Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/puQWfvuidPUkmn0EA_9DB6LbzOk.roa
File: puQWfvuidPUkmn0EA_9DB6LbzOk.roa (raw, json)
Hash identifier: UYTnz9d50YX8eY3nciiGyT9u+7N6LVYbNThiqHkCPSQ=
Subject key identifier: A6:E4:16:7E:FB:A2:74:F5:24:9A:7D:04:03:FF:43:07:A2:DB:CC:E9
Certificate issuer: /CN=a230b6ac20967aa7c078f0a4bb7266980522f1c9
Certificate serial: 35130D45
Authority key identifier: A2:30:B6:AC:20:96:7A:A7:C0:78:F0:A4:BB:72:66:98:05:22:F1:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojC2rCCWeqfAePCku3JmmAUi8ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/puQWfvuidPUkmn0EA_9DB6LbzOk.roa
Signing time: Sat 01 Jan 2022 07:03:27 +0000
ROA not before: Sat 01 Jan 2022 07:03:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199962
IP address blocks: 217.28.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890441029 (0x35130d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a230b6ac20967aa7c078f0a4bb7266980522f1c9
Validity
Not Before: Jan 1 07:03:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6e4167efba274f5249a7d0403ff4307a2dbcce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:07:ae:57:a1:d0:be:b9:a5:db:14:b1:81:
f5:15:f2:69:f2:ec:f6:f2:42:1a:87:a0:3a:e5:e8:
43:cc:c0:1a:de:71:f7:cb:de:68:23:9b:b7:c2:41:
d9:1f:2d:32:54:1d:41:db:a1:41:62:e4:3d:f2:18:
3c:0d:da:53:31:0d:4b:08:92:ee:fd:2b:72:30:17:
86:42:49:54:ae:23:3d:5a:28:4e:d0:64:af:93:56:
f2:78:b0:f1:d2:a3:1d:d9:6d:76:95:90:95:0e:01:
35:c4:34:65:46:c1:f8:ca:8d:d3:7a:16:96:15:75:
45:14:a5:47:af:bf:fd:70:f5:80:d8:7b:8c:6b:2f:
f4:d7:b6:33:f8:8e:d3:b0:59:ce:41:41:74:30:2c:
c7:9d:aa:2d:11:b0:fb:2f:d3:3e:9f:55:90:5b:bd:
99:38:d0:df:74:3a:12:64:f4:40:ce:a8:92:8c:a6:
59:57:1b:f7:50:f6:f1:43:0f:90:d5:b3:ad:21:8a:
ce:3c:d4:a7:1c:26:71:70:fe:79:6e:48:9c:bc:5a:
c0:91:36:08:7c:80:21:27:0d:67:e8:cd:64:06:fc:
60:77:cb:73:d8:88:99:59:8c:e4:a3:ce:7c:b7:b2:
32:ae:e3:70:0c:bf:7b:04:8b:d9:23:10:2b:aa:64:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:16:7E:FB:A2:74:F5:24:9A:7D:04:03:FF:43:07:A2:DB:CC:E9
X509v3 Authority Key Identifier:
keyid:A2:30:B6:AC:20:96:7A:A7:C0:78:F0:A4:BB:72:66:98:05:22:F1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojC2rCCWeqfAePCku3JmmAUi8ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/puQWfvuidPUkmn0EA_9DB6LbzOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/ojC2rCCWeqfAePCku3JmmAUi8ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1f:89:fd:9e:08:5b:82:90:73:4b:d0:c0:bc:b1:f9:96:49:
