Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/l_uQRMXLJ0DVopkYxlsqqnn9ZIc.roa
File: l_uQRMXLJ0DVopkYxlsqqnn9ZIc.roa (raw, json)
Hash identifier: WdjVHVZuPIZeT9Gf4Am75fVTW2vM/Ia5wcR4F/SIwQ8=
Subject key identifier: 97:FB:90:44:C5:CB:27:40:D5:A2:99:18:C6:5B:2A:AA:79:FD:64:87
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01853ACE941727726FBB243A2EFC5474AB2A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/l_uQRMXLJ0DVopkYxlsqqnn9ZIc.roa
Signing time: Thu 22 Dec 2022 17:08:14 +0000
ROA not before: Thu 22 Dec 2022 17:08:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200482
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3a:ce:94:17:27:72:6f:bb:24:3a:2e:fc:54:74:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Dec 22 17:08:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97fb9044c5cb2740d5a29918c65b2aaa79fd6487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:72:99:cd:75:e7:c3:9b:7c:df:7c:f8:db:
5c:44:e7:88:84:a1:4b:26:5f:32:4e:26:09:40:1a:
f9:6b:49:c4:5c:14:b9:1c:98:3e:36:c6:f0:0e:46:
90:51:4c:bc:19:4b:db:42:af:6b:11:8f:cb:e4:26:
c8:77:f3:25:07:2b:39:98:15:08:08:a7:62:22:05:
2e:53:5b:54:65:fa:5e:a8:3f:44:56:63:3c:93:fb:
fa:24:0d:91:65:cb:3b:ee:7a:38:e2:98:95:ff:f4:
87:de:30:0d:fd:16:5e:67:2a:40:1a:b2:92:4d:9c:
d7:11:49:7d:3e:18:a2:60:88:22:5c:d4:9a:d5:67:
ce:1d:27:ef:b0:2b:af:22:09:1d:fc:ed:3e:bb:9d:
52:87:fc:50:53:a3:32:e1:12:80:b2:98:88:23:2d:
10:3e:fe:83:72:54:bb:04:8e:3a:b1:1b:bc:be:52:
d3:38:32:01:ae:3a:be:85:3f:fb:78:64:18:98:a5:
9f:a3:2f:18:e3:e8:49:e0:9b:f8:76:54:42:84:7b:
ee:cd:1f:eb:71:d7:7e:e7:16:7b:5c:72:78:da:68:
87:cc:bd:12:6c:50:95:88:bd:17:d6:d8:44:88:92:
47:e1:9e:91:21:f4:ff:ed:97:bf:52:82:c9:89:fc:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:90:44:C5:CB:27:40:D5:A2:99:18:C6:5B:2A:AA:79:FD:64:87
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/l_uQRMXLJ0DVopkYxlsqqnn9ZIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d2:0b:d8:91:5b:17:15:74:ba:83:f3:a2:39:86:6d:28:e1:
bd:20:b5:88:f3:90:2e:c1:86:91:75:f0:6f:da:9d:e9:5b:1b:
7f:f2:dc:a4:4a:e4:71:52:fa:1e:e0:21:ad:2a:cb:27:c5:e6:
ef:95:d7:a4:07:e0:3c:50:af:b0:5b:74:08:8a:91:58:83:cc:
e5:6a:86:bc:59:f3:d1:62:cb:84:0d:d0:84:9c:a7:13:2a:a8:
90:f9:c5:7e:93:69:81:54:29:ea:87:2f:55:a1:03:d5:93:d3:
86:31:c3:98:ae:5f:8e:51:9e:ad:04:73:7b:7f:c6:76:41:e8:
3a:47:1b:26:ed:7e:78:24:04:44:7b:38:2f:18:08:1e:00:72:
7f:08:2f:af:60:83:d0:02:ba:48:15:00:26:c4:dd:51:3e:ff:
ad:14:c5:d3:6c:43:09:25:47:31:80:d1:3b:7d:81:99:d0:7c:
72:89:fb:90:ac:bf:a4:a7:a9:45:00:ac:fc:dc:4e:7c:9a:9b:
a7:55:b4:6a:b9:cf:c0:c4:e4:8c:20:f0:fc:f6:df:12:0a:44:
14:9e:a4:43:da:70:42:30:b1:1b:3f:60:8d:90:16:8b:7d:1b:
e9:ea:0e:bf:7a:96:a8:ab:89:e3:09:e2:30:24:1d:94:5e:68:
b1:b4:6f:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYU6zpQXJ3JvuyQ6LvxUdKsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjIxMjIyMTcwODE0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2ZiOTA0NGM1Y2IyNzQwZDVhMjk5MThjNjViMmFhYTc5ZmQ2NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAholymc1158ObfN98+NtcROeIhKFL
Jl8yTiYJQBr5a0nEXBS5HJg+NsbwDkaQUUy8GUvbQq9rEY/L5CbId/MlBys5mBUI
CKdiIgUuU1tUZfpeqD9EVmM8k/v6JA2RZcs77no44piV//SH3jAN/RZeZypAGrKS
TZzXEUl9PhiiYIgiXNSa1WfOHSfvsCuvIgkd/O0+u51Sh/xQU6My4RKAspiIIy0Q
Pv6DclS7BI46sRu8vlLTODIBrjq+hT/7eGQYmKWfoy8Y4+hJ4Jv4dlRChHvuzR/r
cdd+5xZ7XHJ42miHzL0SbFCViL0X1thEiJJH4Z6RIfT/7Ze/UoLJifxKbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJf7kETFyydA1aKZGMZbKqp5/WSHMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvbF91UVJNWExKMERWb3BrWXhsc3Fxbm45WkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaHMA0G
CSqGSIb3DQEBCwUAA4IBAQCV0gvYkVsXFXS6g/OiOYZtKOG9ILWI85AuwYaRdfBv
2p3pWxt/8tykSuRxUvoe4CGtKssnxebvldekB+A8UK+wW3QIipFYg8zlaoa8WfPR
YsuEDdCEnKcTKqiQ+cV+k2mBVCnqhy9VoQPVk9OGMcOYrl+OUZ6tBHN7f8Z2Qeg6
Rxsm7X54JAREezgvGAgeAHJ/CC+vYIPQArpIFQAmxN1RPv+tFMXTbEMJJUcxgNE7
fYGZ0HxyifuQrL+kp6lFAKz83E58mpunVbRquc/AxOSMIPD89t8SCkQUnqRD2nBC
MLEbP2CNkBaLfRvp6g6/epaoq4njCeIwJB2UXmixtG/Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org