Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/oB7MAwmQaAI-sAnQIdR93hzBLn4.roa
File: oB7MAwmQaAI-sAnQIdR93hzBLn4.roa (raw, json)
Hash identifier: jVDYYeT+n4FTipHID9bKWnXIftW4l+ppSeUuoDm0Z1Y=
Subject key identifier: A0:1E:CC:03:09:90:68:02:3E:B0:09:D0:21:D4:7D:DE:1C:C1:2E:7E
Certificate issuer: /CN=f2d9b9df707d4ee553bbfe07e350e4a83fb9895e
Certificate serial: C8BC9D
Authority key identifier: F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tm533B9TuVTu_4H41DkqD-5iV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/oB7MAwmQaAI-sAnQIdR93hzBLn4.roa
Signing time: Sat 01 Jan 2022 07:59:19 +0000
ROA not before: Sat 01 Jan 2022 07:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 213.109.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13155485 (0xc8bc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d9b9df707d4ee553bbfe07e350e4a83fb9895e
Validity
Not Before: Jan 1 07:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a01ecc03099068023eb009d021d47dde1cc12e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:e3:7b:3d:83:23:2f:a7:e3:62:20:9c:2b:
42:4f:e1:2b:63:35:f4:bb:90:0c:40:f4:ba:f6:ae:
19:1b:fc:db:5f:ed:19:4a:5b:e1:51:19:b4:90:39:
31:d3:4c:7c:95:5f:cb:c3:91:f5:2e:63:fe:7f:cd:
66:b1:fc:82:ed:a4:dc:8b:ec:c4:d2:e3:9d:6b:ed:
b0:6b:49:7e:eb:c4:c7:41:37:d8:f6:cd:61:d4:b9:
d4:9d:90:71:53:59:e5:0f:d6:db:e4:3f:fc:bd:92:
10:5d:cc:d3:10:8f:89:1a:4f:d7:5b:74:30:fa:b6:
46:8a:ac:72:b1:89:52:6c:08:af:52:45:60:e3:21:
a5:4d:4b:e0:6c:f5:f1:5a:42:52:03:37:ce:09:7d:
88:2a:f8:e9:b3:0a:b8:2b:b6:39:aa:50:99:f9:be:
6d:c5:39:1c:78:80:03:7a:2e:0d:68:85:13:72:39:
07:3c:3c:09:2c:67:99:80:4f:a0:b3:3d:08:c9:12:
39:59:f3:13:a5:a3:f5:66:9b:2b:2a:ac:83:a2:b8:
03:a0:88:c3:f7:b0:e0:10:91:1d:0a:dc:df:32:ed:
32:4e:c0:c8:aa:72:69:ca:35:30:c2:62:23:76:76:
89:ea:e3:a0:fb:51:ce:0c:de:86:44:da:0f:65:ef:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1E:CC:03:09:90:68:02:3E:B0:09:D0:21:D4:7D:DE:1C:C1:2E:7E
X509v3 Authority Key Identifier:
keyid:F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tm533B9TuVTu_4H41DkqD-5iV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/oB7MAwmQaAI-sAnQIdR93hzBLn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/8tm533B9TuVTu_4H41DkqD-5iV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.148.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0e:0d:bb:a6:51:2e:54:56:ef:3c:fe:be:d7:9d:63:be:e2:
c3:00:bd:8f:84:e0:66:4e:b4:5f:a3:57:9d:03:a5:96:fd:53:
