Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eTXgOclSiymf4iYNUf9R547Aldo.roa
File: eTXgOclSiymf4iYNUf9R547Aldo.roa (raw, json)
Hash identifier: 2o/IqdgzGBvontvg/pIcAgfRwKUSU37XPy+4wDohmF0=
Subject key identifier: 79:35:E0:39:C9:52:8B:29:9F:E2:26:0D:51:FF:51:E7:8E:C0:95:DA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0182005D4A7C3F9A4151327D3F19923D2195
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eTXgOclSiymf4iYNUf9R547Aldo.roa
Signing time: Fri 15 Jul 2022 05:38:10 +0000
ROA not before: Fri 15 Jul 2022 05:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210840
IP address blocks: 85.120.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:5d:4a:7c:3f:9a:41:51:32:7d:3f:19:92:3d:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 15 05:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7935e039c9528b299fe2260d51ff51e78ec095da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:27:9a:3e:f2:8d:45:01:c3:d2:86:a1:8e:
50:c1:2d:cd:c4:1d:cd:53:3f:06:fe:1b:f1:a4:27:
fd:64:7d:54:ac:8d:a6:f7:a8:e0:b6:02:ef:49:77:
da:fe:70:48:44:cf:5e:40:de:97:06:0b:87:89:e6:
26:b9:e4:57:53:fe:47:7a:4b:d7:b8:31:bf:cb:dd:
7d:ec:fd:34:9d:6f:8d:6f:dc:29:23:65:de:fc:ce:
2c:e6:af:e2:c1:20:f7:d0:43:57:fb:2e:dd:42:8b:
e5:1d:61:d4:d1:43:74:0c:21:87:2b:7a:2c:0d:88:
4a:c7:c9:ac:99:82:0a:9f:f7:12:6a:31:da:8e:5a:
30:41:cb:63:b3:10:73:7f:fe:72:8b:5f:6c:13:80:
02:87:9e:1e:a1:99:b4:c1:ee:66:57:6a:f4:47:f1:
b2:aa:b3:e8:8e:ca:80:b5:3e:92:d7:e6:bb:3f:d8:
0f:17:7c:e8:36:51:4c:5b:bd:70:8c:76:ac:16:cc:
4a:60:d9:55:6f:33:ae:20:8c:84:37:80:55:94:98:
68:90:96:92:05:78:21:46:00:1d:02:b2:50:31:80:
66:83:a3:5c:62:18:8d:46:4d:3c:6d:c4:69:2a:d7:
83:53:90:9c:70:aa:c0:6f:f0:8f:b5:bb:a9:ed:16:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:E0:39:C9:52:8B:29:9F:E2:26:0D:51:FF:51:E7:8E:C0:95:DA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eTXgOclSiymf4iYNUf9R547Aldo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.22.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6e:89:2f:31:c1:68:d4:1f:2c:3d:4e:e8:74:fd:a7:17:75:
2b:a1:a9:07:9e:70:6f:7f:1a:85:65:60:42:92:ae:8b:da:1e:
7d:6f:37:66:f1:8f:c4:9a:45:95:a5:f9:17:69:fe:3c:3c:44:
0e:bd:03:7f:21:3e:38:43:a9:f6:7d:49:15:f4:cb:bf:83:91:
44:e9:0c:e3:c0:05:91:1b:61:00:f7:bb:db:e1:56:18:32:80:
ba:b7:60:0f:b5:c9:ab:ec:dd:41:60:3d:39:41:dd:0c:6e:bb:
f8:44:01:c5:98:fd:7b:55:31:eb:52:c4:1d:f1:b5:34:de:6b:
35:99:1a:d3:86:f4:fa:c3:53:40:12:0c:3e:bf:9f:28:61:93:
81:b2:2c:70:7d:6f:2a:78:c6:b4:d3:af:40:5b:77:12:ab:7d:
15:20:4a:1d:92:94:b2:12:85:bd:fc:c9:af:eb:43:a7:41:cb:
56:68:e6:21:27:61:2f:5c:b0:78:52:e3:ea:46:41:d7:88:1c:
f7:83:cd:b0:1a:0a:b2:ee:7d:13:d8:32:2d:e8:29:99:8c:6f:
3f:63:4a:39:e3:ee:fa:46:d4:07:14:59:43:6e:a4:12:c1:1a:
ac:c1:a4:2d:0f:13:93:af:6f:c1:be:85:4f:37:3f:bb:1c:c9:
9a:0c:d7:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIAXUp8P5pBUTJ9PxmSPSGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjIwNzE1MDUzODEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTM1ZTAzOWM5NTI4YjI5OWZlMjI2MGQ1MWZmNTFlNzhlYzA5NWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIgnmj7yjUUBw9KGoY5QwS3NxB3N
Uz8G/hvxpCf9ZH1UrI2m96jgtgLvSXfa/nBIRM9eQN6XBguHieYmueRXU/5HekvX
uDG/y9197P00nW+Nb9wpI2Xe/M4s5q/iwSD30ENX+y7dQovlHWHU0UN0DCGHK3os
DYhKx8msmYIKn/cSajHajlowQctjsxBzf/5yi19sE4ACh54eoZm0we5mV2r0R/Gy
qrPojsqAtT6S1+a7P9gPF3zoNlFMW71wjHasFsxKYNlVbzOuIIyEN4BVlJhokJaS
BXghRgAdArJQMYBmg6NcYhiNRk08bcRpKteDU5CccKrAb/CPtbup7RZZAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHk14DnJUospn+ImDVH/UeeOwJXaMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZVRYZ09jbFNpeW1mNGlZTlVmOVI1NDdBbGRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXgWMA0G
CSqGSIb3DQEBCwUAA4IBAQBmbokvMcFo1B8sPU7odP2nF3UroakHnnBvfxqFZWBC
kq6L2h59bzdm8Y/EmkWVpfkXaf48PEQOvQN/IT44Q6n2fUkV9Mu/g5FE6QzjwAWR
G2EA97vb4VYYMoC6t2APtcmr7N1BYD05Qd0Mbrv4RAHFmP17VTHrUsQd8bU03ms1
mRrThvT6w1NAEgw+v58oYZOBsixwfW8qeMa0069AW3cSq30VIEodkpSyEoW9/Mmv
60OnQctWaOYhJ2EvXLB4UuPqRkHXiBz3g82wGgqy7n0T2DIt6CmZjG8/Y0o54+76
RtQHFFlDbqQSwRqswaQtDxOTr2/BvoVPNz+7HMmaDNf4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org