Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/svT1mhPFVfpFvYCGlI_P9Wumh0o.roa
File: svT1mhPFVfpFvYCGlI_P9Wumh0o.roa (raw, json)
Hash identifier: WMfTNTqfDzRcUNzrjItorZ62gui9tNCKo/uoJ5kwP4U=
Subject key identifier: B2:F4:F5:9A:13:C5:55:FA:45:BD:80:86:94:8F:CF:F5:6B:A6:87:4A
Certificate issuer: /CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Certificate serial: 0184D16A65F193E7FE75F2834087533D9963
Authority key identifier: 28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/svT1mhPFVfpFvYCGlI_P9Wumh0o.roa
Signing time: Fri 02 Dec 2022 05:58:41 +0000
ROA not before: Fri 02 Dec 2022 05:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59456
IP address blocks: 194.99.66.0/23 maxlen: 23
45.88.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:6a:65:f1:93:e7:fe:75:f2:83:40:87:53:3d:99:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2864bb34fb5d16ca9d1fa3f9794cb48d4bed8473
Validity
Not Before: Dec 2 05:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2f4f59a13c555fa45bd8086948fcff56ba6874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:0b:3e:1d:91:6b:70:ee:17:a5:31:c3:cb:
c8:51:88:4e:9e:2a:f6:53:95:1d:f4:d0:5c:8b:c6:
a1:3d:b0:50:ab:dc:6b:a5:1f:96:46:ad:c7:94:f5:
27:de:fc:95:da:24:e4:4a:59:3b:ac:bc:d2:7b:e9:
6c:f0:13:c0:92:3b:05:71:eb:d4:d4:c4:44:a8:e5:
08:f4:21:6b:d4:61:d5:13:6c:9b:c7:52:db:4e:75:
fa:48:b8:1a:e3:82:0c:3b:b4:26:2b:cf:6e:4a:dc:
a1:60:6a:87:9f:bd:43:b3:e3:0a:8e:ba:27:b0:67:
68:8e:b3:8e:a2:62:24:06:41:c7:40:ce:3e:9e:48:
b0:8f:1a:e1:fc:c0:a7:2a:7d:ac:af:13:31:29:06:
a0:7c:85:39:05:df:30:5b:f6:7e:ba:99:2e:ac:b9:
8f:c7:5a:8d:e5:1e:19:13:66:fc:c8:81:84:f4:f3:
1f:94:9a:f8:68:b8:76:f5:66:bb:d5:72:95:e6:a9:
57:fb:cc:70:20:3c:09:ff:64:d4:24:ac:18:a1:a5:
71:c2:ef:dd:32:55:91:d0:42:26:a5:e5:64:33:9e:
28:41:de:3d:1f:ae:90:79:94:ea:cf:2e:b8:78:2f:
4b:1c:55:cd:80:bd:47:a1:f7:da:00:14:49:7c:49:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:F5:9A:13:C5:55:FA:45:BD:80:86:94:8F:CF:F5:6B:A6:87:4A
X509v3 Authority Key Identifier:
keyid:28:64:BB:34:FB:5D:16:CA:9D:1F:A3:F9:79:4C:B4:8D:4B:ED:84:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGS7NPtdFsqdH6P5eUy0jUvthHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/svT1mhPFVfpFvYCGlI_P9Wumh0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/47f445-5ea9-437d-a59a-5900a5947b8d/1/KGS7NPtdFsqdH6P5eUy0jUvthHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.128.0/22
194.99.66.0/23
Signature Algorithm: sha256WithRSAEncryption