aa:5a:32:59:11:d5:ed:99:af:d2:66:17:ec:11:d9:1d:e0:00:
73:a2:38:4d:08:36:7f:26:78:a2:3d:c1:04:09:0d:27:eb:ca:
94:c1:b7:64:79:77:5d:74:f3:67:be:ef:15:08:85:c8:d2:ae:
36:e7:e7:6c:8e:56:80:f7:1f:ac:6e:31:f9:23:ab:26:fa:a4:
95:0d:24:51:6f:c0:2a:11:ed:4b:d2:9b:da:e5:36:c1:2f:f2:
b4:5a:1c:90:61:ca:3a:b2:81:eb:a6:d0:52:06:6f:14:fb:e2:
2e:4f:83:8b:20:e5:fb:5e:3e:26:1d:54:c0:93:a4:04:7c:16:
09:e5:a7:86:02:da:fe:f1:2f:8d:a6:58:b4:ca:a8:ee:d6:0b:
27:8f:39:81:82:75:e1:f3:bb:d8:d2:94:5a:2b:9c:96:55:04:
3b:a0:7f:ca:54:70:80:3e:2b:1f:6d:be:9f:e1:ed:58:ea:a9:
6f:f3:ba:10:90:83:1f:fb:d3:84:a4:59:dd:62:8b:07:c9:f2:
1d:43:22:4d:4c:83:17:cf:9f:64:de:7d:fe:64:6f:44:1d:45:
9a:34:43:43
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMi8nTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MmQ5YjlkZjcwN2Q0ZWU1NTNiYmZlMDdlMzUwZTRhODNmYjk4OTVlMB4XDTIyMDEw
MTA3NTkxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTAxZWNjMDMwOTkw
NjgwMjNlYjAwOWQwMjFkNDdkZGUxY2MxMmU3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxP43s9gyMvp+NiIJwrQk/hK2M19LuQDED0uvauGRv821/t
GUpb4VEZtJA5MdNMfJVfy8OR9S5j/n/NZrH8gu2k3IvsxNLjnWvtsGtJfuvEx0E3
2PbNYdS51J2QcVNZ5Q/W2+Q//L2SEF3M0xCPiRpP11t0MPq2RoqscrGJUmwIr1JF
YOMhpU1L4Gz18VpCUgM3zgl9iCr46bMKuCu2OapQmfm+bcU5HHiAA3ouDWiFE3I5
Bzw8CSxnmYBPoLM9CMkSOVnzE6Wj9WabKyqsg6K4A6CIw/ew4BCRHQrc3zLtMk7A
yKpyaco1MMJiI3Z2ierjoPtRzgzehkTaD2XvgXMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSgHswDCZBoAj6wCdAh1H3eHMEufjAfBgNVHSMEGDAWgBTy2bnfcH1O5VO7
/gfjUOSoP7mJXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzh0bTUzM0I5VHVWVHVfNEg0MURrcUQtNWlWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzkvMGNjNWRlLWZjMDQtNDAxNy05YmMwLTRjNDVkOWYxZWFhMC8x
L29CN01Bd21RYUFJLXNBblFJZFI5M2h6QkxuNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkv
MGNjNWRlLWZjMDQtNDAxNy05YmMwLTRjNDVkOWYxZWFhMC8xLzh0bTUzM0I5VHVW
VHVfNEg0MURrcUQtNWlWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANVtlDANBgkqhkiG9w0BAQsFAAOC
AQEAQg4Nu6ZRLlRW7zz+vtedY77iwwC9j4TgZk60X6NXnQOllv1TqloyWRHV7Zmv
0mYX7BHZHeAAc6I4TQg2fyZ4oj3BBAkNJ+vKlMG3ZHl3XXTzZ77vFQiFyNKuNufn
bI5WgPcfrG4x+SOrJvqklQ0kUW/AKhHtS9Kb2uU2wS/ytFockGHKOrKB66bQUgZv
FPviLk+DiyDl+14+Jh1UwJOkBHwWCeWnhgLa/vEvjaZYtMqo7tYLJ485gYJ14fO7
2NKUWiucllUEO6B/ylRwgD4rH22+n+HtWOqpb/O6EJCDH/vThKRZ3WKLB8nyHUMi
TUyDF8+fZN59/mRvRB1FmjRDQw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:26 2023 by rpki-client on console-ams.rpki-client.org