Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/bF_e5OZfGn25AzsLXxKmBrRLdRQ.roa
File: bF_e5OZfGn25AzsLXxKmBrRLdRQ.roa (raw, json)
Hash identifier: N2TfLwqqq0dVBTiVOzae0PrelH4sFhxGv42X0YW48h0=
Subject key identifier: 6C:5F:DE:E4:E6:5F:1A:7D:B9:03:3B:0B:5F:12:A6:06:B4:4B:75:14
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 012BB244
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/bF_e5OZfGn25AzsLXxKmBrRLdRQ.roa
Signing time: Sat 01 Jan 2022 11:59:10 +0000
ROA not before: Sat 01 Jan 2022 11:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 2.56.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19640900 (0x12bb244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 11:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c5fdee4e65f1a7db9033b0b5f12a606b44b7514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:e5:e5:5c:40:24:f9:8c:19:bf:a8:cb:34:
07:3f:5f:a6:6e:1f:89:27:80:01:06:f2:b0:20:23:
49:b8:3d:bf:89:c1:05:01:12:0b:9e:06:0b:33:b4:
27:3d:3b:17:bb:0a:40:de:45:12:df:66:9e:68:07:
37:38:5b:d3:2e:2d:48:21:ff:dd:6e:60:d2:7e:31:
3b:d6:79:50:b7:55:02:da:ae:f6:3a:43:69:ee:25:
3c:90:03:8d:c5:35:30:ff:3d:66:82:80:e1:5a:b8:
13:6d:ae:25:ee:76:bb:c8:28:ee:50:58:9e:f0:3e:
10:80:57:7c:9f:56:e3:04:84:24:07:6e:da:82:43:
70:be:98:c4:39:b8:92:db:c2:2f:71:dd:8b:a6:df:
a4:12:fb:e2:89:dc:f9:31:e5:29:60:d3:2c:fd:f5:
3b:29:c7:99:8d:80:33:83:21:92:6e:3d:a6:95:ff:
65:bc:0f:77:d4:0f:61:82:90:d9:19:50:6a:40:4b:
77:00:65:9c:37:6e:3d:27:57:46:8b:3a:5c:a6:12:
84:db:0d:fa:59:c8:4c:cd:05:86:e6:63:be:a3:52:
3b:5f:25:dd:6c:20:41:9c:fc:6c:b2:f0:ae:b5:55:
0e:a9:2c:20:b3:4f:36:3d:6c:48:20:4b:75:d2:15:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5F:DE:E4:E6:5F:1A:7D:B9:03:3B:0B:5F:12:A6:06:B4:4B:75:14
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/bF_e5OZfGn25AzsLXxKmBrRLdRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.32.0/22
Signature Algorithm: sha256WithRSAEncryption
28:96:16:09:5c:d2:48:e1:4d:38:7d:f9:28:da:f6:9b:33:bd:
c1:c0:83:79:6b:be:69:7b:76:ff:e7:ab:17:05:ee:05:a8:75:
2b:e1:12:af:a1:71:86:80:b1:9d:e9:1a:3e:04:89:f7:fc:dc:
d1:aa:92:fd:cc:ec:10:74:3d:14:ce:a0:9f:ca:cd:1e:a3:68:
2b:4d:d0:4a:8a:80:dc:32:f2:b6:79:da:d1:22:b4:de:51:c5:
5e:8a:a8:bf:58:a7:06:f8:db:75:a7:7d:4f:1c:73:ee:94:bd:
1b:67:90:45:f8:39:db:d0:9e:50:d6:8e:91:4a:98:81:85:66:
cf:1a:c5:a2:b4:79:18:2c:cb:72:17:6f:7b:47:99:f2:5f:7b:
3d:b7:00:dd:32:de:bb:8d:ba:d7:e0:62:7b:c4:59:0f:25:a1:
3f:71:bf:90:51:8b:a5:4c:3a:fa:48:63:99:99:47:9d:d0:89:
d0:be:19:84:35:08:8d:2c:e2:0e:15:77:5e:3f:83:af:9e:f9:
fa:57:60:7b:6b:a1:f4:a1:c8:3d:78:ad:26:ac:64:dc:d5:bd:
8e:51:cf:e3:9c:84:77:05:c3:34:c5:5d:3e:62:bb:13:d9:ce:
f0:e4:13:1d:04:f7:fd:0f:19:eb:50:bb:a9:25:fa:07:cb:aa:
6d:a3:87:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASuyRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
Y2IyNWNlNTUwZTRkOWJkYTA1YmQ1ZDQ1YzhiNmJhMzc0MzBiYmJhMB4XDTIyMDEw
MTExNTkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM1ZmRlZTRlNjVm
MWE3ZGI5MDMzYjBiNWYxMmE2MDZiNDRiNzUxNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkC5eVcQCT5jBm/qMs0Bz9fpm4fiSeAAQbysCAjSbg9v4nB
BQESC54GCzO0Jz07F7sKQN5FEt9mnmgHNzhb0y4tSCH/3W5g0n4xO9Z5ULdVAtqu
9jpDae4lPJADjcU1MP89ZoKA4Vq4E22uJe52u8go7lBYnvA+EIBXfJ9W4wSEJAdu
2oJDcL6YxDm4ktvCL3Hdi6bfpBL74onc+THlKWDTLP31OynHmY2AM4Mhkm49ppX/
ZbwPd9QPYYKQ2RlQakBLdwBlnDduPSdXRos6XKYShNsN+lnITM0FhuZjvqNSO18l
3WwgQZz8bLLwrrVVDqksILNPNj1sSCBLddIVCecCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRsX97k5l8afbkDOwtfEqYGtEt1FDAfBgNVHSMEGDAWgBScslzlUOTZvaBb
1dRci2ujdDC7ujAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25MSmM1VkRrMmIyZ1c5WFVYSXRybzNRd3U3by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWEvNGYzMzZiLTRhNzktNDQyNS05NTU2LWJlNDVmMGQyYWJiYi8x
L2JGX2U1T1pmR24yNUF6c0xYeEttQnJSTGRSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEv
NGYzMzZiLTRhNzktNDQyNS05NTU2LWJlNDVmMGQyYWJiYi8xL25MSmM1VkRrMmIy
Z1c5WFVYSXRybzNRd3U3by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgI4IDANBgkqhkiG9w0BAQsFAAOC
AQEAKJYWCVzSSOFNOH35KNr2mzO9wcCDeWu+aXt2/+erFwXuBah1K+ESr6FxhoCx
nekaPgSJ9/zc0aqS/czsEHQ9FM6gn8rNHqNoK03QSoqA3DLytnna0SK03lHFXoqo
v1inBvjbdad9Txxz7pS9G2eQRfg529CeUNaOkUqYgYVmzxrForR5GCzLchdve0eZ
8l97PbcA3TLeu4261+Bie8RZDyWhP3G/kFGLpUw6+khjmZlHndCJ0L4ZhDUIjSzi
DhV3Xj+Dr575+ldge2uh9KHIPXitJqxk3NW9jlHP45yEdwXDNMVdPmK7E9nO8OQT
HQT3/Q8Z61C7qSX6B8uqbaOHNw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-fra.rpki-client.org