Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/E9pSry-ktDuV4sfY6osDrMq9U_g.roa
File: E9pSry-ktDuV4sfY6osDrMq9U_g.roa (raw, json)
Hash identifier: 2VjYh0sMUPghrrnj1KLDMUR5yh1F8XcCNLsJa6aBC8w=
Subject key identifier: 13:DA:52:AF:2F:A4:B4:3B:95:E2:C7:D8:EA:8B:03:AC:CA:BD:53:F8
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 06794317
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/E9pSry-ktDuV4sfY6osDrMq9U_g.roa
Signing time: Sat 01 Jan 2022 07:00:51 +0000
ROA not before: Sat 01 Jan 2022 07:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.128.0/22 maxlen: 24
188.209.132.0/22 maxlen: 24
185.83.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108610327 (0x6794317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 07:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13da52af2fa4b43b95e2c7d8ea8b03accabd53f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:ef:93:9b:81:0a:1d:8d:c1:4f:3f:8a:f8:
73:66:13:ee:ed:d0:b9:38:ed:a8:29:0b:99:5f:4c:
be:03:75:31:cd:c1:89:d5:eb:08:15:02:46:1f:92:
18:b7:a5:04:be:1a:b1:1e:17:7d:84:ff:0a:bd:76:
a6:87:a4:74:8f:fd:cd:dd:26:19:b8:82:c3:e3:5e:
c4:7b:ad:7d:c9:67:8b:fa:23:ab:8b:3e:81:73:13:
4e:6a:7a:cb:40:bd:3f:2e:fa:fc:e1:e1:8e:b2:c5:
d3:ed:d9:89:7c:87:19:9e:e6:aa:a7:a0:17:a0:18:
5c:b0:24:71:75:a8:be:75:8f:ff:14:d9:63:40:bf:
a9:41:ca:1e:07:23:8e:c5:90:0c:f8:45:13:2d:d3:
a1:53:79:fc:1b:85:23:78:2b:d5:5a:5c:c6:4a:46:
b8:a4:91:53:7e:1e:22:93:4c:3c:0a:00:32:62:db:
2a:5b:d9:bb:69:f4:23:88:f7:9f:aa:77:c8:f4:96:
6b:78:8a:c1:55:96:3b:2d:58:b9:12:50:cd:2f:41:
11:16:93:83:81:80:1d:f9:34:5e:5e:68:db:e2:bd:
e7:b5:85:9f:34:fd:b9:8b:2d:09:cd:30:d5:54:46:
9b:a9:73:41:45:91:57:9e:3f:81:f9:9f:75:b5:96:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:52:AF:2F:A4:B4:3B:95:E2:C7:D8:EA:8B:03:AC:CA:BD:53:F8
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/E9pSry-ktDuV4sfY6osDrMq9U_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/22
188.209.128.0/21
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
91:f5:88:38:30:07:a6:89:3f:ba:ac:fb:4e:9a:20:dd:51:db:
fd:1b:6c:3f:55:99:47:dd:5b:5f:d8:dc:ef:c7:ba:60:46:8f:
19:ca:07:7a:4b:ac:6a:61:83:db:3d:b8:36:e1:19:13:a7:fe:
be:0c:2e:68:4b:06:7f:68:ed:04:9b:ca:fb:9f:60:28:eb:0b:
1c:9c:e3:c4:56:82:a4:31:f9:a5:dc:e0:75:4e:93:e5:a4:3b:
8a:1b:66:f1:ae:8a:71:3d:b8:f4:6f:77:e8:7d:06:6c:28:57:
6f:0d:3f:1a:ed:d3:63:44:3e:f0:15:de:c2:05:64:19:91:2c:
af:85:e2:20:ae:54:63:36:31:10:80:74:42:e4:13:07:13:a8:
22:1d:fe:b4:10:07:0f:82:39:15:e0:00:f5:7d:3e:6b:bc:dc:
4b:b9:01:fc:75:db:2e:c8:93:4f:72:f5:29:16:3a:9a:76:35:
10:1d:38:87:2f:d6:d5:19:9a:0a:84:c0:88:53:4e:7e:ba:f7:
e9:86:d5:a5:93:ee:e6:c5:3e:9b:96:43:31:3a:d0:d7:41:e3:
11:aa:7e:03:f7:8b:1c:b1:56:e0:92:e3:7a:83:9e:5a:28:d2:
59:cc:0a:8a:c2:ca:ce:3d:a9:97:7e:e2:7f:46:72:94:1b:41:
bd:e5:c0:d0
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBnlDFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTNkYTIwMTk5MDlkOWZjMzc4MjlmZDllYzI5ZDk0OGVjZmY3YzkyMB4XDTIyMDEw
MTA3MDA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTNkYTUyYWYyZmE0
YjQzYjk1ZTJjN2Q4ZWE4YjAzYWNjYWJkNTNmODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKIS75ObgQodjcFPP4r4c2YT7u3QuTjtqCkLmV9MvgN1Mc3B
idXrCBUCRh+SGLelBL4asR4XfYT/Cr12poekdI/9zd0mGbiCw+NexHutfclni/oj
q4s+gXMTTmp6y0C9Py76/OHhjrLF0+3ZiXyHGZ7mqqegF6AYXLAkcXWovnWP/xTZ
Y0C/qUHKHgcjjsWQDPhFEy3ToVN5/BuFI3gr1VpcxkpGuKSRU34eIpNMPAoAMmLb
KlvZu2n0I4j3n6p3yPSWa3iKwVWWOy1YuRJQzS9BERaTg4GAHfk0Xl5o2+K957WF
nzT9uYstCc0w1VRGm6lzQUWRV54/gfmfdbWW09cCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQT2lKvL6S0O5Xix9jqiwOsyr1T+DAfBgNVHSMEGDAWgBTZPaIBmQnZ/DeC
n9nsKdlI7P98kjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJUMmlBWmtKMmZ3M2dwX1o3Q25aU096X2ZKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvNDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8x
L0U5cFNyeS1rdER1VjRzZlk2b3NEck1xOVVfZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
NDdhZmEzLWNlMzEtNDA2MC1hMDc4LWY1YWRkZGRmMWVjNS8xLzJUMmlBWmtKMmZ3
M2dwX1o3Q25aU096X2ZKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEArlTyAMEA7zRgAMEAsIPYDANBgkq
hkiG9w0BAQsFAAOCAQEAkfWIODAHpok/uqz7Tpog3VHb/RtsP1WZR91bX9jc78e6
YEaPGcoHekusamGD2z24NuEZE6f+vgwuaEsGf2jtBJvK+59gKOsLHJzjxFaCpDH5
pdzgdU6T5aQ7ihtm8a6KcT249G936H0GbChXbw0/Gu3TY0Q+8BXewgVkGZEsr4Xi
IK5UYzYxEIB0QuQTBxOoIh3+tBAHD4I5FeAA9X0+a7zcS7kB/HXbLsiTT3L1KRY6
mnY1EB04hy/W1RmaCoTAiFNOfrr36YbVpZPu5sU+m5ZDMTrQ10HjEap+A/eLHLFW
4JLjeoOeWijSWcwKisLKzj2pl37if0ZylBtBveXA0A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org