Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1hbNBjNZ65hbqjVbwJ0Sl8_GA.roa
File: cc1hbNBjNZ65hbqjVbwJ0Sl8_GA.roa (raw, json)
Hash identifier: TEmBzeit/USOpsHNUptmrllZI3D3Rtwop9/wfXu55lk=
Subject key identifier: 71:CD:61:6C:D0:63:35:9E:B9:85:BA:A3:55:BC:09:D1:29:7C:FC:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183E9CC70CF6ABD81B1F372F15851BF1609
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1hbNBjNZ65hbqjVbwJ0Sl8_GA.roa
Signing time: Tue 18 Oct 2022 06:33:52 +0000
ROA not before: Tue 18 Oct 2022 06:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44564
IP address blocks: 87.121.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:cc:70:cf:6a:bd:81:b1:f3:72:f1:58:51:bf:16:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 18 06:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cd616cd063359eb985baa355bc09d1297cfc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:ff:8b:f2:ee:ff:2b:b3:f8:af:ce:f6:0d:
66:3b:6b:18:84:04:1d:b6:be:28:5d:7b:cc:62:38:
49:2e:4d:1f:37:0b:1f:48:eb:7a:94:49:a9:c9:7e:
45:7f:b6:c8:ff:a2:11:b3:b8:e5:f0:b6:15:ff:b0:
f0:71:d9:e7:ed:58:b3:da:cc:07:7d:be:33:67:3a:
c4:df:1b:22:4a:64:9b:83:52:eb:a7:26:63:45:99:
ff:9d:41:b1:e3:a3:c7:88:55:8d:8c:56:58:3d:df:
cd:2a:b9:1a:7b:56:48:1b:dc:19:74:53:ff:82:bc:
57:4d:21:d6:dc:90:40:0c:8f:21:e6:f0:90:83:b1:
12:fb:92:00:1c:61:cb:66:f5:c9:0a:c5:cb:70:cc:
36:65:28:e4:ed:8a:be:4c:a5:4d:35:b1:34:d0:4a:
11:62:3c:3e:9c:50:11:b6:65:da:46:00:2e:31:ce:
6a:c3:09:50:d3:98:11:57:83:bd:34:84:00:60:ba:
4e:ec:de:70:49:63:b0:8b:a4:2a:90:93:d2:d4:56:
70:33:a7:79:a4:c5:25:32:fe:94:01:a6:b0:2e:51:
0c:ec:b3:a2:f5:f1:1c:d8:7f:29:28:81:9b:53:ac:
f2:79:22:3e:1f:1a:df:79:e7:12:7a:ab:ea:a1:5f:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:61:6C:D0:63:35:9E:B9:85:BA:A3:55:BC:09:D1:29:7C:FC:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cc1hbNBjNZ65hbqjVbwJ0Sl8_GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.160.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9c:d0:ab:70:1e:7b:29:e0:9c:30:a5:be:c4:6d:7f:3e:87:
98:d2:2c:09:ea:e5:91:72:76:ae:58:13:76:fc:4e:a4:bd:71:
bf:23:2f:1d:f4:76:ee:63:2f:c6:fd:67:23:c5:5a:b5:6f:18:
54:ce:82:1f:d6:4e:ff:74:19:a6:1b:24:bb:b5:e6:e7:45:dc:
66:89:48:c7:f6:33:3c:d2:0d:ef:ee:16:cc:69:f9:61:b3:9c:
2c:18:9e:57:f3:82:32:3d:f9:9f:10:18:43:1f:9d:64:d6:25:
64:7d:61:04:ed:af:dd:00:8f:b4:34:9d:77:8b:17:31:76:d4:
ff:9d:67:0b:80:f1:a6:98:55:10:aa:3e:29:e3:51:0b:59:0b:
75:13:a5:03:ac:b7:a5:ab:ab:b9:26:f6:6e:e6:ce:7b:2c:36:
71:92:f7:1b:5c:27:fe:45:c6:2c:0e:0c:35:cc:e0:6e:db:91:
3d:05:8f:18:61:69:fc:31:7d:15:36:04:9d:af:46:f2:57:f7:
ee:78:3c:0d:ef:d0:33:86:ce:26:ec:17:d1:af:e8:ae:07:bf:
ba:e2:9d:61:8d:98:fc:15:b3:c4:46:75:b1:ef:5b:7c:21:3e:
0c:20:6a:79:62:9c:77:b1:b9:4a:20:44:f1:68:ee:f3:4e:3d:
5a:a0:23:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPpzHDPar2BsfNy8VhRvxYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIxMDE4MDYzMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWNkNjE2Y2QwNjMzNTllYjk4NWJhYTM1NWJjMDlkMTI5N2NmYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0v/i/Lu/yuz+K/O9g1mO2sYhAQd
tr4oXXvMYjhJLk0fNwsfSOt6lEmpyX5Ff7bI/6IRs7jl8LYV/7Dwcdnn7Viz2swH
fb4zZzrE3xsiSmSbg1LrpyZjRZn/nUGx46PHiFWNjFZYPd/NKrkae1ZIG9wZdFP/
grxXTSHW3JBADI8h5vCQg7ES+5IAHGHLZvXJCsXLcMw2ZSjk7Yq+TKVNNbE00EoR
Yjw+nFARtmXaRgAuMc5qwwlQ05gRV4O9NIQAYLpO7N5wSWOwi6QqkJPS1FZwM6d5
pMUlMv6UAaawLlEM7LOi9fEc2H8pKIGbU6zyeSI+HxrfeecSeqvqoV/shwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHNYWzQYzWeuYW6o1W8CdEpfPxgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvY2MxaGJOQmpOWjY1aGJxalZid0owU2w4X0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mgMA0G
CSqGSIb3DQEBCwUAA4IBAQAxnNCrcB57KeCcMKW+xG1/PoeY0iwJ6uWRcnauWBN2
/E6kvXG/Iy8d9HbuYy/G/WcjxVq1bxhUzoIf1k7/dBmmGyS7tebnRdxmiUjH9jM8
0g3v7hbMaflhs5wsGJ5X84IyPfmfEBhDH51k1iVkfWEE7a/dAI+0NJ13ixcxdtT/
nWcLgPGmmFUQqj4p41ELWQt1E6UDrLelq6u5JvZu5s57LDZxkvcbXCf+RcYsDgw1
zOBu25E9BY8YYWn8MX0VNgSdr0byV/fueDwN79Azhs4m7BfRr+iuB7+64p1hjZj8
FbPERnWx71t8IT4MIGp5Ypx3sblKIETxaO7zTj1aoCM8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org