Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lZDw7gbKyeZzPvyhRxyAM-ePr1Y.roa
File: lZDw7gbKyeZzPvyhRxyAM-ePr1Y.roa (raw, json)
Hash identifier: aN5G+8QVLGPqQEYngHBQVTAMWK/Z3BK9mGGqdSsXvro=
Subject key identifier: 95:90:F0:EE:06:CA:C9:E6:73:3E:FC:A1:47:1C:80:33:E7:8F:AF:56
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018210CEE390511F49B4E59D270F3C52EBAA
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lZDw7gbKyeZzPvyhRxyAM-ePr1Y.roa
Signing time: Mon 18 Jul 2022 10:16:10 +0000
ROA not before: Mon 18 Jul 2022 10:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210531
IP address blocks: 160.19.94.0/24 maxlen: 24
160.19.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:ce:e3:90:51:1f:49:b4:e5:9d:27:0f:3c:52:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jul 18 10:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9590f0ee06cac9e6733efca1471c8033e78faf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:db:92:d0:f1:5c:e8:b0:2d:24:73:8a:dc:
d8:bd:e7:54:79:c5:15:9f:b2:9f:bd:7a:d5:22:a8:
6a:57:5d:ac:4a:10:df:52:60:90:ba:fa:00:1a:18:
49:32:d0:69:34:b6:b2:31:bf:e9:50:dc:b2:e9:d0:
8a:76:4d:99:6a:59:50:51:28:59:f4:27:10:cd:c7:
9f:a4:ec:12:5f:c7:35:d8:4f:ac:92:58:f7:22:d8:
6c:1c:3f:59:cd:37:a6:9a:51:71:fe:70:8b:f8:70:
b8:7f:eb:93:72:c5:9e:f4:0a:7a:a2:17:13:06:6e:
1e:62:37:05:48:74:af:41:37:eb:ec:79:d2:25:d8:
98:36:4d:91:23:fd:5f:9a:8c:c9:a2:8c:8f:d9:92:
b2:ac:5b:9e:20:33:04:60:5d:95:16:c1:37:ea:e7:
e4:81:fa:ab:1f:02:1b:1b:d7:14:fd:45:9c:e1:56:
67:72:1c:cc:4d:6a:66:1f:4b:50:0f:6f:9f:cf:e0:
81:8f:d2:5b:d7:e6:c0:e0:0e:61:55:77:82:59:7a:
69:35:c8:82:e1:7f:1f:9d:1e:f6:88:7c:cc:d7:67:
f7:f0:1b:ba:83:8a:27:9f:f3:83:2e:7e:31:e8:69:
96:bb:d7:9d:f9:24:97:d4:1f:0e:7d:17:cc:05:d4:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:90:F0:EE:06:CA:C9:E6:73:3E:FC:A1:47:1C:80:33:E7:8F:AF:56
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lZDw7gbKyeZzPvyhRxyAM-ePr1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:ca:11:22:22:ec:f9:fa:61:0e:1a:1e:24:7a:60:9d:2a:32:
80:f6:0d:c6:35:aa:6b:79:39:42:4d:eb:d5:58:01:41:90:6e:
15:2d:df:9c:65:0b:35:a7:0d:51:33:a8:e8:c1:78:3a:fa:96:
de:92:00:55:39:9c:3d:cd:15:c9:60:af:82:1b:9c:ba:78:f4:
2f:ff:74:5a:fa:e0:65:5d:11:aa:f6:ca:41:ec:b2:d4:b4:c0:
03:4e:36:3b:ca:13:9c:24:63:d4:39:b4:68:66:09:b5:73:d4:
4e:4b:ed:d5:a3:05:8b:de:11:8d:c1:44:0c:55:69:02:dc:0e:
d3:18:61:17:62:dd:e1:7d:72:2b:77:1d:b4:b2:50:e5:05:42:
83:d3:8e:80:8a:5d:04:9c:6e:64:5b:5e:1c:98:5c:04:f6:f2:
74:9c:2f:54:82:c4:4f:8a:a2:0a:b7:6a:45:b4:e0:55:97:e2:
87:ea:55:11:85:2a:03:8e:9c:74:01:48:a8:60:4f:ef:48:68:
3a:6e:75:bd:9b:6d:82:c0:dc:14:16:40:8b:86:ce:04:16:4c:
4d:e3:e2:33:d4:48:3e:ba:63:a0:6c:75:cd:72:c1:89:bd:c8:
ec:c0:91:c1:dc:d2:e4:f3:87:27:1d:de:1a:23:1f:38:0b:bf:
5e:85:5b:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIQzuOQUR9JtOWdJw88UuuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjIwNzE4MTAxNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTkwZjBlZTA2Y2FjOWU2NzMzZWZjYTE0NzFjODAzM2U3OGZhZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07DbktDxXOiwLSRzitzYvedUecUV
n7KfvXrVIqhqV12sShDfUmCQuvoAGhhJMtBpNLayMb/pUNyy6dCKdk2ZallQUShZ
9CcQzcefpOwSX8c12E+sklj3IthsHD9ZzTemmlFx/nCL+HC4f+uTcsWe9Ap6ohcT
Bm4eYjcFSHSvQTfr7HnSJdiYNk2RI/1fmozJooyP2ZKyrFueIDMEYF2VFsE36ufk
gfqrHwIbG9cU/UWc4VZnchzMTWpmH0tQD2+fz+CBj9Jb1+bA4A5hVXeCWXppNciC
4X8fnR72iHzM12f38Bu6g4onn/ODLn4x6GmWu9ed+SSX1B8OfRfMBdRGKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWQ8O4Gysnmcz78oUccgDPnj69WMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvbFpEdzdnYkt5ZVp6UHZ5aFJ4eUFNLWVQcjFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNeMA0G
CSqGSIb3DQEBCwUAA4IBAQAtyhEiIuz5+mEOGh4kemCdKjKA9g3GNapreTlCTevV
WAFBkG4VLd+cZQs1pw1RM6jowXg6+pbekgBVOZw9zRXJYK+CG5y6ePQv/3Ra+uBl
XRGq9spB7LLUtMADTjY7yhOcJGPUObRoZgm1c9ROS+3VowWL3hGNwUQMVWkC3A7T
GGEXYt3hfXIrdx20slDlBUKD046Ail0EnG5kW14cmFwE9vJ0nC9UgsRPiqIKt2pF
tOBVl+KH6lURhSoDjpx0AUioYE/vSGg6bnW9m22CwNwUFkCLhs4EFkxN4+Iz1Eg+
umOgbHXNcsGJvcjswJHB3NLk84cnHd4aIx84C79ehVuy
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org