Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0QKq7OjHk_gdpqRjLVtinW9RLmQ.roa
File: 0QKq7OjHk_gdpqRjLVtinW9RLmQ.roa (raw, json)
Hash identifier: DHbwvrQyNKBh6W/I6JPikN0wsb55jKXfElRERWSLnVY=
Subject key identifier: D1:02:AA:EC:E8:C7:93:F8:1D:A6:A4:63:2D:5B:62:9D:6F:51:2E:64
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4874C9B8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0QKq7OjHk_gdpqRjLVtinW9RLmQ.roa
Signing time: Sat 01 Jan 2022 03:00:36 +0000
ROA not before: Sat 01 Jan 2022 03:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199790
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215613368 (0x4874c9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d102aaece8c793f81da6a4632d5b629d6f512e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:b5:cf:85:44:ac:2f:43:dc:d0:96:4b:be:
97:d9:31:d6:85:e4:39:09:5e:41:ff:0c:80:c2:95:
47:a1:66:83:28:1a:d8:2a:35:c1:45:c4:7a:f0:80:
97:47:0a:3a:a9:22:96:9a:76:2c:48:68:15:f5:5c:
76:4b:ba:9a:9c:aa:76:f9:d3:b2:6a:dc:a7:29:a8:
02:a8:22:89:c9:af:df:05:ad:45:45:19:aa:fe:1b:
3f:b8:b8:79:31:4c:aa:69:85:c1:3e:4d:7e:d3:ea:
91:6b:ad:fe:85:4c:ef:bd:a4:b0:42:1d:bf:18:37:
63:a7:4e:05:c2:4e:dc:f7:ba:08:3d:78:74:28:71:
fc:88:e5:c1:d6:a4:cc:f9:4e:8d:d8:37:b7:4d:a0:
b4:2f:9b:27:fd:13:2d:3d:93:f1:65:f2:f0:cf:b5:
09:72:ea:60:c5:8d:f1:ea:ad:14:52:15:ab:35:46:
c0:d9:96:49:ee:31:f2:61:54:d5:29:13:78:4d:b2:
61:5b:39:b7:c7:05:c2:4d:f1:2b:06:c4:24:f1:2a:
c3:fa:86:4c:6d:5a:8d:41:0c:1c:92:c5:4e:45:30:
05:97:2f:47:c4:2d:fa:8d:f0:be:41:37:99:f6:c4:
0e:1f:06:a4:56:af:ee:df:ac:db:b2:f9:20:f8:61:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:AA:EC:E8:C7:93:F8:1D:A6:A4:63:2D:5B:62:9D:6F:51:2E:64
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/0QKq7OjHk_gdpqRjLVtinW9RLmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cd:01:df:9d:a3:9f:7e:cc:3b:18:12:1f:f8:bf:7b:9b:33:
13:fe:f8:af:1e:fe:bb:57:c9:c3:32:1e:47:ca:21:f4:ed:ca:
76:af:76:b3:29:51:c5:0b:cf:03:be:09:2a:5f:f6:cb:69:9a:
7d:50:c6:98:7d:cc:d7:85:3a:31:c4:ca:79:4b:50:98:87:11:
90:b5:24:9b:5e:46:a6:2e:4d:21:7a:ad:44:fe:5a:4c:62:c2:
ad:d9:71:5c:3e:3d:b6:bc:fb:65:8a:1a:10:05:ef:8d:66:36:
ea:98:ae:ad:94:81:05:d1:d1:ee:97:22:14:57:83:f8:50:82:
d0:0b:5c:e4:45:a6:1b:7c:79:bd:e3:f8:29:e9:70:33:e2:0b:
0c:b4:4f:c8:d7:2d:d6:d9:a0:27:58:df:91:cb:65:78:6f:79:
94:44:a6:75:6d:a0:a9:c4:33:33:cf:91:0b:9e:0b:ed:dd:e8:
63:fd:1f:c0:fc:5f:c3:db:a0:e3:a5:de:89:4f:2e:58:97:e1:
82:d7:b5:d6:d5:96:86:74:72:f1:08:4a:d2:b4:04:7c:3d:07:
a3:0d:9b:d8:70:33:c8:63:f3:d8:c5:51:d9:a8:a0:41:8b:8a:
6c:f6:f6:9c:2e:9b:b6:9c:0b:e9:a0:21:03:ba:ee:b1:0f:47:
41:fe:8e:e3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIESHTJuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YWFhOGEwYTVmZGZkNjk4ZTEwNGJlMzZhMmFlZWM4MTNhZWNhMDcxMB4XDTIyMDEw
MTAzMDAzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDEwMmFhZWNlOGM3
OTNmODFkYTZhNDYzMmQ1YjYyOWQ2ZjUxMmU2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMK0tc+FRKwvQ9zQlku+l9kx1oXkOQleQf8MgMKVR6Fmgyga
2Co1wUXEevCAl0cKOqkilpp2LEhoFfVcdku6mpyqdvnTsmrcpymoAqgiicmv3wWt
RUUZqv4bP7i4eTFMqmmFwT5NftPqkWut/oVM772ksEIdvxg3Y6dOBcJO3Pe6CD14
dChx/IjlwdakzPlOjdg3t02gtC+bJ/0TLT2T8WXy8M+1CXLqYMWN8eqtFFIVqzVG
wNmWSe4x8mFU1SkTeE2yYVs5t8cFwk3xKwbEJPEqw/qGTG1ajUEMHJLFTkUwBZcv
R8Qt+o3wvkE3mfbEDh8GpFav7t+s27L5IPhhWysCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRAqrs6MeT+B2mpGMtW2Kdb1EuZDAfBgNVHSMEGDAWgBTqqooKX9/WmOEE
vjairuyBOuygcTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZxcUtDbF9mMXBqaEJMNDJvcTdzZ1Ryc29IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvMjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8x
LzBRS3E3T2pIa19nZHBxUmpMVnRpblc5UkxtUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
MjkzMmRmLWE0YmQtNGFmNS1hNGQ0LTg5ZDA5MjQwYzQzYi8xLzZxcUtDbF9mMXBq
aEJMNDJvcTdzZ1Ryc29IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACWLJjANBgkqhkiG9w0BAQsFAAOC
AQEAt80B352jn37MOxgSH/i/e5szE/74rx7+u1fJwzIeR8oh9O3Kdq92sylRxQvP
A74JKl/2y2mafVDGmH3M14U6McTKeUtQmIcRkLUkm15Gpi5NIXqtRP5aTGLCrdlx
XD49trz7ZYoaEAXvjWY26piurZSBBdHR7pciFFeD+FCC0Atc5EWmG3x5veP4Kelw
M+ILDLRPyNct1tmgJ1jfkctleG95lESmdW2gqcQzM8+RC54L7d3oY/0fwPxfw9ug
46XeiU8uWJfhgte11tWWhnRy8QhK0rQEfD0How2b2HAzyGPz2MVR2aigQYuKbPb2
nC6btpwL6aAhA7rusQ9HQf6O4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org