Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/KGeFFWcfHdJl8r4hTNFd9D0RTjk.roa
File: KGeFFWcfHdJl8r4hTNFd9D0RTjk.roa (raw, json)
Hash identifier: 6xg3aWzAUfrinWZAKC/1sUcNkyCIzu4kQ2otQQSTWh8=
Subject key identifier: 28:67:85:15:67:1F:1D:D2:65:F2:BE:21:4C:D1:5D:F4:3D:11:4E:39
Certificate issuer: /CN=5868fe00e3940657ac7fe634e8982c81b0f00686
Certificate serial: 0181F299FBE831FE991DE2D7BC4509B5ABE9
Authority key identifier: 58:68:FE:00:E3:94:06:57:AC:7F:E6:34:E8:98:2C:81:B0:F0:06:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGj-AOOUBlesf-Y06JgsgbDwBoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/KGeFFWcfHdJl8r4hTNFd9D0RTjk.roa
Signing time: Tue 12 Jul 2022 13:29:46 +0000
ROA not before: Tue 12 Jul 2022 13:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197883
IP address blocks: 176.97.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:99:fb:e8:31:fe:99:1d:e2:d7:bc:45:09:b5:ab:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5868fe00e3940657ac7fe634e8982c81b0f00686
Validity
Not Before: Jul 12 13:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28678515671f1dd265f2be214cd15df43d114e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:66:2b:e7:f0:b8:d5:83:96:2a:0d:d5:44:
03:6a:3d:1e:2d:d5:e0:97:59:df:26:bb:08:f7:0b:
f1:be:13:7e:30:99:e4:c4:75:62:ad:43:74:db:73:
c7:e9:87:84:3b:79:18:97:ca:14:3b:a7:f3:1c:f9:
6d:74:5a:c0:e0:20:ca:44:e1:2b:81:f9:0e:a5:bf:
ce:98:f8:a7:92:54:64:9b:ae:01:75:df:b8:48:a9:
05:59:d5:e8:b1:87:d2:a2:fc:26:56:bf:61:be:1a:
c7:e5:6b:f4:0d:69:55:96:73:95:85:8e:9f:1f:c5:
ca:2a:99:7c:46:39:2b:e7:25:79:00:ee:4f:cb:ed:
cd:3e:bc:5f:9c:e9:b3:2b:d4:2d:fb:c5:b1:fb:00:
2e:b4:83:97:af:e2:1c:63:29:38:4c:81:ae:56:63:
0c:44:ea:de:63:dc:0f:1a:38:0d:ab:a9:eb:07:04:
db:ea:3e:2b:2e:b7:24:12:7c:8f:4b:dc:4d:53:48:
cc:a1:ad:b8:73:92:e0:f6:bf:c7:a4:fb:19:cc:2f:
24:89:32:45:77:b4:8c:3e:41:97:a5:99:b7:d1:b7:
33:88:10:f4:22:fb:95:bb:bd:f4:ca:1b:0f:dd:1c:
cf:45:78:02:a6:b4:cb:0c:98:68:d9:8d:6c:68:a0:
69:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:85:15:67:1F:1D:D2:65:F2:BE:21:4C:D1:5D:F4:3D:11:4E:39
X509v3 Authority Key Identifier:
keyid:58:68:FE:00:E3:94:06:57:AC:7F:E6:34:E8:98:2C:81:B0:F0:06:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGj-AOOUBlesf-Y06JgsgbDwBoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/KGeFFWcfHdJl8r4hTNFd9D0RTjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5764e9-3a73-4799-b119-909530d487f8/1/WGj-AOOUBlesf-Y06JgsgbDwBoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a7:f2:ad:5f:85:b9:c1:6f:83:12:96:4f:73:fa:7f:77:2e:
