Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IeKO5eUJiFf1yMGUG6wzIYj4Kno.roa
File: IeKO5eUJiFf1yMGUG6wzIYj4Kno.roa (raw, json)
Hash identifier: OK5dkNUQq5WJiI7JaK4RTSKmfEJNB6Ufdt3hjhmdJDU=
Subject key identifier: 21:E2:8E:E5:E5:09:88:57:F5:C8:C1:94:1B:AC:33:21:88:F8:2A:7A
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 0505E66F
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IeKO5eUJiFf1yMGUG6wzIYj4Kno.roa
Signing time: Sat 01 Jan 2022 06:59:28 +0000
ROA not before: Sat 01 Jan 2022 06:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8
IP address blocks: 194.247.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84272751 (0x505e66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Jan 1 06:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e28ee5e5098857f5c8c1941bac332188f82a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:91:b9:b2:29:1f:55:5e:b1:17:7d:af:54:
8b:5b:b4:ff:22:b5:5a:78:66:89:d9:12:6d:88:8d:
a0:44:ba:8a:ea:a4:e3:56:dd:76:6d:1b:11:3e:71:
5c:26:a9:16:ca:24:6b:1a:ff:9e:c3:64:ad:97:61:
6e:39:5c:c4:da:6b:b5:a6:e8:48:a5:db:31:ae:24:
1d:22:93:21:b7:4f:ff:d6:65:4b:d9:82:76:e6:23:
dc:8b:eb:30:c2:fe:95:ba:29:06:7f:2a:2a:b8:02:
74:93:e8:16:dc:e1:bc:d8:fb:fd:15:33:56:d2:b0:
8d:5b:f3:e1:1a:e9:4e:14:21:20:4c:0e:95:d7:07:
50:d3:9f:34:96:3b:91:64:ab:d0:6a:3e:f6:e5:b7:
dd:f3:16:37:6f:e2:52:3b:07:fe:76:14:a9:e0:3e:
72:94:02:34:bf:0e:fd:f1:0d:43:b9:cd:e7:6e:a2:
fc:04:07:e1:20:cd:08:0e:ad:59:8a:5a:76:44:0e:
fe:ef:fb:fc:f7:61:57:b5:48:4c:d9:28:b0:ad:58:
c1:1e:ab:e4:ad:57:63:48:54:44:2b:e5:6f:46:26:
f4:cb:97:3c:a6:92:74:42:a9:60:26:86:82:bb:03:
fc:e2:36:68:ec:38:fd:19:e8:a5:0a:31:79:c0:ba:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:8E:E5:E5:09:88:57:F5:C8:C1:94:1B:AC:33:21:88:F8:2A:7A
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/IeKO5eUJiFf1yMGUG6wzIYj4Kno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e9:20:a3:b3:42:97:ab:46:26:3a:aa:f9:00:71:ab:5f:ad:
fc:a8:4e:00:e7:90:b8:3e:7e:16:af:88:91:7a:af:6f:62:88:
25:12:b0:fc:dd:1a:11:9f:1d:b8:b1:3e:20:df:4d:f6:89:ca:
a4:33:dd:27:cb:09:6b:d7:1f:82:98:55:10:43:71:c4:e0:d8:
b9:93:6b:b2:98:4d:e5:2a:05:ea:6c:dd:05:b1:98:fc:35:00:
bb:f5:7c:a8:ce:44:e1:96:1d:c9:69:0b:e9:91:9b:01:c6:57:
45:04:ad:6a:c5:f5:61:1b:64:4d:be:a4:1f:73:96:cc:f7:7d:
15:86:d4:53:d2:a0:bc:6b:de:9d:0b:5d:ee:6c:dc:66:8e:13:
99:bb:3f:26:44:33:b5:66:a2:97:4c:e0:90:5e:f5:02:4b:24:
0a:c7:e8:55:11:71:77:8a:e4:60:56:7d:07:bc:87:0a:b9:b5:
00:42:ed:cc:e8:c9:19:c5:c7:ce:aa:9e:b5:4b:fa:5e:f2:5e:
f9:b7:5b:39:ca:39:93:62:93:fa:b6:72:a4:e1:60:9b:4e:fd:
b0:fd:06:e6:a1:20:d9:ff:0b:7c:fe:0b:e4:3a:6c:64:a5:a1:
3f:71:f6:68:4a:a9:09:17:88:40:3c:6c:51:50:ed:3d:13:83:
06:b9:d5:c5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQXmbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ZTQ5NDNmNTIwM2Q0MzQ2MGExM2FkNGVhOWQ3ZDViOTUwYzYxM2NkMB4XDTIyMDEw
MTA2NTkyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjFlMjhlZTVlNTA5
ODg1N2Y1YzhjMTk0MWJhYzMzMjE4OGY4MmE3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ83kbmyKR9VXrEXfa9Ui1u0/yK1WnhmidkSbYiNoES6iuqk
41bddm0bET5xXCapFsokaxr/nsNkrZdhbjlcxNprtaboSKXbMa4kHSKTIbdP/9Zl
S9mCduYj3IvrMML+lbopBn8qKrgCdJPoFtzhvNj7/RUzVtKwjVvz4RrpThQhIEwO
ldcHUNOfNJY7kWSr0Go+9uW33fMWN2/iUjsH/nYUqeA+cpQCNL8O/fENQ7nN526i
/AQH4SDNCA6tWYpadkQO/u/7/PdhV7VITNkosK1YwR6r5K1XY0hURCvlb0Ym9MuX
PKaSdEKpYCaGgrsD/OI2aOw4/RnopQoxecC6vAMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQh4o7l5QmIV/XIwZQbrDMhiPgqejAfBgNVHSMEGDAWgBS+SUP1ID1DRgoT
rU6p19W5UMYTzTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ZrbEQ5U0E5UTBZS0U2MU9xZGZWdVZER0U4MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2EvMzMxNGVjLThmZjAtNDk1MC04NThmLWEwNTFhZTYzZGJhMS8x
L0llS081ZVVKaUZmMXlNR1VHNnd6SVlqNEtuby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Ev
MzMxNGVjLThmZjAtNDk1MC04NThmLWEwNTFhZTYzZGJhMS8xL3ZrbEQ5U0E5UTBZ
S0U2MU9xZGZWdVZER0U4MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAML3pDANBgkqhkiG9w0BAQsFAAOC
AQEAa+kgo7NCl6tGJjqq+QBxq1+t/KhOAOeQuD5+Fq+IkXqvb2KIJRKw/N0aEZ8d
uLE+IN9N9onKpDPdJ8sJa9cfgphVEENxxODYuZNrsphN5SoF6mzdBbGY/DUAu/V8
qM5E4ZYdyWkL6ZGbAcZXRQStasX1YRtkTb6kH3OWzPd9FYbUU9KgvGvenQtd7mzc
Zo4Tmbs/JkQztWail0zgkF71AkskCsfoVRFxd4rkYFZ9B7yHCrm1AELtzOjJGcXH
zqqetUv6XvJe+bdbOco5k2KT+rZypOFgm079sP0G5qEg2f8LfP4L5DpsZKWhP3H2
aEqpCReIQDxsUVDtPRODBrnVxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org