Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/alQHsA67JmvOQixb7wJWILAZPmM.roa
File: alQHsA67JmvOQixb7wJWILAZPmM.roa (raw, json)
Hash identifier: SBO3akHCNVb5w46A7TGyPxKwCR85/DAphRYlR8NX/DU=
Subject key identifier: 6A:54:07:B0:0E:BB:26:6B:CE:42:2C:5B:EF:02:56:20:B0:19:3E:63
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 332149F7
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/alQHsA67JmvOQixb7wJWILAZPmM.roa
Signing time: Sat 01 Jan 2022 10:59:06 +0000
ROA not before: Sat 01 Jan 2022 10:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30723
IP address blocks: 213.16.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857819639 (0x332149f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a5407b00ebb266bce422c5bef025620b0193e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:19:f0:ad:20:16:d5:04:0b:c3:12:95:a8:
e4:2c:15:59:28:4d:38:9b:22:18:46:c4:d1:37:b4:
41:41:84:1a:30:12:a9:e5:a7:95:95:69:d5:d1:ab:
62:e6:fd:d1:86:3d:38:16:19:3a:97:fb:15:7e:31:
45:e9:12:92:6d:a1:fb:7c:15:e2:fd:cf:38:f8:06:
62:8d:c4:8d:bb:10:46:23:55:0f:b5:e6:ff:35:b9:
d0:dd:d8:ff:54:6c:c7:2c:81:74:47:1d:de:ac:ba:
02:82:ce:81:03:2b:24:e9:60:1f:bf:78:5f:a4:73:
b5:bc:5e:5a:8b:1c:00:74:47:ae:c8:1c:85:f1:9d:
40:46:9f:8e:fb:47:b8:0a:99:27:d4:5c:cc:9a:b3:
f4:61:a1:11:9e:b2:d0:e6:39:a2:03:b6:22:2d:f5:
fd:bf:d3:4d:fe:ea:fe:ce:d1:22:7b:bf:4c:da:3c:
bc:24:c5:d5:69:a6:6e:9c:3b:4f:e4:c2:76:20:c9:
b2:11:d4:ca:8c:4c:ff:b5:3b:66:13:ff:ff:7d:df:
44:81:dc:b3:87:6d:11:1c:66:3a:96:20:d0:4a:c5:
f7:a0:da:3c:e5:35:d3:66:76:d0:1b:17:56:dc:59:
ca:69:22:27:cb:8d:1a:fd:8e:ac:a4:23:67:5c:e4:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:07:B0:0E:BB:26:6B:CE:42:2C:5B:EF:02:56:20:B0:19:3E:63
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/alQHsA67JmvOQixb7wJWILAZPmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.16.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1f:13:27:e1:f3:c1:82:42:df:a4:f1:d1:c9:4b:9a:10:d9:
08:41:c0:46:7a:c5:2f:45:4f:0d:09:fb:23:e6:53:2d:d6:06:
57:c9:c7:de:30:e9:1b:1b:10:8a:d2:7e:25:f8:d7:ef:97:ab:
73:05:89:d7:3d:19:b8:e3:3b:ad:b5:e0:14:9c:5f:b8:3b:91:
a1:b2:38:fb:e8:49:ab:37:6e:ad:30:ba:c1:eb:21:a1:f2:d6:
e5:79:11:39:4e:a2:f9:88:92:ec:ea:d2:91:2b:69:af:9f:7c:
ef:99:67:dc:0b:5c:3f:0a:df:d1:10:84:a3:57:2f:26:74:9f:
28:73:98:5e:4a:f3:1a:fc:b8:3c:b2:9d:f1:48:c7:3b:d0:25:
4c:a4:65:e0:fb:c4:d4:09:45:44:41:b6:03:28:6f:0a:63:6f:
fb:60:68:d3:43:90:b7:f2:19:13:ee:2f:9d:5a:5d:fd:9e:a7:
c7:e8:c3:cd:b7:dc:ed:ce:1f:3f:53:30:30:5a:13:91:1e:d2:
d2:9b:35:fa:f0:a8:c5:95:a7:65:cc:91:fe:23:98:81:eb:d2:
9d:81:53:03:aa:59:88:71:18:81:02:cc:76:c8:c5:6b:ef:b9:
0b:4e:4f:30:bb:a5:67:66:f2:5b:a0:93:a1:38:f1:7a:b8:1d:
ef:ca:10:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMyFJ9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZmIwOTdhMzZjMjMyNWQxMDMxZmY0MDkxYmEwMGE4NjQ1OWQ0Mjg4MB4XDTIyMDEw
MTEwNTkwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE1NDA3YjAwZWJi
MjY2YmNlNDIyYzViZWYwMjU2MjBiMDE5M2U2MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANo1GfCtIBbVBAvDEpWo5CwVWShNOJsiGEbE0Te0QUGEGjAS
qeWnlZVp1dGrYub90YY9OBYZOpf7FX4xRekSkm2h+3wV4v3POPgGYo3EjbsQRiNV
D7Xm/zW50N3Y/1RsxyyBdEcd3qy6AoLOgQMrJOlgH794X6RztbxeWoscAHRHrsgc
hfGdQEafjvtHuAqZJ9RczJqz9GGhEZ6y0OY5ogO2Ii31/b/TTf7q/s7RInu/TNo8
vCTF1Wmmbpw7T+TCdiDJshHUyoxM/7U7ZhP//33fRIHcs4dtERxmOpYg0ErF96Da
POU102Z20BsXVtxZymkiJ8uNGv2OrKQjZ1zkzRECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqVAewDrsma85CLFvvAlYgsBk+YzAfBgNVHSMEGDAWgBS/sJejbCMl0QMf
9AkboAqGRZ1CiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y3Q1hvMndqSmRFREhfUUpHNkFLaGtXZFFvZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8x
L2FsUUhzQTY3Sm12T1FpeGI3d0pXSUxBWlBtTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
ZjJjNWU4LThkMzctNDgzOC1hMzNiLWVjYzQ5YmRjMmFkOC8xL3Y3Q1hvMndqSmRF
REhfUUpHNkFLaGtXZFFvZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANUQaDANBgkqhkiG9w0BAQsFAAOC
AQEAHR8TJ+HzwYJC36Tx0clLmhDZCEHARnrFL0VPDQn7I+ZTLdYGV8nH3jDpGxsQ
itJ+JfjX75ercwWJ1z0ZuOM7rbXgFJxfuDuRobI4++hJqzdurTC6weshofLW5XkR
OU6i+YiS7OrSkStpr59875ln3AtcPwrf0RCEo1cvJnSfKHOYXkrzGvy4PLKd8UjH
O9AlTKRl4PvE1AlFREG2AyhvCmNv+2Bo00OQt/IZE+4vnVpd/Z6nx+jDzbfc7c4f
P1MwMFoTkR7S0ps1+vCoxZWnZcyR/iOYgevSnYFTA6pZiHEYgQLMdsjFa++5C05P
MLulZ2byW6CToTjxergd78oQQw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:21 2023 by rpki-client on console-ams.rpki-client.org