87:b7:be:11:a4:b0:b0:31:36:37:89:c9:a6:ba:7b:c9:7a:5b:
4a:7a:c2:ea:bb:c1:70:fe:48:5d:08:fd:1d:8d:07:35:48:74:
30:e9:65:94:b7:6b:47:24:8c:b2:68:a4:8c:32:f7:ec:34:ee:
5c:7c:b6:fa:4b:bc:12:9e:2b:29:d4:13:c5:77:16:5e:29:57:
15:ee:14:37:87:0f:3a:d4:8b:82:1a:b3:4a:60:27:e4:5d:fd:
a5:cc:33:1d:bd:33:d6:35:68:da:dc:80:75:75:37:75:34:98:
9f:54:f6:ee:bf:17:e8:d8:7b:28:2b:2f:fa:7c:2a:66:49:40:
00:66:1e:e3:93:6f:f2:bc:dd:4a:9f:f9:bf:e4:43:b9:49:17:
d2:3e:9a:7b:63:9a:55:2b:4c:0c:8a:52:a2:29:8e:92:e1:29:
14:64:90:5d:6a:0c:85:99:77:34:cf:9c:83:7e:7a:37:64:2b:
3f:5e:20:de:a9:10:8b:ab:e0:37:e4:54:55:c1:0c:f6:a6:2b:
22:9a:dc:84:34:56:69:cd:a8:98:65:8b:5f:77:78:44:99:3e:
a2:39:34:39:fd:94:a9:0a:df:15:45:16:5f:3b:a3:7e:b2:72:
2c:32:9c:f5:9d:51:b9:67:8f:e5:7f:81:b0:34:76:40:db:af:
92:3e:27:9e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYTRamXxk+f+dfKDQIdTPZljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjRiYjM0ZmI1ZDE2Y2E5ZDFmYTNmOTc5NGNiNDhkNGJl
ZDg0NzMwHhcNMjIxMjAyMDU1ODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmY0ZjU5YTEzYzU1NWZhNDViZDgwODY5NDhmY2ZmNTZiYTY4NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWcLPh2Ra3DuF6Uxw8vIUYhOnir2
U5Ud9NBci8ahPbBQq9xrpR+WRq3HlPUn3vyV2iTkSlk7rLzSe+ls8BPAkjsFcevU
1MREqOUI9CFr1GHVE2ybx1LbTnX6SLga44IMO7QmK89uStyhYGqHn71Ds+MKjron
sGdojrOOomIkBkHHQM4+nkiwjxrh/MCnKn2srxMxKQagfIU5Bd8wW/Z+upkurLmP
x1qN5R4ZE2b8yIGE9PMflJr4aLh29Wa71XKV5qlX+8xwIDwJ/2TUJKwYoaVxwu/d
MlWR0EImpeVkM54oQd49H66QeZTqzy64eC9LHFXNgL1HoffaABRJfEmBBQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLL09ZoTxVX6Rb2AhpSPz/VrpodKMB8GA1UdIwQY
MBaAFChkuzT7XRbKnR+j+XlMtI1L7YRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dTN05QdGRGc3FkSDZQNWVVeTBqVXZ0aEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80N2Y0NDUtNWVhOS00MzdkLWE1OWEt
NTkwMGE1OTQ3YjhkLzEvc3ZUMW1oUEZWZnBGdllDR2xJX1A5V3VtaDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80N2Y0NDUtNWVhOS00MzdkLWE1OWEtNTkwMGE1OTQ3Yjhk
LzEvS0dTN05QdGRGc3FkSDZQNWVVeTBqVXZ0aEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLViAAwQB
wmNCMA0GCSqGSIb3DQEBCwUAA4IBAQCHt74RpLCwMTY3icmmunvJeltKesLqu8Fw
/khdCP0djQc1SHQw6WWUt2tHJIyyaKSMMvfsNO5cfLb6S7wSnisp1BPFdxZeKVcV
7hQ3hw861IuCGrNKYCfkXf2lzDMdvTPWNWja3IB1dTd1NJifVPbuvxfo2HsoKy/6
fCpmSUAAZh7jk2/yvN1Kn/m/5EO5SRfSPpp7Y5pVK0wMilKiKY6S4SkUZJBdagyF
mXc0z5yDfno3ZCs/XiDeqRCLq+A35FRVwQz2pisimtyENFZpzaiYZYtfd3hEmT6i
OTQ5/ZSpCt8VRRZfO6N+snIsMpz1nVG5Z4/lf4GwNHZA26+SPiee
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:02 2023 by rpki-client on console-ams.rpki-client.org