Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SHFgaZLXKViRkgQE-1mdCNRICms.roa
File: SHFgaZLXKViRkgQE-1mdCNRICms.roa (raw, json)
Hash identifier: dm/YIysQm7cUg1RGnHx1IBEiXrJJzEl7HEMuXm7oaoM=
Subject key identifier: 48:71:60:69:92:D7:29:58:91:92:04:04:FB:59:9D:08:D4:48:0A:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7FD3FF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SHFgaZLXKViRkgQE-1mdCNRICms.roa
Signing time: Sat 01 Jan 2022 01:02:45 +0000
ROA not before: Sat 01 Jan 2022 01:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199818
IP address blocks: 87.121.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478139391 (0x1c7fd3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4871606992d7295891920404fb599d08d4480a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:21:95:51:53:98:9e:68:53:c6:66:1c:f6:
db:ad:50:b8:74:a6:97:e4:f7:6c:8a:08:6f:c9:15:
1e:12:34:c4:4b:cf:a2:d4:68:2a:1a:04:9c:e0:87:
04:a0:7f:95:51:48:a6:27:30:26:01:57:6f:8b:1f:
7b:1c:f6:6d:3b:cd:99:40:92:2b:8c:d5:ef:56:26:
52:e4:f5:21:b4:2a:58:b6:0d:ca:e1:c0:13:82:85:
56:58:48:3e:c5:50:57:82:bc:71:3b:cb:94:b6:af:
06:7a:d6:79:dc:07:19:f4:2c:90:cb:8a:c4:07:50:
9e:81:a3:46:5f:f2:92:ca:9a:11:d4:72:d7:29:8b:
a4:76:48:93:d0:1a:ba:86:b7:fe:e8:30:99:20:97:
fc:96:9f:59:a8:fb:19:16:59:6c:c9:04:14:ca:77:
1f:11:80:94:60:98:3b:9b:3a:d4:30:82:52:e6:6b:
71:e5:d4:6a:c6:bc:02:79:cc:8b:45:bc:4c:26:7d:
8f:fe:d1:dc:d4:7a:cd:e8:cb:84:34:9c:26:60:9c:
0a:72:19:5d:52:0e:b7:23:b7:88:bd:fd:ef:e1:a2:
eb:4c:dd:a5:db:e0:48:64:c7:a1:52:e2:99:fa:1c:
55:c0:ef:e5:3a:54:61:eb:3b:6d:08:00:9c:9d:9e:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:71:60:69:92:D7:29:58:91:92:04:04:FB:59:9D:08:D4:48:0A:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SHFgaZLXKViRkgQE-1mdCNRICms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:bd:57:e0:b5:74:f0:1c:79:92:75:13:9d:01:31:78:4a:19:
e3:13:01:45:73:d7:2f:81:dc:04:3c:a7:a1:20:37:50:e2:86:
02:6b:3c:0c:d9:cb:a5:e0:95:7e:d4:b7:ae:a7:da:5c:5a:19:
e4:cd:69:35:a9:37:01:b2:74:f3:2b:3f:bf:e1:a7:f7:3c:fd:
4f:73:da:f6:bd:fa:5d:f6:77:1c:a1:f0:8a:fe:b3:c2:85:6c:
7e:d9:55:cb:a0:c0:9d:70:86:9b:92:f1:23:1a:61:8b:0f:70:
c9:52:0c:d5:2d:0c:ec:d3:a8:9e:c7:b5:01:2c:22:57:23:86:
08:88:bd:21:66:96:83:69:d7:c8:6d:fa:4f:fc:c7:a3:71:8b:
0d:9e:d8:55:18:c8:b4:cf:46:e2:40:bf:67:f1:c4:f7:da:1e:
34:76:21:fc:2f:17:0a:5d:90:09:44:2a:fe:0b:59:dc:11:8d:
be:36:8c:bc:44:88:de:f1:36:c7:de:3e:01:f3:89:16:5b:cd:
1f:b6:4e:df:a6:66:ff:26:6f:60:fb:aa:61:17:1d:c9:7e:8d:
c4:b9:7d:07:eb:b6:18:6f:a7:5d:ee:e8:8a:4f:f6:19:f1:81:
10:5c:29:9c:ac:6b:e8:e9:ad:93:54:74:e3:e8:60:d9:ea:07:
d2:b6:a0:5b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHH/T/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDEw
MTAxMDI0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDg3MTYwNjk5MmQ3
Mjk1ODkxOTIwNDA0ZmI1OTlkMDhkNDQ4MGE2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJetIZVRU5ieaFPGZhz2261QuHSml+T3bIoIb8kVHhI0xEvP
otRoKhoEnOCHBKB/lVFIpicwJgFXb4sfexz2bTvNmUCSK4zV71YmUuT1IbQqWLYN
yuHAE4KFVlhIPsVQV4K8cTvLlLavBnrWedwHGfQskMuKxAdQnoGjRl/yksqaEdRy
1ymLpHZIk9Aauoa3/ugwmSCX/JafWaj7GRZZbMkEFMp3HxGAlGCYO5s61DCCUuZr
ceXUasa8AnnMi0W8TCZ9j/7R3NR6zejLhDScJmCcCnIZXVIOtyO3iL397+Gi60zd
pdvgSGTHoVLimfocVcDv5TpUYes7bQgAnJ2ea7ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRIcWBpktcpWJGSBAT7WZ0I1EgKazAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1NIRmdhWkxYS1ZpUmtnUUUtMW1kQ05SSUNtcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd5KzANBgkqhkiG9w0BAQsFAAOC
AQEAi71X4LV08Bx5knUTnQExeEoZ4xMBRXPXL4HcBDynoSA3UOKGAms8DNnLpeCV
ftS3rqfaXFoZ5M1pNak3AbJ08ys/v+Gn9zz9T3Pa9r36XfZ3HKHwiv6zwoVsftlV
y6DAnXCGm5LxIxphiw9wyVIM1S0M7NOonse1ASwiVyOGCIi9IWaWg2nXyG36T/zH
o3GLDZ7YVRjItM9G4kC/Z/HE99oeNHYh/C8XCl2QCUQq/gtZ3BGNvjaMvESI3vE2
x94+AfOJFlvNH7ZO36Zm/yZvYPuqYRcdyX6NxLl9B+u2GG+nXe7oik/2GfGBEFwp
nKxr6Omtk1R04+hg2eoH0ragWw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org