Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/B9NzWL7Kv-blIeArJdUDA4txewY.roa
File: B9NzWL7Kv-blIeArJdUDA4txewY.roa (raw, json)
Hash identifier: Z/RhRm1G6zZ0k24FguEzMxCN10la2JYHxWelgzBMsU4=
Subject key identifier: 07:D3:73:58:BE:CA:BF:E6:E5:21:E0:2B:25:D5:03:03:8B:71:7B:06
Certificate issuer: /CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Certificate serial: 03CFD8D5
Authority key identifier: 0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/B9NzWL7Kv-blIeArJdUDA4txewY.roa
Signing time: Sat 01 Jan 2022 07:59:45 +0000
ROA not before: Sat 01 Jan 2022 07:59:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200000
IP address blocks: 91.222.136.0/22 maxlen: 22
194.247.12.0/23 maxlen: 23
91.206.200.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63953109 (0x3cfd8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a84e473aa564eb51a7e7eb8b18f14ac0cbc2c9c
Validity
Not Before: Jan 1 07:59:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07d37358becabfe6e521e02b25d503038b717b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:3c:70:0b:ea:bf:d1:6b:05:1d:46:6b:26:
59:b8:71:8c:da:4c:08:0a:5a:3b:f2:dd:d5:a5:5c:
2a:8d:43:f7:e6:ca:c1:6f:d8:92:a7:b1:24:53:22:
36:83:04:26:b5:cf:eb:a6:42:62:63:cf:62:3f:1b:
df:28:b5:70:e0:3c:1e:76:e6:76:64:e9:a2:1e:b4:
43:13:13:cf:0c:38:eb:79:c2:3e:a1:a5:42:f5:97:
ed:3a:f2:a7:f2:6d:ad:15:cc:02:a9:06:b6:b9:90:
05:78:60:a8:13:34:67:7b:ee:8c:01:94:96:0c:f5:
d8:ff:84:96:4d:83:73:3d:6d:ba:89:b5:d4:96:4f:
c3:2f:67:35:77:6e:35:c7:44:c6:64:d5:ca:82:1f:
a4:84:e2:ba:be:33:8d:a9:de:9d:2c:a1:89:d5:ef:
d1:0d:b1:0d:5d:96:35:06:d0:c7:1a:6a:bf:ac:bd:
a3:9f:a9:86:0e:e8:23:84:ee:30:d0:1e:88:63:68:
e2:e3:e1:53:fd:62:86:96:a1:d7:92:0a:df:10:38:
37:f9:a6:81:62:9a:e9:cd:b9:9b:4f:50:27:3a:03:
fe:0a:f2:25:5f:33:d2:e5:44:a3:64:ff:09:c2:c0:
97:75:e0:26:28:5e:42:68:12:03:00:ee:b8:f2:4d:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:73:58:BE:CA:BF:E6:E5:21:E0:2B:25:D5:03:03:8B:71:7B:06
X509v3 Authority Key Identifier:
keyid:0A:84:E4:73:AA:56:4E:B5:1A:7E:7E:B8:B1:8F:14:AC:0C:BC:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoTkc6pWTrUafn64sY8UrAy8LJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/B9NzWL7Kv-blIeArJdUDA4txewY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d0245-7855-4031-9648-54628dfcba4c/1/CoTkc6pWTrUafn64sY8UrAy8LJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.200.0/23
91.222.136.0/22
194.247.12.0/23
Signature Algorithm: sha256WithRSAEncryption
59:59:68:13:58:b3:d8:3d:8b:60:8b:d8:9b:eb:c7:35:57:9e:
