Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0sIVdkWeH4TWOAAhj72dJzUSP2c.roa
File: 0sIVdkWeH4TWOAAhj72dJzUSP2c.roa (raw, json)
Hash identifier: raH9uahGXr5vJ22MyWO61MS5CrhhYtkMX1UjUoyYQ9M=
Subject key identifier: D2:C2:15:76:45:9E:1F:84:D6:38:00:21:8F:BD:9D:27:35:12:3F:67
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01833B54A3C73CD9D06BD3BA0DFB4289E6ED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0sIVdkWeH4TWOAAhj72dJzUSP2c.roa
Signing time: Wed 14 Sep 2022 09:29:06 +0000
ROA not before: Wed 14 Sep 2022 09:29:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60117
IP address blocks: 83.219.96.0/24 maxlen: 24
185.252.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:54:a3:c7:3c:d9:d0:6b:d3:ba:0d:fb:42:89:e6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 14 09:29:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2c21576459e1f84d63800218fbd9d2735123f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:56:1b:ab:c7:b5:42:70:ef:56:e2:0f:7e:
a9:0c:3c:1f:68:d2:d3:dd:05:9d:a5:3e:88:de:81:
b8:1c:47:48:0f:83:cc:d8:d4:42:b6:cd:ce:47:dd:
79:72:9a:c1:06:98:eb:10:43:1d:98:9b:e6:cb:d0:
28:6c:ad:09:1a:e3:88:4c:24:33:39:1c:da:6d:5f:
d5:a2:f6:46:46:80:49:fa:a5:35:aa:cc:4d:5f:00:
f1:36:dd:57:76:a1:7f:10:fd:d6:2a:e9:37:19:07:
f4:df:69:9d:6b:08:b1:c6:d7:3c:f8:6b:02:92:00:
36:6a:63:42:6c:70:96:3d:4b:01:4e:fe:90:14:de:
9a:57:ca:97:80:57:71:0b:55:20:b2:df:18:c7:74:
74:12:2f:1f:b4:f4:7f:d6:e7:10:eb:ff:2e:bf:1d:
c7:e8:f9:35:48:a2:e4:f5:bf:c7:d6:4e:e3:fb:c6:
fd:c4:1d:b8:4d:4b:a5:a7:57:af:81:21:9f:31:13:
0f:95:71:f1:b6:89:6f:17:32:05:72:d4:9e:9a:52:
07:d7:55:78:39:47:bd:a5:2d:86:a4:71:1a:6d:5f:
b2:31:79:f6:ad:77:6a:3e:85:1b:40:a8:c3:32:31:
1e:8c:38:05:3b:18:2a:e0:72:a1:d6:74:75:d9:ed:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:15:76:45:9E:1F:84:D6:38:00:21:8F:BD:9D:27:35:12:3F:67
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0sIVdkWeH4TWOAAhj72dJzUSP2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.96.0/24
185.252.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:24:b1:68:34:ca:2b:da:63:81:68:6c:2b:24:c1:97:9e:5b:
c1:6f:98:1f:ab:99:79:33:11:97:76:b3:da:c3:15:51:1b:99:
e4:88:09:ba:13:27:ea:96:ea:ed:92:5e:4f:43:52:e1:32:7a:
00:3f:ed:9e:ab:4b:f2:b4:fd:f9:6e:fd:d1:ea:4c:8d:42:62:
eb:90:55:8e:4d:12:89:04:1b:5f:df:ac:b8:a9:74:8e:4e:e1:
53:14:14:61:2c:74:14:2e:9e:bf:04:20:f8:6d:ee:f5:82:4a:
a5:f3:24:00:1d:25:cf:f8:7c:bc:99:9f:35:cf:66:a0:c0:36:
e3:f7:1e:1d:af:cb:91:6b:81:97:2d:f3:7c:97:c9:de:76:d2:
13:a2:ee:98:dc:1a:d1:d9:1f:08:7c:9b:70:9d:a6:8c:f5:a6:
c9:38:dc:5a:f4:46:71:82:02:af:72:76:44:7b:c1:73:84:f3:
80:9b:a7:8c:72:09:19:f3:a4:26:3b:9a:3f:54:85:23:64:e7:
fb:5a:b7:92:bd:40:31:4b:41:92:3b:dd:30:68:34:78:92:98:
65:0e:2b:b6:3a:3b:73:99:f3:69:fc:60:09:cb:35:a4:1a:86:
f5:4f:12:5d:8e:67:47:46:33:8d:00:9f:eb:2b:81:2a:44:f2:
a8:73:76:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYM7VKPHPNnQa9O6DftCiebtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTE0MDkyOTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmMyMTU3NjQ1OWUxZjg0ZDYzODAwMjE4ZmJkOWQyNzM1MTIzZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj5WG6vHtUJw71biD36pDDwfaNLT
3QWdpT6I3oG4HEdID4PM2NRCts3OR915cprBBpjrEEMdmJvmy9AobK0JGuOITCQz
ORzabV/VovZGRoBJ+qU1qsxNXwDxNt1XdqF/EP3WKuk3GQf032mdawixxtc8+GsC
kgA2amNCbHCWPUsBTv6QFN6aV8qXgFdxC1Ugst8Yx3R0Ei8ftPR/1ucQ6/8uvx3H
6Pk1SKLk9b/H1k7j+8b9xB24TUulp1evgSGfMRMPlXHxtolvFzIFctSemlIH11V4
OUe9pS2GpHEabV+yMXn2rXdqPoUbQKjDMjEejDgFOxgq4HKh1nR12e0tuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLCFXZFnh+E1jgAIY+9nSc1Ej9nMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMHNJVmRrV2VINFRXT0FBaGo3MmRKelVTUDJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU9tgAwQA
ufywMA0GCSqGSIb3DQEBCwUAA4IBAQBSJLFoNMor2mOBaGwrJMGXnlvBb5gfq5l5
MxGXdrPawxVRG5nkiAm6Eyfqlurtkl5PQ1LhMnoAP+2eq0vytP35bv3R6kyNQmLr
kFWOTRKJBBtf36y4qXSOTuFTFBRhLHQULp6/BCD4be71gkql8yQAHSXP+Hy8mZ81
z2agwDbj9x4dr8uRa4GXLfN8l8nedtITou6Y3BrR2R8IfJtwnaaM9abJONxa9EZx
ggKvcnZEe8FzhPOAm6eMcgkZ86QmO5o/VIUjZOf7WreSvUAxS0GSO90waDR4kphl
Diu2OjtzmfNp/GAJyzWkGob1TxJdjmdHRjONAJ/rK4EqRPKoc3bR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org