Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/quWLdQxc40dr5qhhnCp4fgIX_4E.roa
File: quWLdQxc40dr5qhhnCp4fgIX_4E.roa (raw, json)
Hash identifier: 02M10skOt9dj9MDTIE19W0mqe32uoQu5T8y7C7kCOec=
Subject key identifier: AA:E5:8B:75:0C:5C:E3:47:6B:E6:A8:61:9C:2A:78:7E:02:17:FF:81
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E27277F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/quWLdQxc40dr5qhhnCp4fgIX_4E.roa
Signing time: Sat 01 Jan 2022 01:58:26 +0000
ROA not before: Sat 01 Jan 2022 01:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212672
IP address blocks: 212.192.16.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237447039 (0xe27277f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aae58b750c5ce3476be6a8619c2a787e0217ff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:60:08:80:85:79:11:dc:16:92:b0:78:c2:
a0:02:0a:85:4b:b3:1c:de:ba:5b:a4:18:f9:d5:75:
5a:16:ac:82:f0:6b:8d:73:e4:b0:69:55:62:d8:c3:
62:23:5c:1a:31:5e:83:9b:6b:21:c5:92:67:3e:9c:
1a:82:5d:d5:64:16:52:2b:7b:77:e2:8d:66:ee:4c:
c1:d6:90:dc:9d:aa:0b:30:b0:66:46:f3:e7:f5:d4:
82:39:91:68:a6:68:5a:b0:e5:bc:d3:7b:88:85:50:
7c:36:fd:da:26:2f:92:46:07:06:c2:eb:0c:38:c2:
29:44:a3:79:3a:0b:ed:2d:17:38:22:c5:d9:ef:3c:
4d:05:8c:e4:af:33:b8:31:4f:77:9b:56:ab:90:0f:
9d:c0:cb:12:dd:b8:4c:32:7a:25:2a:82:8e:64:d2:
50:05:1b:56:a8:a5:f3:74:12:d9:3d:36:fe:e2:76:
41:55:78:8c:ab:51:db:4d:1d:19:de:35:0b:1f:e7:
7e:2b:45:0b:46:ba:8d:45:49:fb:1c:05:6d:7b:d8:
a6:7b:f1:68:0e:1c:ee:45:18:cc:a4:cb:76:a2:c4:
04:cc:ae:57:fe:e9:b4:35:4a:e4:f0:d7:2d:1c:ad:
46:e3:cd:58:67:a8:15:35:d2:53:99:c3:7a:be:36:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E5:8B:75:0C:5C:E3:47:6B:E6:A8:61:9C:2A:78:7E:02:17:FF:81
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/quWLdQxc40dr5qhhnCp4fgIX_4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
73:ae:3f:b9:de:d5:26:14:0b:ce:b8:d3:12:7b:0e:14:b6:71:
b9:89:70:0e:7e:a2:1b:dd:50:4e:fb:dd:35:98:db:6e:04:97:
fc:1d:d0:6f:88:0b:ab:72:d3:94:e4:1e:77:57:8a:8c:98:64:
ad:c4:e2:8b:5e:cb:ba:ec:88:3d:69:9d:05:a8:13:61:6e:c1:
0a:3b:be:8a:c4:38:4a:4a:2c:44:55:87:fa:1f:d6:91:75:29:
75:e6:63:ea:45:19:51:4e:c2:20:8f:db:5b:5b:bd:4b:8a:30:
db:c3:f1:a1:d6:49:52:79:29:f5:e2:f0:e2:d2:33:23:e0:4f:
ae:ba:bc:23:09:1f:68:22:6c:da:17:07:86:d2:3e:92:c1:e3:
69:30:1c:a9:61:f5:cb:9e:e7:f4:48:d3:3f:7a:f3:5f:a8:a5:
2d:ab:d4:7b:89:6c:cf:dc:b6:15:b3:1f:ef:a2:51:16:c8:5e:
6c:d3:70:dd:e8:41:7d:ab:55:f3:01:69:a4:84:ec:10:7e:9d:
8a:0e:57:82:5b:38:7f:1a:6c:09:66:87:a8:d7:c6:be:6f:df:
c4:21:3a:36:9b:40:a5:45:37:0a:7c:4b:1a:6c:0e:e9:7e:9f:
70:c4:34:9d:b2:f6:83:34:7e:e8:cb:fa:0e:b6:92:c8:67:f0:
3f:a4:78:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDicnfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDEw
MTAxNTgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWFlNThiNzUwYzVj
ZTM0NzZiZTZhODYxOWMyYTc4N2UwMjE3ZmY4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALmwYAiAhXkR3BaSsHjCoAIKhUuzHN66W6QY+dV1WhasgvBr
jXPksGlVYtjDYiNcGjFeg5trIcWSZz6cGoJd1WQWUit7d+KNZu5MwdaQ3J2qCzCw
Zkbz5/XUgjmRaKZoWrDlvNN7iIVQfDb92iYvkkYHBsLrDDjCKUSjeToL7S0XOCLF
2e88TQWM5K8zuDFPd5tWq5APncDLEt24TDJ6JSqCjmTSUAUbVqil83QS2T02/uJ2
QVV4jKtR200dGd41Cx/nfitFC0a6jUVJ+xwFbXvYpnvxaA4c7kUYzKTLdqLEBMyu
V/7ptDVK5PDXLRytRuPNWGeoFTXSU5nDer427+UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSq5Yt1DFzjR2vmqGGcKnh+Ahf/gTAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L3F1V0xkUXhjNDBkcjVxaGhuQ3A0ZmdJWF80RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9TAEDANBgkqhkiG9w0BAQsFAAOC
AQEAc64/ud7VJhQLzrjTEnsOFLZxuYlwDn6iG91QTvvdNZjbbgSX/B3Qb4gLq3LT
lOQed1eKjJhkrcTii17LuuyIPWmdBagTYW7BCju+isQ4SkosRFWH+h/WkXUpdeZj
6kUZUU7CII/bW1u9S4ow28PxodZJUnkp9eLw4tIzI+BPrrq8IwkfaCJs2hcHhtI+
ksHjaTAcqWH1y57n9EjTP3rzX6ilLavUe4lsz9y2FbMf76JRFshebNNw3ehBfatV
8wFppITsEH6dig5Xgls4fxpsCWaHqNfGvm/fxCE6NptApUU3CnxLGmwO6X6fcMQ0
nbL2gzR+6Mv6DraSyGfwP6R4wQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org