Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ACoyJYi0aPZzI6_atv5qauwtszc.roa
File: ACoyJYi0aPZzI6_atv5qauwtszc.roa (raw, json)
Hash identifier: oRQJOo7YXpvnDGW4GyFgdIhxAPKWwKpCp2FBNidPax8=
Subject key identifier: 00:2A:32:25:88:B4:68:F6:73:23:AF:DA:B6:FE:6A:6A:EC:2D:B3:37
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183DD0F1849B239B9164816A05BB06BBA3A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ACoyJYi0aPZzI6_atv5qauwtszc.roa
Signing time: Sat 15 Oct 2022 19:11:37 +0000
ROA not before: Sat 15 Oct 2022 19:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.72.9.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dd:0f:18:49:b2:39:b9:16:48:16:a0:5b:b0:6b:ba:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 15 19:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002a322588b468f67323afdab6fe6a6aec2db337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:13:43:8d:4d:b3:05:bb:7f:0d:5d:ae:33:
aa:86:66:31:78:60:5a:83:7e:eb:c0:7d:dc:16:f9:
a8:81:ab:8f:f8:09:c6:97:f2:5a:05:c8:ff:1c:49:
25:36:05:2d:d5:64:52:c7:04:31:01:41:4d:32:61:
0c:af:9d:e8:99:12:17:77:c9:21:c5:11:83:ad:1f:
c5:2a:db:8f:32:26:78:43:66:1f:08:e0:aa:7f:2f:
f9:d8:89:f3:01:a9:16:5d:25:44:4c:8f:05:8e:eb:
e1:ac:48:02:bb:cc:94:0e:3a:60:18:fe:af:e3:6b:
ea:c9:12:57:06:8e:83:ae:da:4a:d8:ad:0d:90:00:
55:b7:8e:9c:63:20:a3:52:74:44:ee:af:af:3b:a7:
1c:28:05:c7:d5:9d:78:a4:b1:64:fa:4e:87:fd:8a:
9f:81:bb:70:29:a5:b4:4d:d2:24:2b:43:25:bc:75:
11:4a:2f:aa:4d:4a:e0:e2:34:bb:bf:e6:cb:8b:1b:
89:94:f8:bc:3a:25:1a:4d:57:df:a6:14:57:e8:b3:
60:10:f5:eb:1c:30:eb:51:2e:a5:35:f4:ac:14:d7:
4e:b1:8e:ce:fc:92:0b:4e:fc:63:e5:bc:bd:86:a8:
3c:be:4c:2b:91:71:ea:8f:63:78:97:3e:45:39:61:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:32:25:88:B4:68:F6:73:23:AF:DA:B6:FE:6A:6A:EC:2D:B3:37
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ACoyJYi0aPZzI6_atv5qauwtszc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.90.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d8:92:b5:a3:cb:44:49:f5:6b:36:2d:6f:f6:64:8b:07:e2:
c8:58:3e:e1:6a:20:73:ed:19:ee:4a:cd:ae:37:c5:ea:d9:b4:
0c:5c:73:bc:c6:4c:ba:ad:c9:a7:4b:cf:4d:1d:fd:88:94:c9:
d5:15:ef:60:40:25:db:de:d5:d2:b1:66:82:1e:0c:91:87:c0:
d7:ec:10:93:84:db:ef:00:49:85:4b:7a:96:b6:f4:38:3b:09:
fd:1b:7d:82:41:82:6f:bb:9a:42:91:5f:5b:6a:72:45:c6:da:
28:03:60:10:5f:dd:fd:96:62:91:3c:fa:b5:b3:00:3f:c3:9d:
83:d2:79:b0:d3:49:9e:fa:34:e5:5b:5c:3a:ca:58:ad:6c:90:
37:56:ce:bb:60:f0:2e:8e:90:05:91:5f:87:6a:b1:ba:37:89:
11:aa:f5:d8:88:ae:ee:0a:41:03:b7:69:19:22:0b:75:71:d1:
f4:96:61:71:0f:0b:fb:73:70:58:e9:e6:ad:67:56:b0:b4:6b:
3f:ae:09:85:18:16:a7:be:4c:da:d8:2e:a2:fc:f5:3e:a7:fc:
e3:43:17:40:5e:93:1e:99:ac:1d:a0:e5:28:9b:46:d6:67:73:
e0:a1:ef:b2:4e:c3:4f:5a:66:af:bc:b8:bf:2b:3b:c0:e3:e0:
82:6e:94:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPdDxhJsjm5FkgWoFuwa7o6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIxMDE1MTkxMTM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDJhMzIyNTg4YjQ2OGY2NzMyM2FmZGFiNmZlNmE2YWVjMmRiMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ETQ41NswW7fw1drjOqhmYxeGBa
g37rwH3cFvmogauP+AnGl/JaBcj/HEklNgUt1WRSxwQxAUFNMmEMr53omRIXd8kh
xRGDrR/FKtuPMiZ4Q2YfCOCqfy/52InzAakWXSVETI8FjuvhrEgCu8yUDjpgGP6v
42vqyRJXBo6DrtpK2K0NkABVt46cYyCjUnRE7q+vO6ccKAXH1Z14pLFk+k6H/Yqf
gbtwKaW0TdIkK0MlvHURSi+qTUrg4jS7v+bLixuJlPi8OiUaTVffphRX6LNgEPXr
HDDrUS6lNfSsFNdOsY7O/JILTvxj5by9hqg8vkwrkXHqj2N4lz5FOWEfMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAAqMiWItGj2cyOv2rb+amrsLbM3MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQUNveUpZaTBhUFp6STZfYXR2NXFhdXd0c3pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUgJAwQA
wldaMA0GCSqGSIb3DQEBCwUAA4IBAQCR2JK1o8tESfVrNi1v9mSLB+LIWD7haiBz
7RnuSs2uN8Xq2bQMXHO8xky6rcmnS89NHf2IlMnVFe9gQCXb3tXSsWaCHgyRh8DX
7BCThNvvAEmFS3qWtvQ4Own9G32CQYJvu5pCkV9banJFxtooA2AQX939lmKRPPq1
swA/w52D0nmw00me+jTlW1w6ylitbJA3Vs67YPAujpAFkV+HarG6N4kRqvXYiK7u
CkEDt2kZIgt1cdH0lmFxDwv7c3BY6eatZ1awtGs/rgmFGBanvkza2C6i/PU+p/zj
QxdAXpMemawdoOUom0bWZ3Pgoe+yTsNPWmavvLi/KzvA4+CCbpR3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org