Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/P2AF40ceg8opF1vLxPr1Wu12yJg.roa
File: P2AF40ceg8opF1vLxPr1Wu12yJg.roa (raw, json)
Hash identifier: yTM1v0/+RdKUFa2ZhJ4bOFRIf6LwhuxpQwvBFQL5IKY=
Subject key identifier: 3F:60:05:E3:47:1E:83:CA:29:17:5B:CB:C4:FA:F5:5A:ED:76:C8:98
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09216911
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/P2AF40ceg8opF1vLxPr1Wu12yJg.roa
Signing time: Sat 01 Jan 2022 16:00:44 +0000
ROA not before: Sat 01 Jan 2022 16:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207383
IP address blocks: 212.107.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153184529 (0x9216911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f6005e3471e83ca29175bcbc4faf55aed76c898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:88:7b:0e:4c:fc:bf:19:7e:48:65:ff:8c:c0:
70:26:b4:e2:a4:79:32:f4:0a:46:61:52:81:3f:3f:
9b:07:e5:76:87:a7:34:ee:b3:fd:e1:c9:fd:44:3b:
68:fb:5f:42:b1:44:ba:46:c9:9a:e0:bd:2d:18:4f:
8e:9e:00:72:9a:94:c8:61:53:66:80:8c:23:d4:5b:
ca:e7:e7:8f:77:98:26:8a:5e:4b:b2:c5:29:98:3f:
cb:bc:30:8e:1f:a8:5f:13:e3:84:05:d8:a6:b3:77:
d6:74:3b:a0:07:87:2a:4a:bf:35:f3:e1:0f:b3:69:
7f:d1:2a:77:86:be:75:41:63:cb:3e:0a:b5:19:10:
d6:05:68:87:f0:58:cd:5b:d2:f9:b1:4a:8e:5c:53:
e3:2b:da:5a:33:91:4f:1e:cd:6b:c0:42:d8:39:4a:
34:22:c4:2d:1b:5a:1a:18:f3:74:89:7f:ae:86:29:
c4:29:23:c3:1a:4f:fe:f8:e8:22:cb:2c:d2:20:d0:
c8:3e:bd:f1:46:dc:e8:36:6b:77:99:cb:4b:c0:9d:
99:84:cd:2d:60:15:f9:18:dd:24:90:95:61:44:dc:
a7:b9:5c:25:d3:86:62:09:41:c9:fc:66:25:ac:26:
b7:31:bd:6c:e2:d4:3a:e3:df:89:bb:b9:5c:a7:90:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:05:E3:47:1E:83:CA:29:17:5B:CB:C4:FA:F5:5A:ED:76:C8:98
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/P2AF40ceg8opF1vLxPr1Wu12yJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:74:41:37:7f:0d:fb:59:31:85:6f:e4:79:4a:99:9b:fa:43:
f3:64:63:ce:e8:02:8e:64:2a:98:73:a0:f3:13:5c:54:d0:7b:
c6:a9:f6:4e:b3:52:09:56:17:f6:41:55:7c:21:92:79:95:8e:
76:ef:6d:fc:8e:30:7f:7f:af:04:ff:57:1b:97:5e:5c:45:34:
1e:ad:a0:48:4c:3c:54:57:81:93:d1:c4:0d:6a:b1:48:43:e7:
ab:4b:e7:a9:de:e3:53:7a:11:1b:81:56:07:dd:b3:be:71:a1:
e2:85:c3:5a:97:d0:2f:74:8a:ca:f4:30:8a:13:be:db:71:85:
c0:51:a6:4c:4a:8a:2f:89:28:38:b2:eb:4a:8f:91:72:c6:b5:
b6:0e:d7:15:f3:d0:5f:9d:68:25:89:94:0e:fd:3a:b8:27:be:
3e:88:ab:7c:a0:60:91:b5:b1:73:82:36:05:e4:c0:0a:2f:b9:
96:ed:99:36:d7:6f:1b:f7:02:78:0f:59:93:28:f9:de:86:87:
02:32:c4:0c:b4:4d:89:5d:f2:a4:d5:72:8e:4b:9e:8d:6e:31:
e2:ca:d4:eb:ff:1b:4f:a4:e0:11:b3:c0:5e:05:a4:f0:ff:4f:
e5:57:f4:f3:97:d3:0c:34:88:ed:93:29:c0:e1:e9:8d:e3:ad:
05:af:f6:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECSFpETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MB4XDTIyMDEw
MTE2MDA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Y2MDA1ZTM0NzFl
ODNjYTI5MTc1YmNiYzRmYWY1NWFlZDc2Yzg5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPWIew5M/L8Zfkhl/4zAcCa04qR5MvQKRmFSgT8/mwfldoen
NO6z/eHJ/UQ7aPtfQrFEukbJmuC9LRhPjp4AcpqUyGFTZoCMI9Rbyufnj3eYJope
S7LFKZg/y7wwjh+oXxPjhAXYprN31nQ7oAeHKkq/NfPhD7Npf9Eqd4a+dUFjyz4K
tRkQ1gVoh/BYzVvS+bFKjlxT4yvaWjORTx7Na8BC2DlKNCLELRtaGhjzdIl/roYp
xCkjwxpP/vjoIsss0iDQyD698Ubc6DZrd5nLS8CdmYTNLWAV+RjdJJCVYUTcp7lc
JdOGYglByfxmJawmtzG9bOLUOuPfibu5XKeQrc0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ/YAXjRx6DyikXW8vE+vVa7XbImDAfBgNVHSMEGDAWgBSxp7DY3oJR0218
g/r2vH7+xztQNDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8x
L1AyQUY0MGNlZzhvcEYxdkx4UHIxV3UxMnlKZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcv
ZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWRO
dGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRrDjANBgkqhkiG9w0BAQsFAAOC
AQEAXnRBN38N+1kxhW/keUqZm/pD82RjzugCjmQqmHOg8xNcVNB7xqn2TrNSCVYX
9kFVfCGSeZWOdu9t/I4wf3+vBP9XG5deXEU0Hq2gSEw8VFeBk9HEDWqxSEPnq0vn
qd7jU3oRG4FWB92zvnGh4oXDWpfQL3SKyvQwihO+23GFwFGmTEqKL4koOLLrSo+R
csa1tg7XFfPQX51oJYmUDv06uCe+PoirfKBgkbWxc4I2BeTACi+5lu2ZNtdvG/cC
eA9Zkyj53oaHAjLEDLRNiV3ypNVyjkuejW4x4srU6/8bT6TgEbPAXgWk8P9P5Vf0
85fTDDSI7ZMpwOHpjeOtBa/2LA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org