Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/AK9qfJkNh9A7UobtsjCRrNXYVMk.roa
File: AK9qfJkNh9A7UobtsjCRrNXYVMk.roa (raw, json)
Hash identifier: gR2ksn28VI9XW8o6nSEMxUboer3LbUaB9IkU5DD5MtA=
Subject key identifier: 00:AF:6A:7C:99:0D:87:D0:3B:52:86:ED:B2:30:91:AC:D5:D8:54:C9
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 199AF7BB
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/AK9qfJkNh9A7UobtsjCRrNXYVMk.roa
Signing time: Sat 04 Jun 2022 10:05:22 +0000
ROA not before: Sat 04 Jun 2022 10:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196738
IP address blocks: 84.40.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429586363 (0x199af7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 4 10:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00af6a7c990d87d03b5286edb23091acd5d854c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:cf:23:e1:71:9a:ef:9c:36:19:4f:1a:17:
d7:03:b3:de:7b:a5:e6:7c:7b:50:33:c1:1f:04:1f:
fd:92:30:c8:8a:80:bf:b7:17:ab:f1:1c:e4:36:56:
9e:26:d3:1f:59:ac:6e:41:35:ed:f6:cc:d1:b6:c0:
95:39:94:b2:55:9e:3e:48:8a:b1:79:a5:27:8e:f4:
fe:6f:66:48:28:39:37:2d:d5:79:cc:9e:50:c1:a3:
4b:01:6c:d7:6a:05:21:67:d4:3c:74:c7:d1:0e:c7:
e7:e0:b1:ad:ed:fe:31:47:52:80:2e:08:d8:f7:15:
51:54:0d:70:a5:ef:2e:75:aa:6f:e4:d6:36:63:0d:
45:84:e4:93:22:cd:7e:d7:5a:69:a0:4c:ad:28:24:
5c:85:6b:6c:67:98:b8:e4:16:78:1d:4f:a9:cb:10:
5f:08:06:c5:a0:30:be:27:ee:af:5a:d0:2c:4d:ce:
de:5a:5a:67:b9:f4:15:62:b4:b7:3b:78:7e:38:35:
dc:cf:ba:b8:a3:cf:67:ee:93:ec:02:d0:2a:52:b6:
04:73:a3:b8:55:4e:c7:52:d3:fd:c2:95:d2:3e:be:
72:13:18:fa:9a:b9:c1:82:07:18:cf:19:8a:22:25:
9b:c6:d6:4c:76:a4:0f:eb:4e:c0:f9:b0:61:36:9a:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:6A:7C:99:0D:87:D0:3B:52:86:ED:B2:30:91:AC:D5:D8:54:C9
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/AK9qfJkNh9A7UobtsjCRrNXYVMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.81.0/24
Signature Algorithm: sha256WithRSAEncryption
89:91:d7:fc:a5:0b:74:fe:88:83:23:54:17:db:c5:3b:7b:28:
fb:96:ed:1b:54:a5:cd:a1:f5:41:c7:c9:1d:a7:b1:53:12:99:
04:38:44:10:97:c6:66:39:5d:0b:e0:d5:45:b3:f3:00:26:b1:
85:54:5a:c9:64:62:fb:5b:91:d0:45:6b:ae:c7:72:35:5b:bf:
a4:77:47:f9:46:cf:c1:ed:81:ac:67:e3:12:2b:1e:a0:af:fb:
e4:6f:0a:14:35:36:c4:cd:c6:ac:a7:fe:6c:55:b0:78:b9:86:
2b:dd:5a:ca:12:52:da:6c:a3:f1:d1:9f:8f:81:6b:e7:c0:9c:
2f:78:86:96:ca:fc:23:3f:6a:b7:08:fa:81:e8:27:48:54:d4:
8d:53:73:4b:40:60:29:44:be:e7:d0:21:1a:0c:54:fe:bd:62:
88:4b:d9:95:01:48:92:df:aa:22:cb:51:9a:4d:6d:08:56:41:
53:3f:ee:2e:38:8a:f5:1f:e9:1e:b9:a4:35:08:d4:f9:21:86:
1a:d8:64:ba:2b:02:2a:34:9a:ce:3c:bd:b1:af:2f:dc:ba:f8:
be:45:d6:19:f8:98:a0:80:ad:f2:fa:ff:38:57:48:d8:0b:52:
b7:fc:c4:bc:2e:34:d9:36:02:51:43:9c:50:31:ce:c5:30:66:
df:e2:57:2d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGZr3uzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIyZjRmYTUxNjNhZjk2MTY4ZTg4ZmJmOWNiNGVkMWVkOGZiNGM0MB4XDTIyMDYw
NDEwMDUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDBhZjZhN2M5OTBk
ODdkMDNiNTI4NmVkYjIzMDkxYWNkNWQ4NTRjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI+7zyPhcZrvnDYZTxoX1wOz3nul5nx7UDPBHwQf/ZIwyIqA
v7cXq/Ec5DZWnibTH1msbkE17fbM0bbAlTmUslWePkiKsXmlJ470/m9mSCg5Ny3V
ecyeUMGjSwFs12oFIWfUPHTH0Q7H5+Cxre3+MUdSgC4I2PcVUVQNcKXvLnWqb+TW
NmMNRYTkkyLNftdaaaBMrSgkXIVrbGeYuOQWeB1PqcsQXwgGxaAwvifur1rQLE3O
3lpaZ7n0FWK0tzt4fjg13M+6uKPPZ+6T7ALQKlK2BHOjuFVOx1LT/cKV0j6+chMY
+pq5wYIHGM8ZiiIlm8bWTHakD+tOwPmwYTaarm8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQAr2p8mQ2H0DtShu2yMJGs1dhUyTAfBgNVHSMEGDAWgBSEsvT6UWOvlhaO
iPv5y07R7Y+0xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMTDAtbEZqcjVZV2pvajctY3RPMGUyUHRNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8x
L0FLOXFmSmtOaDlBN1VvYnRzakNSck5YWVZNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8xL2hMTDAtbEZqcjVZ
V2pvajctY3RPMGUyUHRNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFQoUTANBgkqhkiG9w0BAQsFAAOC
AQEAiZHX/KULdP6IgyNUF9vFO3so+5btG1SlzaH1QcfJHaexUxKZBDhEEJfGZjld
C+DVRbPzACaxhVRayWRi+1uR0EVrrsdyNVu/pHdH+UbPwe2BrGfjEiseoK/75G8K
FDU2xM3GrKf+bFWweLmGK91ayhJS2myj8dGfj4Fr58CcL3iGlsr8Iz9qtwj6gegn
SFTUjVNzS0BgKUS+59AhGgxU/r1iiEvZlQFIkt+qIstRmk1tCFZBUz/uLjiK9R/p
HrmkNQjU+SGGGthkuisCKjSazjy9sa8v3Lr4vkXWGfiYoICt8vr/OFdI2AtSt/zE
vC402TYCUUOcUDHOxTBm3+JXLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org