Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/P1w9GBLekS-uKHZbM-m2xPZckKo.roa
File: P1w9GBLekS-uKHZbM-m2xPZckKo.roa (raw, json)
Hash identifier: RzotdG/l+Bj6kCR2/jcUMXCD1gGnnmqT4M638alT/EM=
Subject key identifier: 3F:5C:3D:18:12:DE:91:2F:AE:28:76:5B:33:E9:B6:C4:F6:5C:90:AA
Certificate issuer: /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial: 01F4B62D
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/P1w9GBLekS-uKHZbM-m2xPZckKo.roa
Signing time: Tue 07 Jun 2022 07:22:20 +0000
ROA not before: Tue 07 Jun 2022 07:22:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30882
IP address blocks: 79.171.240.0/24 maxlen: 24
79.171.244.0/24 maxlen: 24
79.171.241.0/24 maxlen: 24
79.171.245.0/24 maxlen: 24
79.171.242.0/24 maxlen: 24
79.171.246.0/23 maxlen: 23
79.171.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32814637 (0x1f4b62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Validity
Not Before: Jun 7 07:22:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f5c3d1812de912fae28765b33e9b6c4f65c90aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:f9:3d:1d:a6:ce:f1:e9:5d:17:63:a6:53:
ac:81:20:db:5c:e3:18:58:c5:0f:f5:b8:c0:cf:05:
92:a9:43:a5:4e:65:8f:5b:de:3f:56:90:f9:fb:3b:
e0:c5:d8:0e:60:20:ce:1a:29:9f:d5:99:b9:7f:6c:
48:af:86:db:a9:b8:c2:b9:f6:04:7b:70:1f:06:4a:
78:51:47:36:d1:8c:14:7f:00:ae:da:45:5c:9f:bd:
1f:d7:d6:75:5d:33:cb:c5:cc:16:fb:e3:a3:40:4d:
f3:65:a6:29:46:75:cd:b2:9a:b0:7e:65:d7:7b:73:
20:e0:d2:60:a3:18:3b:7f:10:71:91:0f:d3:2b:12:
14:e1:d5:14:ca:91:83:85:c4:fd:a1:b6:ff:f6:b6:
81:1a:e2:99:28:94:71:65:70:1b:2b:f4:4c:36:d9:
28:1d:31:c2:98:9e:a2:4d:d2:9d:1a:5e:a0:8a:a4:
c1:cb:72:02:4e:00:5a:1b:75:c0:10:42:d0:46:3d:
79:c3:65:47:0d:d4:c6:cb:6e:2f:6d:2c:10:4a:d7:
6f:65:35:fa:9a:75:4f:21:37:ae:d2:8c:54:c5:85:
33:17:cf:3d:40:b9:f2:62:86:da:e2:35:ae:f4:b4:
d0:b8:ed:c0:c5:3f:fd:4c:2a:85:6a:a9:3f:68:5e:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:3D:18:12:DE:91:2F:AE:28:76:5B:33:E9:B6:C4:F6:5C:90:AA
X509v3 Authority Key Identifier:
keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/P1w9GBLekS-uKHZbM-m2xPZckKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:29:fd:cd:84:c1:0c:9a:34:a2:eb:94:7d:37:04:bc:e1:4c:
04:e9:50:54:96:58:59:2a:64:c3:1b:2a:4b:ed:51:d0:32:07:
fa:62:b3:dc:e8:cf:8d:04:51:94:f3:ef:26:99:e1:16:41:93:
d8:aa:75:21:1c:0c:a4:be:dd:fa:6f:f0:fe:c6:08:92:e9:43:
98:df:7c:4e:b5:2f:7f:72:55:a5:16:fd:cf:42:94:fd:ea:94:
42:9c:ad:dc:83:f4:68:df:42:3a:27:92:a2:1d:d3:f5:e0:bf:
8c:4d:0e:85:68:f2:6e:9a:e6:71:ab:8d:6f:f8:3d:70:96:30:
07:34:91:c1:e3:1f:c6:be:84:b6:a6:f4:d3:86:77:76:b3:a4:
ae:0c:f1:42:88:5a:8d:c2:45:d9:c8:52:a9:bd:21:2d:88:c4:
71:27:8a:9e:80:2b:b2:1b:f8:37:51:42:15:a0:fb:95:29:43:
60:5e:4e:5e:96:8a:4c:71:d2:ba:41:eb:6b:b6:34:46:44:c6:
ac:31:78:57:89:9c:3d:9e:fc:6d:29:b1:9d:94:1c:e5:83:c4:
0a:c6:c1:b3:7b:6d:01:a9:45:13:cd:d6:19:51:e6:c0:43:7b:
7c:fb:5e:f6:df:aa:99:3e:d5:64:aa:72:0c:c7:0f:b8:10:2c:
10:87:09:2a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAfS2LTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2U0ZTY1YWVjYzk1ZDQ0NmEwY2I2NDBiOTc2NmZhMGY4MTUwZTNjMB4XDTIyMDYw
NzA3MjIyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y1YzNkMTgxMmRl
OTEyZmFlMjg3NjViMzNlOWI2YzRmNjVjOTBhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDT+T0dps7x6V0XY6ZTrIEg21zjGFjFD/W4wM8FkqlDpU5l
j1veP1aQ+fs74MXYDmAgzhopn9WZuX9sSK+G26m4wrn2BHtwHwZKeFFHNtGMFH8A
rtpFXJ+9H9fWdV0zy8XMFvvjo0BN82WmKUZ1zbKasH5l13tzIODSYKMYO38QcZEP
0ysSFOHVFMqRg4XE/aG2//a2gRrimSiUcWVwGyv0TDbZKB0xwpieok3SnRpeoIqk
wctyAk4AWht1wBBC0EY9ecNlRw3UxstuL20sEErXb2U1+pp1TyE3rtKMVMWFMxfP
PUC58mKG2uI1rvS00LjtwMU//UwqhWqpP2heZHkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/XD0YEt6RL64odlsz6bbE9lyQqjAfBgNVHSMEGDAWgBSc5OZa7MldRGoM
tkC5dm+g+BUOPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25PVG1XdXpKWFVScURMWkF1WFp2b1BnVkRqdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvZWQ0ZTJjLWU1YWQtNDE3YS04Nzg4LTExODI0NDA2YmQ1ZC8x
L1AxdzlHQkxla1MtdUtIWmJNLW0yeFBaY2tLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
ZWQ0ZTJjLWU1YWQtNDE3YS04Nzg4LTExODI0NDA2YmQ1ZC8xL25PVG1XdXpKWFVS
cURMWkF1WFp2b1BnVkRqdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA0+r8DANBgkqhkiG9w0BAQsFAAOC
AQEAKyn9zYTBDJo0ouuUfTcEvOFMBOlQVJZYWSpkwxsqS+1R0DIH+mKz3OjPjQRR
lPPvJpnhFkGT2Kp1IRwMpL7d+m/w/sYIkulDmN98TrUvf3JVpRb9z0KU/eqUQpyt
3IP0aN9COieSoh3T9eC/jE0OhWjybprmcauNb/g9cJYwBzSRweMfxr6Etqb004Z3
drOkrgzxQohajcJF2chSqb0hLYjEcSeKnoArshv4N1FCFaD7lSlDYF5OXpaKTHHS
ukHra7Y0RkTGrDF4V4mcPZ78bSmxnZQc5YPECsbBs3ttAalFE83WGVHmwEN7fPte
9t+qmT7VZKpyDMcPuBAsEIcJKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:50 2024 by rpki-client on console-ams.rpki-client.org