Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/D1vc4c8r5vOMYr2Eeu2SgzDUohM.roa
File: D1vc4c8r5vOMYr2Eeu2SgzDUohM.roa (raw, json)
Hash identifier: JXVlNRzfesO2QsU1iKjD+jxbUQk73yD8tsAsTxFSDt4=
Subject key identifier: 0F:5B:DC:E1:CF:2B:E6:F3:8C:62:BD:84:7A:ED:92:83:30:D4:A2:13
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0F98564D
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/D1vc4c8r5vOMYr2Eeu2SgzDUohM.roa
Signing time: Sat 01 Jan 2022 00:51:03 +0000
ROA not before: Sat 01 Jan 2022 00:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12761
IP address blocks: 217.111.164.0/24 maxlen: 24
217.111.166.0/24 maxlen: 24
217.111.165.0/24 maxlen: 24
217.111.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261641805 (0xf98564d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 00:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f5bdce1cf2be6f38c62bd847aed928330d4a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:77:e4:b1:68:89:31:4b:3f:57:31:09:18:
30:63:81:32:72:77:a7:5a:38:d2:e9:25:9d:dd:54:
c6:67:43:5a:50:b5:21:a7:39:04:e0:98:bb:66:93:
56:5a:43:99:58:61:2a:78:71:7f:b4:78:57:d7:6a:
93:9a:ba:12:61:24:2b:81:58:b5:24:be:65:db:7c:
6c:92:17:d2:ae:d5:9e:1f:7a:a4:07:26:fb:41:61:
e9:b4:d3:7c:60:78:d0:76:79:11:e3:79:6c:45:99:
6c:01:f2:66:51:3b:b6:96:63:18:ba:32:ff:53:8c:
ad:3b:63:37:69:d9:8a:5c:43:eb:2f:2a:f9:a4:76:
f0:86:40:e4:bc:b9:48:3b:9f:19:fb:92:35:68:9d:
60:ab:8b:21:26:42:49:90:fd:9a:71:b5:bc:7d:1d:
20:50:a7:d2:e2:87:4b:3d:91:58:6f:93:6d:60:16:
27:91:24:12:ec:8a:49:2f:31:f1:28:59:6c:5c:e2:
19:5c:fc:93:e2:2e:74:5a:ad:91:0e:eb:4e:22:47:
6a:02:2b:13:59:2d:23:f2:30:90:6c:48:40:5c:e8:
87:5a:6d:60:83:a3:35:b3:52:2b:9b:87:75:28:06:
aa:b1:d7:93:8d:95:ba:6d:0e:51:ca:34:ff:6f:56:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:DC:E1:CF:2B:E6:F3:8C:62:BD:84:7A:ED:92:83:30:D4:A2:13
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/D1vc4c8r5vOMYr2Eeu2SgzDUohM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.111.164.0/22
Signature Algorithm: sha256WithRSAEncryption
86:49:39:cc:69:43:d3:e4:32:e0:92:3c:2e:5a:f2:5f:f7:99:
e6:0e:91:e7:1d:fb:fa:5b:97:f6:12:10:5e:1b:1e:7f:3e:00:
24:01:2d:60:b3:44:59:d1:83:88:f3:04:f8:9d:75:24:1e:1b:
b7:e1:d5:af:3a:72:a1:87:76:f9:a1:b6:e8:88:90:fb:02:da:
f7:28:08:03:c8:aa:f6:28:54:99:98:04:3b:02:9a:b4:2d:4f:
34:c9:d5:ec:e1:e8:db:9a:a5:28:79:fc:35:42:96:9e:d6:0e:
42:c7:03:f7:50:88:47:e5:ad:37:b8:36:e6:36:3e:13:ef:17:
f1:94:33:ed:14:ad:68:99:aa:4a:ad:dd:2f:e0:fb:46:e4:9f:
2f:71:ba:ae:be:04:f6:bf:05:cd:c5:be:8d:12:98:04:e1:5d:
b3:d2:2d:7d:9f:49:81:82:52:4a:49:28:d1:e0:d9:51:5a:a5:
73:54:01:12:2e:66:f5:81:31:60:06:f4:db:d8:0c:46:57:43:
e6:d3:1b:5f:c0:5b:e6:09:76:cf:e4:85:b0:28:63:e6:08:62:
57:5c:6e:ba:38:7f:cd:6e:c7:ad:06:89:61:0b:9b:da:53:19:
08:39:52:69:f1:a6:57:35:25:9b:01:81:a8:fa:9f:cb:c8:e6:
87:22:18:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIED5hWTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
Y2Y4ZmZjMDg4NTkxZTRmMjQzYmFhZmEyMWI0Mjk4YmZiMzY2MDI2MB4XDTIyMDEw
MTAwNTEwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGY1YmRjZTFjZjJi
ZTZmMzhjNjJiZDg0N2FlZDkyODMzMGQ0YTIxMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8rd+SxaIkxSz9XMQkYMGOBMnJ3p1o40uklnd1UxmdDWlC1
Iac5BOCYu2aTVlpDmVhhKnhxf7R4V9dqk5q6EmEkK4FYtSS+Zdt8bJIX0q7Vnh96
pAcm+0Fh6bTTfGB40HZ5EeN5bEWZbAHyZlE7tpZjGLoy/1OMrTtjN2nZilxD6y8q
+aR28IZA5Ly5SDufGfuSNWidYKuLISZCSZD9mnG1vH0dIFCn0uKHSz2RWG+TbWAW
J5EkEuyKSS8x8ShZbFziGVz8k+IudFqtkQ7rTiJHagIrE1ktI/IwkGxIQFzoh1pt
YIOjNbNSK5uHdSgGqrHXk42Vum0OUco0/29WL7MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQPW9zhzyvm84xivYR67ZKDMNSiEzAfBgNVHSMEGDAWgBRM+P/AiFkeTyQ7
qvohtCmL+zZgJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RQal93SWhaSGs4a082cjZJYlFwaV9zMllDWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvYTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8x
L0QxdmM0YzhyNXZPTVlyMkVldTJTZ3pEVW9oTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
YTBhMzljLWJlMDMtNDdiYi1iZGIzLWIzYjc4YjBiNjZlYS8xL1RQal93SWhaSGs4
a082cjZJYlFwaV9zMllDWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtlvpDANBgkqhkiG9w0BAQsFAAOC
AQEAhkk5zGlD0+Qy4JI8LlryX/eZ5g6R5x37+luX9hIQXhsefz4AJAEtYLNEWdGD
iPME+J11JB4bt+HVrzpyoYd2+aG26IiQ+wLa9ygIA8iq9ihUmZgEOwKatC1PNMnV
7OHo25qlKHn8NUKWntYOQscD91CIR+WtN7g25jY+E+8X8ZQz7RStaJmqSq3dL+D7
RuSfL3G6rr4E9r8FzcW+jRKYBOFds9ItfZ9JgYJSSkko0eDZUVqlc1QBEi5m9YEx
YAb029gMRldD5tMbX8Bb5gl2z+SFsChj5ghiV1xuujh/zW7HrQaJYQub2lMZCDlS
afGmVzUlmwGBqPqfy8jmhyIYxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org