Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Hs4vTNB1aXONRv-AHx-4v6UTWNw.roa
File: Hs4vTNB1aXONRv-AHx-4v6UTWNw.roa (raw, json)
Hash identifier: rUWzfbesNnRhj0ds8SeBNuUEUnZLsBP9Rp/x537+9bQ=
Subject key identifier: 1E:CE:2F:4C:D0:75:69:73:8D:46:FF:80:1F:1F:B8:BF:A5:13:58:DC
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 3319E5F0
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Hs4vTNB1aXONRv-AHx-4v6UTWNw.roa
Signing time: Sat 01 Jan 2022 10:59:03 +0000
ROA not before: Sat 01 Jan 2022 10:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5483
IP address blocks: 79.120.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857335280 (0x3319e5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ece2f4cd07569738d46ff801f1fb8bfa51358dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:7c:aa:a8:a5:fa:4d:80:ca:f3:2b:e1:b6:
e4:59:6e:e4:c7:f9:e7:16:91:6c:3d:bf:8a:a3:51:
90:28:b8:aa:b2:b8:89:12:c8:9d:15:8f:42:9c:d3:
c3:6e:98:70:c0:44:73:44:fc:ba:6f:7a:3c:f2:83:
7e:57:87:1c:9d:85:7d:02:85:b2:e3:f5:64:f2:85:
f4:e2:d9:ac:42:75:2d:ed:ec:ce:2d:0d:db:fa:ce:
ba:a2:2b:67:43:65:c7:84:82:42:45:50:f3:c1:59:
a9:98:65:ec:67:b9:e5:55:08:bf:1c:49:b4:8a:d7:
ea:b8:96:4b:7c:7f:fa:d8:2f:79:fc:f2:bf:45:74:
0b:4e:bd:81:2b:31:ac:0c:24:63:d1:c9:4a:84:e1:
63:3e:32:ba:4d:67:46:b5:0d:ca:80:d2:84:35:36:
5d:16:cc:9b:54:e8:24:69:ad:5f:e7:90:1c:98:5d:
40:54:de:8d:95:fc:b0:54:39:25:7b:75:2a:61:0c:
74:c1:90:ad:8d:e3:77:2d:8f:12:de:da:9a:d2:d1:
5f:9b:bb:37:7b:57:a4:db:9c:56:a5:d9:c5:fb:9c:
aa:51:8e:d1:85:87:1b:49:81:be:5c:47:8b:d4:4b:
fe:b5:0d:f2:d4:ee:4d:ad:13:33:e8:df:2f:a9:20:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:2F:4C:D0:75:69:73:8D:46:FF:80:1F:1F:B8:BF:A5:13:58:DC
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/Hs4vTNB1aXONRv-AHx-4v6UTWNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.198.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a0:0b:4b:7e:ad:88:ca:93:02:bc:2c:9f:cd:10:4c:13:0d:
6d:11:b6:9f:a8:35:82:d3:09:9d:59:2d:fc:4e:fb:c9:b9:5d:
84:23:6b:95:e5:d5:d2:5b:72:d6:d6:a9:82:81:0f:87:f7:33:
15:d2:4f:0b:5c:2e:26:55:b1:ce:3c:6c:3f:13:4f:4c:51:0f:
36:62:8d:0e:37:8f:c4:b0:20:da:a6:b4:f5:6d:a9:fb:43:98:
49:a8:56:fb:4f:00:c4:5d:36:f9:af:b7:53:a9:d9:00:31:37:
bf:9a:3a:5c:ea:53:7b:23:6d:b0:00:6b:4e:a6:d1:55:51:54:
2b:53:fa:f8:d4:c2:66:f8:a6:1c:eb:31:58:30:31:8f:7c:c3:
f0:3a:55:65:a2:c4:6d:42:d2:93:48:d7:98:e0:64:db:23:9c:
f0:96:18:c1:20:a1:fa:a9:2f:a1:a3:2b:00:4a:d3:65:33:9f:
54:7b:e9:da:67:54:52:9d:5d:d2:37:fb:0f:c4:86:8c:0e:d8:
2a:0d:6c:1a:17:7f:2d:99:d2:3e:48:13:8f:03:43:13:5e:d0:
83:bc:0d:9f:86:86:1e:ca:b3:23:a2:d4:76:d1:04:1c:c0:b0:
47:37:10:75:c9:93:81:23:95:69:79:3f:d1:b4:f4:ae:0d:f2:
f9:e4:b7:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMxnl8DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MB4XDTIyMDEw
MTEwNTkwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWVjZTJmNGNkMDc1
Njk3MzhkNDZmZjgwMWYxZmI4YmZhNTEzNThkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI2TfKqopfpNgMrzK+G25Flu5Mf55xaRbD2/iqNRkCi4qrK4
iRLInRWPQpzTw26YcMBEc0T8um96PPKDfleHHJ2FfQKFsuP1ZPKF9OLZrEJ1Le3s
zi0N2/rOuqIrZ0Nlx4SCQkVQ88FZqZhl7Ge55VUIvxxJtIrX6riWS3x/+tgvefzy
v0V0C069gSsxrAwkY9HJSoThYz4yuk1nRrUNyoDShDU2XRbMm1ToJGmtX+eQHJhd
QFTejZX8sFQ5JXt1KmEMdMGQrY3jdy2PEt7amtLRX5u7N3tXpNucVqXZxfucqlGO
0YWHG0mBvlxHi9RL/rUN8tTuTa0TM+jfL6kg7G0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQezi9M0HVpc41G/4AfH7i/pRNY3DAfBgNVHSMEGDAWgBS/sJejbCMl0QMf
9AkboAqGRZ1CiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y3Q1hvMndqSmRFREhfUUpHNkFLaGtXZFFvZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8x
L0hzNHZUTkIxYVhPTlJ2LUFIeC00djZVVFdOdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRF
REhfUUpHNkFLaGtXZFFvZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE94xjANBgkqhkiG9w0BAQsFAAOC
AQEAlKALS36tiMqTArwsn80QTBMNbRG2n6g1gtMJnVkt/E77ybldhCNrleXV0lty
1tapgoEPh/czFdJPC1wuJlWxzjxsPxNPTFEPNmKNDjePxLAg2qa09W2p+0OYSahW
+08AxF02+a+3U6nZADE3v5o6XOpTeyNtsABrTqbRVVFUK1P6+NTCZvimHOsxWDAx
j3zD8DpVZaLEbULSk0jXmOBk2yOc8JYYwSCh+qkvoaMrAErTZTOfVHvp2mdUUp1d
0jf7D8SGjA7YKg1sGhd/LZnSPkgTjwNDE17Qg7wNn4aGHsqzI6LUdtEEHMCwRzcQ
dcmTgSOVaXk/0bT0rg3y+eS3rQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:21 2023 by rpki-client on console-ams.rpki-client.org