Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L2f0ivsdXxQMKws8o4Olm5pRikI.roa
File: L2f0ivsdXxQMKws8o4Olm5pRikI.roa (raw, json)
Hash identifier: TyT9MItA5eaHSDW9eBh6a4HZaEuIF4KSSI9fz8Ov0kQ=
Subject key identifier: 2F:67:F4:8A:FB:1D:5F:14:0C:2B:0B:3C:A3:83:A5:9B:9A:51:8A:42
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018432744316A598E89BACA953578C62904D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L2f0ivsdXxQMKws8o4Olm5pRikI.roa
Signing time: Tue 01 Nov 2022 09:09:50 +0000
ROA not before: Tue 01 Nov 2022 09:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202960
IP address blocks: 185.147.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:74:43:16:a5:98:e8:9b:ac:a9:53:57:8c:62:90:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Nov 1 09:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f67f48afb1d5f140c2b0b3ca383a59b9a518a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2d:3c:15:7d:bb:e5:f3:96:c5:bb:c3:a0:9f:
3f:bb:67:6d:6f:18:59:e7:1b:85:f9:a5:76:8f:28:
97:cf:c7:33:bf:64:a6:60:bc:40:54:cb:74:31:5a:
33:94:9f:28:ad:cc:9c:61:88:e4:9f:26:46:ef:d0:
c6:57:5c:06:26:4e:ca:cb:c5:d9:14:6a:1b:36:d3:
3c:30:81:f9:58:08:57:ce:c3:75:bd:cd:ed:90:7b:
08:5c:42:5f:4e:bf:39:a7:92:b9:06:e0:50:f2:10:
7e:20:a8:5b:fd:d2:2f:f0:22:0e:b0:7a:33:be:53:
6c:95:73:d5:c2:bf:cd:e8:5b:25:8b:8b:50:2b:c4:
09:01:4e:5e:1e:42:96:ae:ac:33:24:26:2c:32:10:
c7:80:d6:32:d9:5b:d8:57:ab:e6:0c:b7:91:dd:ef:
33:53:30:c4:c9:ae:4d:49:06:a4:01:7f:ae:24:47:
9f:57:0b:1a:67:a9:f0:95:a6:c4:2e:2c:19:05:26:
58:b1:29:5e:30:85:26:92:b4:db:d5:3b:54:be:6c:
4e:e7:4c:66:09:90:0f:ac:af:82:29:a8:c4:0a:69:
b6:d1:5f:45:5f:3f:0a:ed:8a:bd:c8:44:be:4b:20:
1a:bd:55:1a:e3:3b:de:2f:88:a9:e4:30:81:5f:ce:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:F4:8A:FB:1D:5F:14:0C:2B:0B:3C:A3:83:A5:9B:9A:51:8A:42
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/L2f0ivsdXxQMKws8o4Olm5pRikI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.48.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b3:93:7f:4f:ae:fe:b4:53:2a:1b:47:b1:4b:4f:69:23:22:
c5:4b:88:fc:a5:42:06:17:c9:94:ab:48:55:a8:4b:c6:ff:ad:
e8:2d:d5:d8:7d:90:2e:75:97:26:58:07:6f:09:a8:7b:4a:2c:
3a:31:5a:49:37:58:03:64:6e:c6:e5:08:47:0a:d3:2f:c3:43:
b2:22:42:3b:a2:ab:c8:d5:26:a2:95:e2:2a:6c:42:38:c7:bb:
2c:74:69:4e:89:cf:b0:4f:9c:f4:f0:f5:ee:94:e0:22:8c:d6:
bc:70:ae:10:c5:85:be:15:0c:96:99:8c:3a:6c:8c:62:d5:72:
88:3d:e5:f2:f2:51:fd:38:2c:d9:1f:1f:dd:88:b4:2d:a7:3f:
57:0e:af:0e:b7:bc:d1:48:9c:b8:15:3c:f5:c1:1f:90:b6:46:
fb:e8:c8:a3:6a:4f:7a:2d:68:9c:b1:31:c2:c3:6b:22:ea:8a:
2a:b9:ec:8f:aa:60:b5:27:77:b0:75:71:be:cf:58:37:df:e3:
42:7b:92:97:ca:dd:87:21:04:ec:b2:60:82:b2:10:e1:c0:2f:
13:6a:5e:55:d9:95:96:19:64:b0:4e:a9:77:42:62:1c:27:f2:
a5:5f:f4:79:ba:9f:c2:9d:bf:64:93:e2:df:3d:e5:da:7a:ea:
5e:8a:bf:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQydEMWpZjom6ypU1eMYpBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjIxMTAxMDkwOTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjY3ZjQ4YWZiMWQ1ZjE0MGMyYjBiM2NhMzgzYTU5YjlhNTE4YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC08FX275fOWxbvDoJ8/u2dtbxhZ
5xuF+aV2jyiXz8czv2SmYLxAVMt0MVozlJ8orcycYYjknyZG79DGV1wGJk7Ky8XZ
FGobNtM8MIH5WAhXzsN1vc3tkHsIXEJfTr85p5K5BuBQ8hB+IKhb/dIv8CIOsHoz
vlNslXPVwr/N6Fsli4tQK8QJAU5eHkKWrqwzJCYsMhDHgNYy2VvYV6vmDLeR3e8z
UzDEya5NSQakAX+uJEefVwsaZ6nwlabELiwZBSZYsSleMIUmkrTb1TtUvmxO50xm
CZAPrK+CKajECmm20V9FXz8K7Yq9yES+SyAavVUa4zveL4ip5DCBX87P/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9n9Ir7HV8UDCsLPKODpZuaUYpCMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvTDJmMGl2c2RYeFFNS3dzOG80T2xtNXBSaWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZMwMA0G
CSqGSIb3DQEBCwUAA4IBAQABs5N/T67+tFMqG0exS09pIyLFS4j8pUIGF8mUq0hV
qEvG/63oLdXYfZAudZcmWAdvCah7Siw6MVpJN1gDZG7G5QhHCtMvw0OyIkI7oqvI
1SaileIqbEI4x7ssdGlOic+wT5z08PXulOAijNa8cK4QxYW+FQyWmYw6bIxi1XKI
PeXy8lH9OCzZHx/diLQtpz9XDq8Ot7zRSJy4FTz1wR+Qtkb76Mijak96LWicsTHC
w2si6ooqueyPqmC1J3ewdXG+z1g33+NCe5KXyt2HIQTssmCCshDhwC8Tal5V2ZWW
GWSwTql3QmIcJ/KlX/R5up/Cnb9kk+LfPeXaeupeir9J
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org