Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/8-3TGsLPLwWNwe_oT8bRt-HeEDE.roa
File: 8-3TGsLPLwWNwe_oT8bRt-HeEDE.roa (raw, json)
Hash identifier: 9x98pFPwtag7lQjW56ZeYY7LSBPEn16/viiH3GQfE3c=
Subject key identifier: F3:ED:D3:1A:C2:CF:2F:05:8D:C1:EF:E8:4F:C6:D1:B7:E1:DE:10:31
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0183594B7067CAFE1F7EEA654F5796251EC3
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/8-3TGsLPLwWNwe_oT8bRt-HeEDE.roa
Signing time: Tue 20 Sep 2022 05:07:39 +0000
ROA not before: Tue 20 Sep 2022 05:07:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 81.46.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:59:4b:70:67:ca:fe:1f:7e:ea:65:4f:57:96:25:1e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Sep 20 05:07:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3edd31ac2cf2f058dc1efe84fc6d1b7e1de1031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:ed:74:a1:1a:92:81:b8:d9:9e:d0:58:6c:
e3:a7:6c:e2:27:55:a1:28:b7:95:9c:aa:27:2b:6a:
c0:36:68:a4:b9:04:51:1c:47:29:c1:34:d7:ee:1f:
d3:bc:04:50:2d:b5:28:74:7a:83:2d:2b:9b:cd:15:
53:5e:62:73:46:2e:d5:fd:f7:ea:6e:0c:6f:88:a4:
4e:68:38:4f:f1:a8:19:74:85:65:b9:f5:ab:b0:fc:
58:53:4c:4a:db:00:b2:83:b4:6e:ce:3e:40:84:35:
83:3f:c4:27:ae:f6:18:81:c3:4a:dc:4c:ec:2d:4d:
a1:1e:f9:5f:df:38:f1:0a:37:5c:83:b1:72:f8:ce:
5b:a5:d8:a7:3f:e8:36:f9:4b:53:06:5c:b3:b3:68:
29:04:d8:29:18:2e:84:ec:85:62:68:18:0a:0c:5c:
d0:ff:70:76:f0:26:01:2a:d4:9e:f6:39:fb:1f:cd:
38:96:75:4b:26:46:c6:ec:ba:c0:95:22:70:7d:7c:
86:97:3f:10:c2:c5:7f:3e:f3:6d:02:cd:84:db:9a:
2c:8c:31:e5:73:58:e8:ed:20:0c:61:e3:cc:5c:04:
9a:e8:0b:a7:5e:1b:ed:6d:9a:37:c3:11:e1:76:8e:
be:d4:33:db:72:db:bd:b1:f4:24:6b:fd:be:9b:0b:
86:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:D3:1A:C2:CF:2F:05:8D:C1:EF:E8:4F:C6:D1:B7:E1:DE:10:31
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/8-3TGsLPLwWNwe_oT8bRt-HeEDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.46.215.0/24
Signature Algorithm: sha256WithRSAEncryption
85:31:b3:3f:6c:4a:73:21:fd:42:3c:6c:5f:d1:d4:1e:54:4f:
c1:95:58:8a:e4:57:31:5e:ce:ac:3e:33:ec:ce:db:cc:f9:d5:
73:d7:81:e8:1b:84:f1:9b:5d:a8:68:5c:6b:86:1f:d8:15:17:
8b:54:3c:20:09:22:2f:6e:e3:d5:91:39:5e:4e:e0:9c:08:66:
93:22:f2:69:2c:6e:87:e3:65:c0:70:a3:06:d3:05:15:cc:85:
5d:02:9d:9d:93:97:8c:a2:e6:36:73:2e:93:19:7d:65:00:79:
98:08:b2:a2:97:c8:d1:50:bf:75:6f:e2:94:5d:9d:22:c2:28:
1a:dd:99:1b:04:10:76:9e:a2:14:4d:6a:95:db:1a:c1:5a:5d:
3b:d7:fd:8d:51:e8:34:69:12:e3:3c:cb:34:54:20:d0:ed:33:
49:ef:24:79:fd:a0:a7:9f:7a:ab:f0:4d:12:3a:36:bb:e3:ca:
30:81:41:91:22:40:66:cb:f7:f1:83:8b:ec:d9:a4:75:30:43:
9f:77:8f:3a:f7:cd:9f:9a:9e:f4:5a:e8:ea:74:1b:2d:f1:c4:
18:a1:7a:71:da:3d:c2:68:bf:54:34:83:be:4d:00:93:d2:11:
08:d6:0f:98:47:e2:9e:16:2b:12:80:83:4d:bd:29:f9:bf:0a:
d1:f4:f9:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNZS3Bnyv4ffuplT1eWJR7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjIwOTIwMDUwNzM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2VkZDMxYWMyY2YyZjA1OGRjMWVmZTg0ZmM2ZDFiN2UxZGUxMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhojtdKEakoG42Z7QWGzjp2ziJ1Wh
KLeVnKonK2rANmikuQRRHEcpwTTX7h/TvARQLbUodHqDLSubzRVTXmJzRi7V/ffq
bgxviKROaDhP8agZdIVlufWrsPxYU0xK2wCyg7Ruzj5AhDWDP8QnrvYYgcNK3Ezs
LU2hHvlf3zjxCjdcg7Fy+M5bpdinP+g2+UtTBlyzs2gpBNgpGC6E7IViaBgKDFzQ
/3B28CYBKtSe9jn7H804lnVLJkbG7LrAlSJwfXyGlz8QwsV/PvNtAs2E25osjDHl
c1jo7SAMYePMXASa6AunXhvtbZo3wxHhdo6+1DPbctu9sfQka/2+mwuGSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPPt0xrCzy8FjcHv6E/G0bfh3hAxMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvOC0zVEdzTFBMd1dOd2Vfb1Q4YlJ0LUhlRURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUS7XMA0G
CSqGSIb3DQEBCwUAA4IBAQCFMbM/bEpzIf1CPGxf0dQeVE/BlViK5FcxXs6sPjPs
ztvM+dVz14HoG4Txm12oaFxrhh/YFReLVDwgCSIvbuPVkTleTuCcCGaTIvJpLG6H
42XAcKMG0wUVzIVdAp2dk5eMouY2cy6TGX1lAHmYCLKil8jRUL91b+KUXZ0iwiga
3ZkbBBB2nqIUTWqV2xrBWl071/2NUeg0aRLjPMs0VCDQ7TNJ7yR5/aCnn3qr8E0S
Oja748owgUGRIkBmy/fxg4vs2aR1MEOfd486982fmp70WujqdBst8cQYoXpx2j3C
aL9UNIO+TQCT0hEI1g+YR+KeFisSgINNvSn5vwrR9PmP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org