Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CGFoquSrI-ev7KbMZdR7M0ewEfE.roa
File: CGFoquSrI-ev7KbMZdR7M0ewEfE.roa (raw, json)
Hash identifier: gufbEk82O29awpMMDYp7uYzq8zCvgxwtkf2qfEBXnu0=
Subject key identifier: 08:61:68:AA:E4:AB:23:E7:AF:EC:A6:CC:65:D4:7B:33:47:B0:11:F1
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01847AF5DCFB0BB10A6C5C86E80B082296C2
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CGFoquSrI-ev7KbMZdR7M0ewEfE.roa
Signing time: Tue 15 Nov 2022 11:04:03 +0000
ROA not before: Tue 15 Nov 2022 11:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 89.251.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:f5:dc:fb:0b:b1:0a:6c:5c:86:e8:0b:08:22:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Nov 15 11:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=086168aae4ab23e7afeca6cc65d47b3347b011f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3d:70:b7:5d:e6:bf:7f:c9:ce:d6:53:e6:48:
9c:0e:b6:c9:74:4d:13:99:9c:b2:81:b7:af:71:42:
f1:92:73:ab:d7:40:c7:af:16:f3:1a:7a:00:23:07:
a3:66:e5:d9:c3:78:ce:2d:0d:51:c9:36:aa:06:ea:
94:33:6d:10:54:f1:0c:f5:3e:3f:a0:0a:cb:8f:0b:
e7:54:f7:d0:30:c1:1e:0d:d2:91:a0:86:b0:6b:49:
73:31:02:09:87:a9:45:3a:87:88:a4:bb:6a:29:8c:
89:d6:5f:83:7d:3f:4c:a8:f5:3b:70:fd:b7:01:8e:
a5:97:a8:c7:29:b5:ec:59:14:ce:2a:8c:15:72:95:
cb:9e:44:c1:eb:8c:2e:5a:01:9f:2d:a3:ef:6a:d0:
1a:d8:cd:2b:ae:74:09:f6:c9:f1:10:d3:13:65:1b:
e9:6d:e7:b9:44:9c:a9:f4:3a:06:9e:91:0f:19:c3:
02:27:1c:2b:92:5c:73:37:34:92:0a:f9:38:2a:ba:
d7:4f:46:f8:29:20:b8:02:4b:e2:92:dc:08:b7:44:
84:38:ae:45:42:9f:b8:60:2f:7d:6d:e4:bb:c6:71:
56:d3:32:1f:49:5c:2f:d7:94:f5:9c:e5:d6:69:6e:
2c:1a:88:a1:0f:d0:91:71:d6:73:d7:62:6a:ef:92:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:68:AA:E4:AB:23:E7:AF:EC:A6:CC:65:D4:7B:33:47:B0:11:F1
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CGFoquSrI-ev7KbMZdR7M0ewEfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.12.0/22
Signature Algorithm: sha256WithRSAEncryption
22:f1:2e:9f:bb:ee:3a:1b:01:57:7d:33:96:e1:d8:c0:b4:7b:
b9:94:3d:05:be:54:d4:61:8d:77:71:11:df:c8:fb:b9:3a:f4:
a9:f0:ac:1a:0c:0c:2f:34:94:04:8e:75:03:da:9b:bf:09:94:
23:a2:ac:90:ba:a4:8f:00:03:fe:c3:1d:d2:2e:b8:ce:4c:4d:
74:e2:74:f1:8d:0b:c9:30:35:64:c6:23:ee:59:79:d6:6e:f8:
e9:5e:0a:5d:08:68:dd:c7:9c:76:c2:18:62:6b:dc:2b:ad:26:
5d:f1:c9:e9:6d:fb:cd:ae:92:5a:a4:7c:61:fa:f9:41:0b:c6:
4e:01:69:27:f2:c5:06:95:4a:9d:d6:e4:79:1b:bd:17:b8:55:
4c:12:bf:8d:7e:f5:c3:11:e7:cf:58:8e:68:06:fb:08:85:53:
0d:ac:33:ae:9b:09:92:b5:70:af:70:8d:96:31:14:37:98:58:
ce:4f:27:5f:d3:fa:08:5e:19:78:2f:f2:1a:ad:3a:fc:f6:cf:
57:47:a6:da:d7:cd:a0:4e:dd:eb:6d:75:dc:61:9b:97:f9:af:
f0:88:e1:b2:af:fe:2f:59:75:a4:02:73:b3:d0:52:db:0e:5a:
43:d9:62:91:3e:48:aa:bc:74:4a:6c:d1:95:1e:3b:fc:27:f5:
63:90:eb:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYR69dz7C7EKbFyG6AsIIpbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2NjYThhYTNmMTc4Yjk5OWE0NmU1ZmY0ZmE3ZGFmOWY5
ZjJlNmYwHhcNMjIxMTE1MTEwNDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODYxNjhhYWU0YWIyM2U3YWZlY2E2Y2M2NWQ0N2IzMzQ3YjAxMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+D1wt13mv3/JztZT5kicDrbJdE0T
mZyygbevcULxknOr10DHrxbzGnoAIwejZuXZw3jOLQ1RyTaqBuqUM20QVPEM9T4/
oArLjwvnVPfQMMEeDdKRoIawa0lzMQIJh6lFOoeIpLtqKYyJ1l+DfT9MqPU7cP23
AY6ll6jHKbXsWRTOKowVcpXLnkTB64wuWgGfLaPvatAa2M0rrnQJ9snxENMTZRvp
bee5RJyp9DoGnpEPGcMCJxwrklxzNzSSCvk4KrrXT0b4KSC4AkviktwIt0SEOK5F
Qp+4YC99beS7xnFW0zIfSVwv15T1nOXWaW4sGoihD9CRcdZz12Jq75I9awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhhaKrkqyPnr+ymzGXUezNHsBHxMB8GA1UdIwQY
MBaAFO98yoqj8Xi5maRuX/T6fa+fny5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAt
OTkwNzc3YzM1N2UzLzEvQ0dGb3F1U3JJLWV2N0tiTVpkUjdNMGV3RWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAtOTkwNzc3YzM1N2Uz
LzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWfsMMA0G
CSqGSIb3DQEBCwUAA4IBAQAi8S6fu+46GwFXfTOW4djAtHu5lD0FvlTUYY13cRHf
yPu5OvSp8KwaDAwvNJQEjnUD2pu/CZQjoqyQuqSPAAP+wx3SLrjOTE104nTxjQvJ
MDVkxiPuWXnWbvjpXgpdCGjdx5x2whhia9wrrSZd8cnpbfvNrpJapHxh+vlBC8ZO
AWkn8sUGlUqd1uR5G70XuFVMEr+NfvXDEefPWI5oBvsIhVMNrDOumwmStXCvcI2W
MRQ3mFjOTydf0/oIXhl4L/IarTr89s9XR6ba182gTt3rbXXcYZuX+a/wiOGyr/4v
WXWkAnOz0FLbDlpD2WKRPkiqvHRKbNGVHjv8J/VjkOs1
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org