Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1_ZbTnMGU5fPLNw-U6uSBHpxWTI.roa
File: 1_ZbTnMGU5fPLNw-U6uSBHpxWTI.roa (raw, json)
Hash identifier: 7Xpj5xCG0sTYPKSQrJ6FTvjxD8d6O4YymX0ieJ4iBVk=
Subject key identifier: D7:F6:5B:4E:73:06:53:97:CF:2C:DC:3E:53:AB:92:04:7A:71:59:32
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0185122810051BDE6B6711AA85F0CD95F499
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1_ZbTnMGU5fPLNw-U6uSBHpxWTI.roa
Signing time: Wed 14 Dec 2022 19:41:33 +0000
ROA not before: Wed 14 Dec 2022 19:41:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 82.115.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:28:10:05:1b:de:6b:67:11:aa:85:f0:cd:95:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Dec 14 19:41:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7f65b4e73065397cf2cdc3e53ab92047a715932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:f9:7c:0f:55:1c:ac:90:f0:5c:5d:f5:5f:
b3:86:24:72:bd:f6:ca:85:e7:ac:3e:df:9e:db:9e:
f5:b6:a3:02:1f:78:94:79:98:c2:8b:c7:a4:07:56:
ae:cc:03:fe:ef:6e:11:e2:66:57:ef:21:90:20:db:
fc:9b:65:1e:b4:16:50:74:64:31:32:54:99:27:85:
3a:09:42:5d:9c:9c:f0:fb:af:93:a9:33:d3:03:0e:
86:9a:03:e6:57:35:61:12:27:94:9d:63:97:f5:f2:
2c:94:af:19:07:9e:26:91:29:77:d5:72:a9:6c:ac:
dc:b6:5c:c6:00:8c:f8:5b:c1:05:9a:e9:e8:3c:52:
b9:31:78:09:95:bd:59:b0:98:0f:b5:f5:11:46:a2:
60:44:73:7c:96:f2:e4:f2:ac:8b:41:3e:02:77:bb:
fb:69:76:af:e6:2d:5b:e7:7d:8e:90:80:ec:64:5f:
9a:67:28:f2:26:84:fb:ec:75:4e:c6:e7:12:11:49:
2d:2a:37:8a:c0:da:9b:27:f5:36:c4:c8:c2:bc:cf:
66:17:49:2f:e1:b0:6c:28:56:4d:3b:16:db:db:a9:
df:69:da:4d:64:15:41:74:fc:74:3f:e3:80:5b:5e:
42:33:dd:d9:20:f0:df:9a:25:00:a4:5a:05:26:04:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F6:5B:4E:73:06:53:97:CF:2C:DC:3E:53:AB:92:04:7A:71:59:32
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1_ZbTnMGU5fPLNw-U6uSBHpxWTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f7:16:35:bc:bf:db:77:db:71:de:f7:55:e1:c8:eb:3d:ca:
9c:c3:0e:31:ed:e6:aa:2f:c7:fd:6c:bd:0c:7a:23:06:0d:4c:
5b:f2:c9:d5:01:b6:67:57:96:17:87:71:6f:83:19:22:21:87:
84:c2:34:5f:f4:39:fc:3a:25:3b:a5:ba:a9:ed:49:ea:3e:fb:
b5:42:3b:f0:55:39:e6:9f:5b:1f:2a:0d:41:e1:02:40:a0:f0:
65:c8:48:c4:7f:c3:bc:0f:ca:51:3f:5c:4d:8a:c4:4d:7a:fa:
10:d2:b7:82:ee:13:28:03:90:b5:75:63:cd:e8:39:52:3d:31:
f3:11:20:cb:4c:a2:f9:3a:37:91:d1:e5:30:25:2a:43:30:f2:
04:b8:6a:d2:42:ad:a9:56:c6:2c:51:c1:06:b0:38:50:53:2d:
28:b2:00:9b:04:81:8f:f3:88:23:4e:e2:88:e0:9f:d8:3b:fd:
3c:e3:de:5b:d4:dd:47:47:03:97:63:53:b2:de:09:71:41:06:
8c:63:0d:5b:f8:8c:25:e3:c7:88:1f:52:30:21:48:7a:e7:1f:
f7:43:eb:c2:a9:47:ff:ce:51:64:d6:62:9e:bd:9e:5c:ad:bf:
1c:69:c9:17:ab:0e:be:13:09:de:6a:ce:c2:6a:52:4d:0a:c2:
f4:fc:96:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYUSKBAFG95rZxGqhfDNlfSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjIxMjE0MTk0MTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2Y2NWI0ZTczMDY1Mzk3Y2YyY2RjM2U1M2FiOTIwNDdhNzE1OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaz5fA9VHKyQ8Fxd9V+zhiRyvfbK
heesPt+e2571tqMCH3iUeZjCi8ekB1auzAP+724R4mZX7yGQINv8m2UetBZQdGQx
MlSZJ4U6CUJdnJzw+6+TqTPTAw6GmgPmVzVhEieUnWOX9fIslK8ZB54mkSl31XKp
bKzctlzGAIz4W8EFmunoPFK5MXgJlb1ZsJgPtfURRqJgRHN8lvLk8qyLQT4Cd7v7
aXav5i1b532OkIDsZF+aZyjyJoT77HVOxucSEUktKjeKwNqbJ/U2xMjCvM9mF0kv
4bBsKFZNOxbb26nfadpNZBVBdPx0P+OAW15CM93ZIPDfmiUApFoFJgR8UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNf2W05zBlOXzyzcPlOrkgR6cVkyMB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvMV9aYlRuTUdVNWZQTE53LVU2dVNCSHB4V1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUnPZMA0G
CSqGSIb3DQEBCwUAA4IBAQAV9xY1vL/bd9tx3vdV4cjrPcqcww4x7eaqL8f9bL0M
eiMGDUxb8snVAbZnV5YXh3FvgxkiIYeEwjRf9Dn8OiU7pbqp7UnqPvu1QjvwVTnm
n1sfKg1B4QJAoPBlyEjEf8O8D8pRP1xNisRNevoQ0reC7hMoA5C1dWPN6DlSPTHz
ESDLTKL5OjeR0eUwJSpDMPIEuGrSQq2pVsYsUcEGsDhQUy0osgCbBIGP84gjTuKI
4J/YO/08495b1N1HRwOXY1Oy3glxQQaMYw1b+Iwl48eIH1IwIUh65x/3Q+vCqUf/
zlFk1mKevZ5crb8cackXqw6+Ewneas7CalJNCsL0/JZK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-ams.rpki-client.org