cb:9d:b3:07:65:a9:8d:20:36:26:71:ea:6c:c3:b8:4d:6e:c4:
e8:ef:87:57:54:ba:d7:3e:bf:fe:40:6f:f9:5b:28:90:8b:7b:
b9:d9:06:69:1d:02:ba:c7:ce:6b:c0:07:07:0c:d7:15:dc:d1:
5f:37:be:10:34:a1:06:b8:90:f1:97:26:6a:8a:2b:27:54:38:
38:d9:c9:f9:6f:76:bb:b9:90:c5:68:46:45:22:82:41:40:f9:
99:65:5a:09:01:82:b2:06:82:da:7c:2d:bd:34:fa:16:07:31:
8e:27:5d:aa:15:0f:15:67:eb:47:46:d1:83:74:b5:cc:78:2f:
de:f1:85:52:87:48:d9:53:1c:15:79:25:9a:83:b0:70:3f:98:
83:d4:a1:7e:22:23:7f:50:67:cb:32:46:65:cd:49:8c:ee:0f:
94:3e:4b:09:bc:ef:bd:73:7d:f9:c5:e9:08:d0:c9:1c:ea:5a:
da:fa:74:dd:ba:56:0b:15:94:62:ff:f5:e6:6b:ec:85:9e:01:
a8:a6:f2:98:41:35:60:26:9d:ab:56:52:a0:56:13:4e:33:3d:
3c:6e:18:a5:35:74:78:ae:b2:90:40:cf:b2:9f:4e:68:f5:4c:
1e:65:ec:33
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEA8/Y1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTg0ZTQ3M2FhNTY0ZWI1MWE3ZTdlYjhiMThmMTRhYzBjYmMyYzljMB4XDTIyMDEw
MTA3NTk0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDdkMzczNThiZWNh
YmZlNmU1MjFlMDJiMjVkNTAzMDM4YjcxN2IwNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALS2PHAL6r/RawUdRmsmWbhxjNpMCApaO/Ld1aVcKo1D9+bK
wW/YkqexJFMiNoMEJrXP66ZCYmPPYj8b3yi1cOA8HnbmdmTpoh60QxMTzww463nC
PqGlQvWX7Tryp/JtrRXMAqkGtrmQBXhgqBM0Z3vujAGUlgz12P+Elk2Dcz1tuom1
1JZPwy9nNXduNcdExmTVyoIfpITiur4zjanenSyhidXv0Q2xDV2WNQbQxxpqv6y9
o5+phg7oI4TuMNAeiGNo4uPhU/1ihpah15IK3xA4N/mmgWKa6c25m09QJzoD/gry
JV8z0uVEo2T/CcLAl3XgJiheQmgSAwDuuPJNBrsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQH03NYvsq/5uUh4Csl1QMDi3F7BjAfBgNVHSMEGDAWgBQKhORzqlZOtRp+
frixjxSsDLwsnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NvVGtjNnBXVHJVYWZuNjRzWThVckF5OExKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvOWQwMjQ1LTc4NTUtNDAzMS05NjQ4LTU0NjI4ZGZjYmE0Yy8x
L0I5TnpXTDdLdi1ibEllQXJKZFVEQTR0eGV3WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
OWQwMjQ1LTc4NTUtNDAzMS05NjQ4LTU0NjI4ZGZjYmE0Yy8xL0NvVGtjNnBXVHJV
YWZuNjRzWThVckF5OExKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAVvOyAMEAlveiAMEAcL3DDANBgkq
hkiG9w0BAQsFAAOCAQEAWVloE1iz2D2LYIvYm+vHNVeey52zB2WpjSA2JnHqbMO4
TW7E6O+HV1S61z6//kBv+VsokIt7udkGaR0CusfOa8AHBwzXFdzRXze+EDShBriQ
8ZcmaoorJ1Q4ONnJ+W92u7mQxWhGRSKCQUD5mWVaCQGCsgaC2nwtvTT6Fgcxjidd
qhUPFWfrR0bRg3S1zHgv3vGFUodI2VMcFXklmoOwcD+Yg9ShfiIjf1BnyzJGZc1J
jO4PlD5LCbzvvXN9+cXpCNDJHOpa2vp03bpWCxWUYv/15mvshZ4BqKbymEE1YCad
q1ZSoFYTTjM9PG4YpTV0eK6ykEDPsp9OaPVMHmXsMw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:29 2023 by rpki-client on console-ams.rpki-client.org