Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/qjoVha9RC6qSe9J2XOVaQl9A0fM.roa
File: qjoVha9RC6qSe9J2XOVaQl9A0fM.roa (raw, json)
Hash identifier: FRa4JnReCwcbbs1eigLh5IsjH0Lk68+NFebQgPTNJuE=
Subject key identifier: AA:3A:15:85:AF:51:0B:AA:92:7B:D2:76:5C:E5:5A:42:5F:40:D1:F3
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 0496F937
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/qjoVha9RC6qSe9J2XOVaQl9A0fM.roa
Signing time: Sat 01 Jan 2022 10:03:32 +0000
ROA not before: Sat 01 Jan 2022 10:03:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207452
IP address blocks: 185.244.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77003063 (0x496f937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 1 10:03:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa3a1585af510baa927bd2765ce55a425f40d1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:74:f7:f8:70:62:6a:c0:27:bc:12:cd:94:70:
8c:f0:6d:a1:ce:54:38:65:68:7d:a2:b7:c2:29:44:
84:85:8a:bb:aa:bb:bf:cb:1e:8a:88:e9:b8:c4:da:
86:13:be:bd:49:25:95:96:28:10:ef:b7:39:e6:4e:
20:68:46:51:15:5d:57:28:98:39:df:48:ca:a7:b2:
37:ec:cf:11:17:28:de:c1:b4:09:f2:97:80:c0:52:
8a:68:53:4c:e7:b0:52:ed:3f:8a:6f:72:f9:50:be:
d2:22:0a:c5:e7:95:3e:bd:a1:70:83:87:a3:38:9b:
f5:c6:93:f9:15:1b:af:a1:be:87:4f:f5:d0:45:1e:
bc:e8:a8:53:a8:6c:93:41:70:8b:4e:9b:1f:da:32:
a4:10:a3:a7:dc:fa:68:d0:26:57:8c:45:e7:aa:3f:
5c:b3:1d:de:28:fd:c3:9a:78:19:7e:a1:08:e0:2e:
91:c7:0f:30:ad:5d:89:52:ca:ea:15:63:73:b6:ad:
40:76:52:1e:30:ff:73:c3:82:5f:41:7a:6c:db:eb:
07:0a:57:f0:a7:ad:bd:ec:03:6c:40:33:a5:94:1d:
26:9e:87:55:fc:de:e1:88:da:69:01:86:82:cb:00:
14:e9:ca:db:d2:ae:23:2c:b2:47:d1:b0:44:0e:5b:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:15:85:AF:51:0B:AA:92:7B:D2:76:5C:E5:5A:42:5F:40:D1:F3
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/qjoVha9RC6qSe9J2XOVaQl9A0fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f0:ab:f3:6b:1a:47:37:1d:e4:d6:69:b4:b1:a2:4b:93:17:
90:ec:0f:e5:c2:0d:2e:58:94:74:80:94:fc:59:85:21:c5:79:
56:d4:0e:7c:28:9a:e9:7e:d7:ad:bd:e4:97:ee:10:e7:4b:36:
95:f4:6f:ea:6b:fe:21:d6:b2:51:cb:14:7a:96:c0:42:13:f8:
22:06:1e:bd:36:4e:12:a5:d7:b8:4f:c6:d7:fe:f9:e9:3f:de:
41:b8:01:f2:95:e8:ae:82:24:29:de:39:3b:f2:90:5f:65:3f:
29:ce:3c:f9:d7:b8:2a:69:ea:12:9b:51:e0:08:d0:bf:f2:16:
ea:9a:0f:58:9d:e2:0a:a9:e9:25:4d:6f:b7:f1:17:59:f2:0c:
d9:47:b2:2e:7c:b1:46:13:b0:db:de:79:b0:3c:0f:a2:92:3a:
93:d5:f6:9a:db:36:c4:5a:8c:7d:dc:9b:db:c4:3a:c0:38:5e:
d5:bf:0a:67:c1:5b:2a:e3:95:ae:8b:99:87:89:63:79:f8:c9:
81:98:58:b6:b7:8c:27:58:06:47:b8:10:b3:bf:84:98:2b:d9:
71:7a:60:71:12:6b:22:45:b1:ee:6c:b9:13:c1:b6:11:9f:84:
8c:03:c0:a1:03:e1:3d:fa:b7:b6:4e:6c:6d:cc:8f:3d:9c:61:
b3:9b:21:45
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBJb5NzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTQ5ZmIxOTBmNGJkMGY1ODE1YThlNTc5ZjM2NmFkNThkNWQ0MWY5MB4XDTIyMDEw
MTEwMDMzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEzYTE1ODVhZjUx
MGJhYTkyN2JkMjc2NWNlNTVhNDI1ZjQwZDFmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOp09/hwYmrAJ7wSzZRwjPBtoc5UOGVofaK3wilEhIWKu6q7
v8seiojpuMTahhO+vUkllZYoEO+3OeZOIGhGURVdVyiYOd9IyqeyN+zPERco3sG0
CfKXgMBSimhTTOewUu0/im9y+VC+0iIKxeeVPr2hcIOHozib9caT+RUbr6G+h0/1
0EUevOioU6hsk0Fwi06bH9oypBCjp9z6aNAmV4xF56o/XLMd3ij9w5p4GX6hCOAu
kccPMK1diVLK6hVjc7atQHZSHjD/c8OCX0F6bNvrBwpX8KetvewDbEAzpZQdJp6H
Vfze4YjaaQGGgssAFOnK29KuIyyyR9GwRA5b2p8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSqOhWFr1ELqpJ70nZc5VpCX0DR8zAfBgNVHSMEGDAWgBS+SfsZD0vQ9YFa
jlefNmrVjV1B+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZrbjdHUTlMMFBXQldvNVhuelpxMVkxZFFmay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvYmQwZDEzLWU5ODMtNGZmOS1iNTA3LTVlNjU2ZjFiNDg3Ni8x
L3Fqb1ZoYTlSQzZxU2U5SjJYT1ZhUWw5QTBmTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
YmQwZDEzLWU5ODMtNGZmOS1iNTA3LTVlNjU2ZjFiNDg3Ni8xL3ZrbjdHUTlMMFBX
QldvNVhuelpxMVkxZFFmay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn0+DANBgkqhkiG9w0BAQsFAAOC
AQEAKfCr82saRzcd5NZptLGiS5MXkOwP5cINLliUdICU/FmFIcV5VtQOfCia6X7X
rb3kl+4Q50s2lfRv6mv+IdayUcsUepbAQhP4IgYevTZOEqXXuE/G1/756T/eQbgB
8pXoroIkKd45O/KQX2U/Kc48+de4KmnqEptR4AjQv/IW6poPWJ3iCqnpJU1vt/EX
WfIM2UeyLnyxRhOw2955sDwPopI6k9X2mts2xFqMfdyb28Q6wDhe1b8KZ8FbKuOV
rouZh4ljefjJgZhYtreMJ1gGR7gQs7+EmCvZcXpgcRJrIkWx7my5E8G2EZ+EjAPA
oQPhPfq3tk5sbcyPPZxhs5shRQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:30 2023 by rpki-client on console-ams.rpki-client.org