXrrOw2qT/Fj3x9R9DKs6mUj8SR
NsiZdWHJVbmYAOrRleZxk3tbqZpkd7zQGoZZU1LqZKTA0xJWsh5+Uodu/KfE8pEP
ifvA3/fQ1bppwMbAaouvae+MejEk9+PgkSD1QuoP0t8CSDF02Hqyyihn7XVpNwCC
vmJ/tnP5D+9vtS9JcI8NyfYvz3YWY7OT4HKLZ5TrBKaTNNayxXTJh2hkzXk2PNml
Qh6xYRQQLMEg+mnycAhP0dEP9PNLpWPndgkEDFcrrCyYA+BE7PjW0lwbyEMAS53Z
REWt5ky1+vK+tC4tErDZ+HOnwZeigk/JB4ajqNECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR1e8TiRu7p82kOLLFO3bhYzxdXmTAfBgNVHSMEGDAWgBStvY6Z+Cf/ldKB
1P97wn8EX6vxBTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JiMk9tZmduXzVYU2dkVF9lOEpfQkYtcjhRVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvYjk5M2M3LWZhOGQtNDNjMC05Mzc0LTFkMzFhMTk2MDE0Ny8x
L2RYdkU0a2J1NmZOcERpeXhUdDI0V004WFY1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
Yjk5M2M3LWZhOGQtNDNjMC05Mzc0LTFkMzFhMTk2MDE0Ny8xL3JiMk9tZmduXzVY
U2dkVF9lOEpfQkYtcjhRVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBT5QoAMEArl18DANBAIAAjAHAwUD
KgaQADANBgkqhkiG9w0BAQsFAAOCAQEAr1n39Itzixl4kiGseM3cxPFzJrCTMmZ8
RDTpHz7EcleGjD6jfp8TH7+jpHZ08SBP7dIXWenXeu6gWDg0JNBJZfAfqS116sRG
oIAB4Rs6MXYV4svUIeh1N1QCvulS+6CoECQ6WFyBQBjjQ+Cbzuy2AVENLIZXeIQ2
AqXiY7sQCSrN7ZsiCttJ4inrJWzcBU6XR2J7etHXAsDyr1Km/rGBTrwiPI5G9nh5
gMqiAtYenGgskzdJ3gRNerQWbwbYSkuQix32YoZj8DRu46HdX1fKei5rHsQtxnL5
PF3L8NHSAWruZXowJ46rF070eaKO0sfGo7yogoyeGGmgE249GL/VYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:40 2024 by rpki-client on console-ams.rpki-client.org