Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rbtiVKCSh2DhoLQzgknjdacfuPY.roa
File: rbtiVKCSh2DhoLQzgknjdacfuPY.roa (raw, json)
Hash identifier: wsRgXjsgNIhBL3bnR9cXWP5BOQMkXwVekjWC9wMSAPI=
Subject key identifier: AD:BB:62:54:A0:92:87:60:E1:A0:B4:33:82:49:E3:75:A7:1F:B8:F6
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0182B6CE16B91EC1A0228E9C8BE3546CDDD8
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rbtiVKCSh2DhoLQzgknjdacfuPY.roa
Signing time: Fri 19 Aug 2022 15:52:15 +0000
ROA not before: Fri 19 Aug 2022 15:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:ce:16:b9:1e:c1:a0:22:8e:9c:8b:e3:54:6c:dd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 19 15:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adbb6254a0928760e1a0b4338249e375a71fb8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:fa:df:fc:1c:d9:f4:78:ac:4f:30:81:d4:
45:e6:a7:d9:c4:d3:9c:e6:d3:b4:3b:06:44:88:f9:
30:47:6d:c1:26:99:ae:77:b2:b3:47:0a:2c:cd:43:
4f:d6:d1:9e:73:02:df:0f:b5:d1:61:6e:71:57:83:
28:22:a6:41:7b:12:1a:80:d5:1c:53:73:4c:db:dc:
a6:b3:87:4e:c3:22:1e:3b:d3:47:f7:9b:ee:34:5b:
88:f3:8a:69:6d:34:8c:49:ae:a5:bc:a3:9b:5f:47:
e3:51:c1:5f:07:1a:6a:be:19:a9:42:ea:12:16:31:
b6:16:1e:58:08:ce:d1:5c:96:53:58:11:c4:6a:18:
c5:fc:55:36:9c:79:5a:da:11:9e:b3:eb:c4:50:29:
2b:7d:60:e3:a2:e6:60:ee:18:0f:02:04:51:96:eb:
82:74:cd:5e:57:7f:af:f6:90:77:01:0b:a0:82:e0:
8d:7d:d3:11:33:3d:dd:a7:33:7a:f5:be:1e:c2:87:
41:e6:e8:01:ca:1e:eb:ae:cc:cd:5f:23:06:ad:73:
62:e9:e2:74:84:20:ad:59:4e:cb:73:a0:3a:a1:55:
ab:c2:19:a6:d0:51:31:84:2f:b6:de:98:88:35:72:
bd:54:ce:e7:98:4f:23:b1:b4:82:d3:25:4d:04:1b:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:62:54:A0:92:87:60:E1:A0:B4:33:82:49:E3:75:A7:1F:B8:F6
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rbtiVKCSh2DhoLQzgknjdacfuPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/20
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:5f:da:a1:c2:69:97:49:00:40:d1:13:39:57:ff:ab:25:63:
ad:20:c5:cf:21:ed:9a:36:aa:69:81:32:b3:e8:b2:c1:d5:0e:
7b:32:45:fa:1b:41:df:14:92:92:cc:a2:83:6c:44:99:f4:23:
e6:22:13:84:a3:f3:b4:20:31:29:9b:19:4b:34:e0:53:ee:4b:
21:b4:99:ea:da:ff:e3:b6:22:50:af:33:7b:7c:a6:5a:33:5c:
0e:4d:73:17:21:37:74:95:a7:70:f7:4f:01:26:69:eb:9a:42:
6a:22:38:a8:66:13:c3:ce:91:1d:f4:68:53:55:cc:54:ba:e9:
6a:a3:b1:ce:4a:bb:69:e5:ac:59:a7:97:38:ec:bb:b9:06:c1:
a2:61:b9:51:a2:87:42:04:68:69:bd:b8:28:d1:bb:1d:8e:42:
4c:3e:f2:33:55:e8:47:28:67:60:8f:f7:6c:d2:18:35:34:14:
dc:eb:be:ba:8d:b2:b5:70:a4:1a:e6:eb:4d:ae:fc:dd:1f:c6:
81:54:0b:fa:ea:b1:b4:1d:07:a3:64:76:74:33:b6:3c:0f:39:
12:33:25:f7:88:7e:fa:fe:14:c3:ad:bb:55:ed:ad:02:f4:04:
23:4b:b9:4c:0e:3a:e5:d2:2e:a8:3b:d0:97:18:ee:98:54:a5:
77:7f:03:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYK2zha5HsGgIo6ci+NUbN3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjIwODE5MTU1MjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGJiNjI1NGEwOTI4NzYwZTFhMGI0MzM4MjQ5ZTM3NWE3MWZiOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPT63/wc2fR4rE8wgdRF5qfZxNOc
5tO0OwZEiPkwR23BJpmud7KzRwoszUNP1tGecwLfD7XRYW5xV4MoIqZBexIagNUc
U3NM29yms4dOwyIeO9NH95vuNFuI84ppbTSMSa6lvKObX0fjUcFfBxpqvhmpQuoS
FjG2Fh5YCM7RXJZTWBHEahjF/FU2nHla2hGes+vEUCkrfWDjouZg7hgPAgRRluuC
dM1eV3+v9pB3AQugguCNfdMRMz3dpzN69b4ewodB5ugByh7rrszNXyMGrXNi6eJ0
hCCtWU7Lc6A6oVWrwhmm0FExhC+23piINXK9VM7nmE8jsbSC0yVNBBsv2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK27YlSgkodg4aC0M4JJ43WnH7j2MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvcmJ0aVZLQ1NoMkRob0xRemdrbmpkYWNmdVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEvNGAAwQC
wg9gMA0GCSqGSIb3DQEBCwUAA4IBAQAfX9qhwmmXSQBA0RM5V/+rJWOtIMXPIe2a
NqppgTKz6LLB1Q57MkX6G0HfFJKSzKKDbESZ9CPmIhOEo/O0IDEpmxlLNOBT7ksh
tJnq2v/jtiJQrzN7fKZaM1wOTXMXITd0ladw908BJmnrmkJqIjioZhPDzpEd9GhT
VcxUuulqo7HOSrtp5axZp5c47Lu5BsGiYblRoodCBGhpvbgo0bsdjkJMPvIzVehH
KGdgj/ds0hg1NBTc6766jbK1cKQa5utNrvzdH8aBVAv66rG0HQejZHZ0M7Y8DzkS
MyX3iH76/hTDrbtV7a0C9AQjS7lMDjrl0i6oO9CXGO6YVKV3fwMH
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org