9e:88:fe:12:86:ea:0f:71:0c:e4:09:f8:8f:0e:6a:6b:fa:23:
ef:98:bf:99:73:06:f0:fd:af:3b:a6:d1:4f:6a:28:b6:aa:0c:
ba:8a:44:d6:8f:67:08:23:33:96:b4:16:7f:29:2e:7c:da:2d:
b0:20:a3:54:c7:72:6f:76:ee:6e:3f:f8:75:85:ef:38:c8:02:
22:8a:b6:69:c6:e0:d9:b7:ae:1e:09:df:2d:07:e0:e1:2a:ca:
25:14:b7:ff:45:ea:e1:03:4c:ba:19:95:1f:68:ed:5b:c0:b8:
57:97:e6:ce:26:35:53:14:fe:bf:16:c8:a3:f1:20:c8:31:c6:
14:a4:16:db:14:ac:c5:99:c2:4f:d8:73:1c:7a:e9:c2:b5:d8:
c3:19:9e:67:4e:8d:33:ce:d8:54:1e:d7:8c:26:f1:24:47:af:
a4:06:5f:2f:ea:4b:cf:fd:bf:d5:45:4e:b3:a3:4b:df:a2:89:
21:6a:0a:95:1a:67:37:d2:51:6e:4e:3f:89:14:1e:30:35:ca:
25:f8:05:f6:ca:90:ef:51:9b:55:66:19:48:ae:65:d5:d1:c5:
e6:ff:57:a7:32:1f:95:f8:40:93:ea:d7:74:7b:df:9d:09:9e:
ef:41:44:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENRMNRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MjMwYjZhYzIwOTY3YWE3YzA3OGYwYTRiYjcyNjY5ODA1MjJmMWM5MB4XDTIyMDEw
MTA3MDMyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTZlNDE2N2VmYmEy
NzRmNTI0OWE3ZDA0MDNmZjQzMDdhMmRiY2NlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALh5B65XodC+uaXbFLGB9RXyafLs9vJCGoegOuXoQ8zAGt5x
98veaCObt8JB2R8tMlQdQduhQWLkPfIYPA3aUzENSwiS7v0rcjAXhkJJVK4jPVoo
TtBkr5NW8niw8dKjHdltdpWQlQ4BNcQ0ZUbB+MqN03oWlhV1RRSlR6+//XD1gNh7
jGsv9Ne2M/iO07BZzkFBdDAsx52qLRGw+y/TPp9VkFu9mTjQ33Q6EmT0QM6okoym
WVcb91D28UMPkNWzrSGKzjzUpxwmcXD+eW5InLxawJE2CHyAIScNZ+jNZAb8YHfL
c9iImVmM5KPOfLeyMq7jcAy/ewSL2SMQK6pk4dECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSm5BZ++6J09SSafQQD/0MHotvM6TAfBgNVHSMEGDAWgBSiMLasIJZ6p8B4
8KS7cmaYBSLxyTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29qQzJyQ0NXZXFmQWVQQ2t1M0ptbUFVaThjay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvODczMTM2LTA5ZDYtNDJhYS1iNDFjLTRlYzEwMzY4NjFlNS8x
L3B1UVdmdnVpZFBVa21uMEVBXzlEQjZMYnpPay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
ODczMTM2LTA5ZDYtNDJhYS1iNDFjLTRlYzEwMzY4NjFlNS8xL29qQzJyQ0NXZXFm
QWVQQ2t1M0ptbUFVaThjay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANkcOzANBgkqhkiG9w0BAQsFAAOC
AQEAwh+J/Z4IW4KQc0vQwLyx+ZZJnoj+EobqD3EM5An4jw5qa/oj75i/mXMG8P2v
O6bRT2ootqoMuopE1o9nCCMzlrQWfykufNotsCCjVMdyb3bubj/4dYXvOMgCIoq2
acbg2beuHgnfLQfg4SrKJRS3/0Xq4QNMuhmVH2jtW8C4V5fmziY1UxT+vxbIo/Eg
yDHGFKQW2xSsxZnCT9hzHHrpwrXYwxmeZ06NM87YVB7XjCbxJEevpAZfL+pLz/2/
1UVOs6NL36KJIWoKlRpnN9JRbk4/iRQeMDXKJfgF9sqQ71GbVWYZSK5l1dHF5v9X
pzIflfhAk+rXdHvfnQme70FERA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:03 2023 by rpki-client on console-ams.rpki-client.org