Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RwiD0IJRasejuHvsc532dUg2j-Y.roa
File: RwiD0IJRasejuHvsc532dUg2j-Y.roa (raw, json)
Hash identifier: 3o9QQ+Eb5L9jieIH14UkZJuIZQ0tOnfSU95bG5nt1Eg=
Subject key identifier: 47:08:83:D0:82:51:6A:C7:A3:B8:7B:EC:73:9D:F6:75:48:36:8F:E6
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01848D30B15BF79D5C0A29155DB4E8B21A0F
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RwiD0IJRasejuHvsc532dUg2j-Y.roa
Signing time: Sat 19 Nov 2022 00:01:29 +0000
ROA not before: Sat 19 Nov 2022 00:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 81.199.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8d:30:b1:5b:f7:9d:5c:0a:29:15:5d:b4:e8:b2:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Nov 19 00:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=470883d082516ac7a3b87bec739df67548368fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:5f:16:c5:3e:11:4d:8a:ad:07:a1:bc:48:
9d:22:44:1e:76:7d:a8:2b:b1:3d:4c:ac:17:05:4f:
3f:70:75:2f:d8:4f:e4:9a:54:29:bf:f8:df:45:c0:
67:9e:26:6e:0c:84:2d:c4:01:3d:8c:28:89:d4:a1:
fc:e8:a8:96:91:15:19:94:db:7f:c3:18:f0:55:ee:
fb:b7:cb:e5:75:f4:47:76:05:17:9e:82:7a:43:32:
bc:fc:2a:5d:08:5b:f5:35:76:87:78:9b:e0:2a:47:
72:16:86:69:24:9d:1c:0b:37:ae:31:cc:80:95:4b:
9d:06:42:dc:d7:9b:59:86:c9:30:e2:73:15:2f:ac:
06:8b:a9:ed:13:16:f0:cc:f8:3a:11:19:bc:bc:1f:
01:c4:5c:83:fa:67:db:ad:37:f4:9a:aa:a1:c8:3f:
8f:b6:ef:0e:07:bb:3a:02:f3:36:34:35:35:6b:c9:
e6:06:de:d9:c3:4b:2a:4e:7c:5a:ff:ee:85:7e:69:
6f:b4:bd:22:2b:57:15:b5:97:ed:77:ec:69:e7:50:
9f:f2:56:57:6e:c1:cd:f5:bb:56:b8:cb:76:b7:e4:
be:b7:3a:15:9c:de:5d:69:b4:a2:a2:4e:fc:87:8e:
76:08:ba:dd:e4:1e:00:9f:70:73:76:2b:72:0e:b0:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:83:D0:82:51:6A:C7:A3:B8:7B:EC:73:9D:F6:75:48:36:8F:E6
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/RwiD0IJRasejuHvsc532dUg2j-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:26:a3:9a:2f:e6:58:67:84:c2:2a:94:3a:01:38:76:83:48:
f4:ef:0e:07:f0:23:e3:54:25:d4:ad:2d:ef:14:4e:01:10:c2:
20:76:df:dd:4e:e4:9f:bc:be:49:51:f8:03:51:6b:dd:70:ab:
4f:16:bf:13:ed:65:e0:ac:bb:99:4f:41:b1:68:f1:00:a5:f6:
ac:da:cf:86:5f:00:da:a7:5c:b5:52:34:3a:e9:29:5d:3f:b6:
fa:fc:52:28:65:ba:49:93:21:0a:b6:b5:ba:ba:08:8e:e3:3b:
43:2b:70:f8:a1:72:1b:c4:c8:7e:66:2e:87:df:77:3e:5b:5f:
34:ed:15:7e:07:1d:1f:b0:37:55:37:8b:7a:97:84:46:9c:32:
38:7f:a6:3e:ee:60:e6:86:5d:04:cb:c0:75:29:24:a8:c6:e9:
04:48:c7:48:d8:49:aa:00:f9:d5:f4:97:27:3f:e9:bb:21:d1:
4a:27:69:23:7f:4b:b7:72:56:b6:ac:4d:52:db:e1:dd:2b:e5:
44:84:e0:e6:e4:e7:33:8b:8d:a3:9f:0b:d8:bb:30:ae:77:d9:
53:f5:65:a0:84:0b:c5:0c:80:39:39:15:0f:cb:1a:0f:a9:1f:
d9:8e:59:8e:f9:5a:e0:91:ec:6e:62:52:3e:b7:e5:e3:e6:2a:
5b:26:b8:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSNMLFb951cCikVXbToshoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjIxMTE5MDAwMTI5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzA4ODNkMDgyNTE2YWM3YTNiODdiZWM3MzlkZjY3NTQ4MzY4ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZlfFsU+EU2KrQehvEidIkQedn2o
K7E9TKwXBU8/cHUv2E/kmlQpv/jfRcBnniZuDIQtxAE9jCiJ1KH86KiWkRUZlNt/
wxjwVe77t8vldfRHdgUXnoJ6QzK8/CpdCFv1NXaHeJvgKkdyFoZpJJ0cCzeuMcyA
lUudBkLc15tZhskw4nMVL6wGi6ntExbwzPg6ERm8vB8BxFyD+mfbrTf0mqqhyD+P
tu8OB7s6AvM2NDU1a8nmBt7Zw0sqTnxa/+6FfmlvtL0iK1cVtZftd+xp51Cf8lZX
bsHN9btWuMt2t+S+tzoVnN5dabSiok78h452CLrd5B4An3BzdityDrAq0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEcIg9CCUWrHo7h77HOd9nVINo/mMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvUndpRDBJSlJhc2VqdUh2c2M1MzJkVWcyai1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUccaMA0G
CSqGSIb3DQEBCwUAA4IBAQAMJqOaL+ZYZ4TCKpQ6ATh2g0j07w4H8CPjVCXUrS3v
FE4BEMIgdt/dTuSfvL5JUfgDUWvdcKtPFr8T7WXgrLuZT0GxaPEApfas2s+GXwDa
p1y1UjQ66SldP7b6/FIoZbpJkyEKtrW6ugiO4ztDK3D4oXIbxMh+Zi6H33c+W180
7RV+Bx0fsDdVN4t6l4RGnDI4f6Y+7mDmhl0Ey8B1KSSoxukESMdI2EmqAPnV9Jcn
P+m7IdFKJ2kjf0u3cla2rE1S2+HdK+VEhODm5Oczi42jnwvYuzCud9lT9WWghAvF
DIA5ORUPyxoPqR/ZjlmO+VrgkexuYlI+t+Xj5ipbJriO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org