Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/e7TmRiqEXpVzvqHTV4lZr28gcqM.roa
File: e7TmRiqEXpVzvqHTV4lZr28gcqM.roa (raw, json)
Hash identifier: QPFy5sDuxXO5oMIRp9Ovanj0Be+pLekViw+3NrK8Oqc=
Subject key identifier: 7B:B4:E6:46:2A:84:5E:95:73:BE:A1:D3:57:89:59:AF:6F:20:72:A3
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01828D3E3A546E369D3C803813F491786954
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/e7TmRiqEXpVzvqHTV4lZr28gcqM.roa
Signing time: Thu 11 Aug 2022 14:10:41 +0000
ROA not before: Thu 11 Aug 2022 14:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 91.226.58.0/23 maxlen: 24
91.226.56.0/23 maxlen: 24
193.93.54.0/23 maxlen: 24
193.93.52.0/23 maxlen: 24
87.237.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:3e:3a:54:6e:36:9d:3c:80:38:13:f4:91:78:69:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 11 14:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bb4e6462a845e9573bea1d3578959af6f2072a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:4d:73:31:f5:d3:34:8d:a9:f8:9f:fa:98:
b2:09:6f:d1:f3:77:0f:39:4e:c9:70:f8:bd:71:42:
07:31:d5:3a:5c:3d:d9:f9:7d:a3:ca:c0:fc:3b:7b:
66:52:54:22:a2:81:ca:50:92:d5:31:60:a5:4d:a4:
d9:d1:b4:30:97:23:eb:79:4d:10:8f:9a:0c:e3:5e:
93:8c:87:7e:df:f3:81:d2:65:5a:cb:7e:b2:af:69:
fa:03:01:14:b2:c9:e9:37:a1:27:cc:1a:ca:a7:a7:
53:41:18:63:95:66:e5:e4:30:e4:d4:ea:da:7a:54:
dc:85:18:12:60:56:7a:b3:cc:f8:5f:aa:d3:e3:70:
9f:51:9a:44:06:06:d2:aa:1d:0c:6a:61:c9:99:56:
36:5a:a8:5c:8c:96:de:ec:0a:3d:17:15:dc:57:59:
42:ff:06:e8:68:b1:19:77:71:30:c5:32:f3:16:37:
28:db:66:0f:94:57:bb:3e:31:e1:31:71:30:51:d4:
89:1c:4c:a4:dc:2f:2c:37:50:48:e2:69:14:db:2a:
07:3b:ba:58:aa:1b:1a:58:13:c2:81:f9:cf:0e:d9:
de:2c:da:9f:71:5f:c5:a0:41:d4:f0:00:b3:c8:91:
2c:28:5e:df:97:8a:5b:ec:ff:94:de:40:03:14:91:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:E6:46:2A:84:5E:95:73:BE:A1:D3:57:89:59:AF:6F:20:72:A3
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/e7TmRiqEXpVzvqHTV4lZr28gcqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.167.0/24
91.226.56.0/22
193.93.52.0/22
Signature Algorithm: sha256WithRSAEncryption
45:9c:e4:67:6a:92:63:19:7e:c4:1b:27:b3:d9:17:09:2b:5c:
75:5e:b2:c5:69:ee:f0:e5:a9:cc:9f:eb:b3:3d:cd:c4:03:96:
29:34:be:c9:e3:8f:64:25:50:22:7e:da:83:29:49:4f:7e:61:
7a:b0:0a:2f:1a:a2:f1:65:7c:c9:a7:42:d6:43:ab:71:0f:b7:
60:77:81:74:32:d7:c5:dd:32:7f:03:f6:b2:c9:3c:11:76:d3:
92:3c:97:aa:92:42:d6:93:e2:b3:89:e3:00:df:b6:99:6b:d1:
ed:c6:c7:ba:7b:4f:cd:0f:75:53:16:27:6f:ea:4d:4a:7f:9a:
df:32:01:7b:d2:89:bc:94:51:19:12:68:61:ae:f7:1a:3d:87:
20:1b:ea:2f:18:a1:30:cc:a9:3d:94:5f:ea:3d:67:99:66:b3:
d4:71:f7:4c:ae:f4:fa:f5:44:8e:af:11:fb:1d:8e:6c:05:6b:
68:2d:78:9d:f0:77:94:10:45:37:5d:b5:c1:fc:69:a2:19:51:
f7:db:1e:f0:a2:f9:c8:0b:eb:80:53:00:3d:c4:a7:c8:91:ac:
41:1a:3f:e1:e1:b0:78:cf:87:23:3e:3c:dc:4a:18:aa:21:9e:
f9:f0:65:02:36:77:09:a1:9e:d1:f9:36:70:b6:87:43:96:f2:
f0:db:f2:2e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYKNPjpUbjadPIA4E/SReGlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjIwODExMTQxMDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmI0ZTY0NjJhODQ1ZTk1NzNiZWExZDM1Nzg5NTlhZjZmMjA3MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1NczH10zSNqfif+piyCW/R83cP
OU7JcPi9cUIHMdU6XD3Z+X2jysD8O3tmUlQiooHKUJLVMWClTaTZ0bQwlyPreU0Q
j5oM416TjId+3/OB0mVay36yr2n6AwEUssnpN6EnzBrKp6dTQRhjlWbl5DDk1Ora
elTchRgSYFZ6s8z4X6rT43CfUZpEBgbSqh0MamHJmVY2WqhcjJbe7Ao9FxXcV1lC
/wboaLEZd3EwxTLzFjco22YPlFe7PjHhMXEwUdSJHEyk3C8sN1BI4mkU2yoHO7pY
qhsaWBPCgfnPDtneLNqfcV/FoEHU8ACzyJEsKF7fl4pb7P+U3kADFJFAxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHu05kYqhF6Vc76h01eJWa9vIHKjMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvZTdUbVJpcUVYcFZ6dnFIVFY0bFpyMjhnY3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV+2nAwQC
W+I4AwQCwV00MA0GCSqGSIb3DQEBCwUAA4IBAQBFnORnapJjGX7EGyez2RcJK1x1
XrLFae7w5anMn+uzPc3EA5YpNL7J449kJVAiftqDKUlPfmF6sAovGqLxZXzJp0LW
Q6txD7dgd4F0MtfF3TJ/A/ayyTwRdtOSPJeqkkLWk+KzieMA37aZa9Htxse6e0/N
D3VTFidv6k1Kf5rfMgF70om8lFEZEmhhrvcaPYcgG+ovGKEwzKk9lF/qPWeZZrPU
cfdMrvT69USOrxH7HY5sBWtoLXid8HeUEEU3XbXB/GmiGVH32x7wovnIC+uAUwA9
xKfIkaxBGj/h4bB4z4cjPjzcShiqIZ758GUCNncJoZ7R+TZwtodDlvLw2/Iu
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org