16:ce:b3:3f:a0:c8:f0:b3:7e:6e:be:2b:40:4b:bb:84:f6:95:
b5:24:b8:fa:1d:c6:16:00:fc:93:fa:a2:ef:4a:e9:e2:1e:4e:
a7:f2:d0:e1:52:80:7d:4e:2d:a1:93:c0:ea:4c:df:23:93:fd:
48:6e:b3:fc:9a:be:26:80:d6:5b:25:c4:c1:8e:85:69:95:a7:
ab:cf:8c:c6:35:37:fe:da:72:2a:a7:24:da:c5:86:f4:54:17:
55:e9:3b:24:bb:22:a1:b6:88:00:77:2a:8e:bf:5a:7e:64:7b:
d3:74:99:54:b0:ae:e4:53:9f:53:ce:b3:85:e2:e3:ae:11:09:
a6:22:a4:36:a5:11:48:84:b5:68:2e:4f:24:60:c7:d0:00:e8:
ad:fb:80:8f:2c:ba:a6:c0:a7:cf:e7:6f:13:6b:77:34:0e:fc:
dd:a5:15:14:f9:63:7c:ae:e8:59:d9:94:73:2c:07:50:33:23:
11:83:fe:20:58:c1:93:52:ed:5e:e1:4b:e5:1c:f9:43:60:4c:
00:19:30:0b:88:4f:b4:1c:31:4c:d0:b8:9c:03:00:7f:45:50:
88:87:03:42:ed:a2:ff:9f:39:93:a6:b6:24:c3:90:c7:d9:3d:
7b:f7:88:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHymfvoMf6ZHeLXvEUJtavpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjhmZTAwZTM5NDA2NTdhYzdmZTYzNGU4OTgyYzgxYjBm
MDA2ODYwHhcNMjIwNzEyMTMyOTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODY3ODUxNTY3MWYxZGQyNjVmMmJlMjE0Y2QxNWRmNDNkMTE0ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZmK+fwuNWDlioN1UQDaj0eLdXg
l1nfJrsI9wvxvhN+MJnkxHVirUN023PH6YeEO3kYl8oUO6fzHPltdFrA4CDKROEr
gfkOpb/OmPinklRkm64Bdd+4SKkFWdXosYfSovwmVr9hvhrH5Wv0DWlVlnOVhY6f
H8XKKpl8Rjkr5yV5AO5Py+3NPrxfnOmzK9Qt+8Wx+wAutIOXr+IcYyk4TIGuVmMM
ROreY9wPGjgNq6nrBwTb6j4rLrckEnyPS9xNU0jMoa24c5Lg9r/HpPsZzC8kiTJF
d7SMPkGXpZm30bcziBD0IvuVu730yhsP3RzPRXgCprTLDJho2Y1saKBpEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFChnhRVnHx3SZfK+IUzRXfQ9EU45MB8GA1UdIwQY
MBaAFFho/gDjlAZXrH/mNOiYLIGw8AaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dqLUFPT1VCbGVzZi1ZMDZKZ3NnYkR3Qm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81NzY0ZTktM2E3My00Nzk5LWIxMTkt
OTA5NTMwZDQ4N2Y4LzEvS0dlRkZXY2ZIZEpsOHI0aFRORmQ5RDBSVGprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81NzY0ZTktM2E3My00Nzk5LWIxMTktOTA5NTMwZDQ4N2Y4
LzEvV0dqLUFPT1VCbGVzZi1ZMDZKZ3NnYkR3Qm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGHPMA0G
CSqGSIb3DQEBCwUAA4IBAQCap/KtX4W5wW+DEpZPc/p/dy4WzrM/oMjws35uvitA
S7uE9pW1JLj6HcYWAPyT+qLvSuniHk6n8tDhUoB9Ti2hk8DqTN8jk/1IbrP8mr4m
gNZbJcTBjoVplaerz4zGNTf+2nIqpyTaxYb0VBdV6TskuyKhtogAdyqOv1p+ZHvT
dJlUsK7kU59TzrOF4uOuEQmmIqQ2pRFIhLVoLk8kYMfQAOit+4CPLLqmwKfP528T
a3c0DvzdpRUU+WN8ruhZ2ZRzLAdQMyMRg/4gWMGTUu1e4UvlHPlDYEwAGTALiE+0
HDFM0LicAwB/RVCIhwNC7aL/nzmTprYkw5DH2T1794gN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:54 2023 by rpki-client on console-fra.rpki-client.org